This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer (raw, json) Hash identifier: orwFQxFfMCYcp6o7GUESL+qZPJ4Ar5weuoBhAEEYapQ= Subject key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6AD884A15EBCACF097B078B02AA0F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214486 IP: 2001:67c:1804::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ad:88:4a:15:eb:ca:cf:09:7b:07:8b:02:aa:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:d1:6d:73:5b:49:62:54:07:2e:bd:b2:c1: c7:be:de:52:d5:c5:f3:b5:b0:bb:6a:63:37:0c:74: cc:03:0d:29:b6:79:ab:79:e0:62:64:b2:1e:46:83: 29:45:50:10:97:ac:0a:05:dc:63:32:e2:bc:e8:9f: 52:2d:f0:64:fc:77:32:7c:fc:fb:46:f1:df:8a:8c: 19:6f:ea:68:36:0b:05:a8:e7:19:10:67:93:bc:eb: f7:5c:b4:77:ec:3c:60:d6:41:bb:a0:08:7f:69:4d: 91:1a:56:1b:a1:9c:9f:e2:89:c6:22:7f:93:80:63: 0d:0e:e9:90:ae:eb:e3:15:c6:e8:b8:61:1b:d2:3a: ee:75:ae:a0:eb:6e:4d:10:ea:e6:5f:a3:a8:21:85: 70:3a:b8:31:23:bd:94:f8:d3:e8:22:e9:95:6f:37: 7c:4c:6c:a7:48:14:b7:03:76:de:5d:6d:17:c3:ad: fd:1d:fb:c6:ff:30:de:72:83:fc:cc:7f:ef:9a:67: 7e:c9:83:39:4b:59:5c:3c:5b:78:2c:2d:f5:9e:37: 08:e4:01:da:b8:ad:54:7d:e8:5a:fc:75:9f:38:00: 1c:2d:ee:e0:b0:7f:dd:3e:32:7a:3f:9f:35:6e:2a: c5:d9:68:ba:da:d6:7a:11:1f:73:77:0a:2f:e1:d4: 97:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1804::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214486 Signature Algorithm: sha256WithRSAEncryption 36:eb:79:51:74:74:b5:82:fd:90:1d:3d:af:9e:ba:5a:fa:55: 3b:d5:84:4f:4b:97:07:49:66:84:14:16:3c:9b:24:6d:b0:3c: d6:17:44:51:52:31:d7:73:0c:18:ac:8c:44:78:58:fd:55:ce: 87:95:f2:f3:dd:dc:18:cc:62:fc:d6:e3:30:7c:60:a6:7d:8b: 2c:a5:35:7b:21:d7:c8:e0:c8:11:fd:10:a1:04:4b:2b:73:be: f5:3a:c4:ae:28:f4:7d:47:7e:97:ee:0e:4e:4b:b4:19:39:45: 64:b6:b8:fd:00:e8:0f:ed:92:91:9a:c8:84:66:79:50:80:43: 74:81:17:36:49:0b:c0:5d:2b:24:e5:20:dd:43:d7:55:1c:de: 3f:1a:fb:61:b2:73:a9:13:b5:57:53:2c:c5:f4:5c:f5:9d:a2: d5:0c:09:21:76:80:ac:23:0f:d4:66:19:2e:58:9e:5e:bf:08: a9:9d:91:41:3e:84:c8:79:71:71:af:7d:80:6b:3a:04:bd:10: a9:8f:88:48:59:cd:05:f6:8d:81:86:52:da:02:8c:69:ea:d4: 24:54:83:06:ac:15:f4:56:9b:f4:ac:a3:d5:0e:08:2f:b4:c4: 21:ef:b9:a9:c4:3a:10:85:67:72:c3:9b:c7:8a:7a:20:8c:87: 3c:4c:7b:19 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt+pq2IShXrys8JeweLAqoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWZhNzAyNzY2MWFjOGM0YTc3ZmYyYWJkNTk2ODZhZjk5ZjE1OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz7RbXNbSWJUBy69ssHHvt5S1cXz tbC7amM3DHTMAw0ptnmreeBiZLIeRoMpRVAQl6wKBdxjMuK86J9SLfBk/HcyfPz7 RvHfiowZb+poNgsFqOcZEGeTvOv3XLR37Dxg1kG7oAh/aU2RGlYboZyf4onGIn+T gGMNDumQruvjFcbouGEb0jruda6g625NEOrmX6OoIYVwOrgxI72U+NPoIumVbzd8 TGynSBS3A3beXW0Xw639HfvG/zDecoP8zH/vmmd+yYM5S1lcPFt4LC31njcI5AHa uK1Ufeha/HWfOAAcLe7gsH/dPjJ6P581birF2Wi62tZ6ER9zdwov4dSXuQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFFn6cCdmGsjEp3/yq9WWhq+Z8VkoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2NiZDlk MS04NGE0LTQ1MWQtOTIxNC0wOTA2ZGExYjIzYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvY2JkOWQx LTg0YTQtNDUxZC05MjE0LTA5MDZkYTFiMjNhNi8xL1dmcHdKMllheU1TbmZfS3Ix WmFHcjVueFdTZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBgEMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNF1jANBgkqhkiG9w0BAQsFAAOCAQEANut5UXR0tYL9kB09r566WvpVO9WE T0uXB0lmhBQWPJskbbA81hdEUVIx13MMGKyMRHhY/VXOh5Xy893cGMxi/NbjMHxg pn2LLKU1eyHXyODIEf0QoQRLK3O+9TrErij0fUd+l+4OTku0GTlFZLa4/QDoD+2S kZrIhGZ5UIBDdIEXNkkLwF0rJOUg3UPXVRzePxr7YbJzqRO1V1MsxfRc9Z2i1QwJ IXaArCMP1GYZLlieXr8IqZ2RQT6EyHlxca99gGs6BL0QqY+ISFnNBfaNgYZS2gKM aerUJFSDBqwV9Fab9Kyj1Q4IL7TEIe+5qcQ6EIVncsObx4p6IIyHPEx7GQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:52 2026 by rpki-client