This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer File: WgqpaCxoOpwblc6WdtUbINOf0q4.cer (raw, json) Hash identifier: pT19nr6HY9gZ2LET3kr5o9+KcwsNFiVb7rjpvZJFtHw= Subject key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F2CE79CEF0B400B424CEF0BEEA730 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210687 IP: 185.153.234.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:2c:e7:9c:ef:0b:40:0b:42:4c:ef:0b:ee:a7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8a:56:ae:f3:6a:d6:68:b9:98:12:e7:5f:e2: 01:a0:51:d2:cd:7a:a4:2e:7a:e4:dc:6d:e6:8a:3a: ae:cb:a5:56:be:b5:b3:e7:e6:e4:3d:c3:0d:52:03: 53:7b:75:f5:cf:cc:d9:a7:9c:36:69:36:6f:ba:f3: e5:f9:74:0e:49:c8:5a:93:d8:43:2f:8c:b6:73:02: 42:c1:30:ab:0d:32:ee:0f:58:8b:9f:ba:95:d9:c7: f7:e1:7e:a7:2c:66:c4:aa:91:8f:58:0d:e1:c5:49: 06:f1:4a:bc:a4:d1:c9:f2:2a:af:97:4a:33:5c:1a: 09:3a:56:6b:11:4b:10:e6:6b:bd:20:2a:fa:4b:36: 84:1a:9a:ae:fc:c0:43:13:3d:ce:5e:07:1a:3d:1a: 2d:0b:f5:f4:db:83:78:73:01:78:78:ae:f1:74:69: 42:1f:80:56:4c:7d:9c:fd:be:95:72:31:78:60:29: 37:81:fd:30:f2:2b:48:bc:e1:e0:5a:31:62:d1:d3: 94:1b:d5:7a:5b:7a:80:86:8f:ec:b4:6d:43:1b:5d: 91:d9:5a:9b:4c:c7:71:8a:d5:45:47:63:49:a8:a0: d9:09:b3:d7:83:e6:9c:c7:da:28:2c:12:93:bc:f6: 65:ff:e5:88:a4:ab:a4:04:e5:42:50:b4:45:f6:da: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.234.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210687 Signature Algorithm: sha256WithRSAEncryption 81:05:a9:51:d2:99:c3:7b:b6:0f:b5:68:65:c3:e0:4f:4d:9d: a1:a0:52:95:4b:f2:ca:66:ea:bb:39:67:f0:ee:28:41:b1:c0: c7:12:80:3a:88:51:12:3a:c0:5d:99:22:21:22:6b:25:b0:37: cd:88:41:17:66:95:ba:a4:74:dc:3a:20:fe:84:cd:f9:00:d7: f3:69:bb:88:98:3a:c9:fb:9c:fe:6d:46:ed:62:d4:49:78:b7: ad:d8:97:cb:0e:c1:87:11:f8:f9:71:1e:1e:26:38:54:28:a5: 44:e3:f7:9b:86:9a:a7:fa:12:da:6e:78:24:4c:ad:51:a3:b6: 18:2b:4d:fb:e1:b5:0a:39:20:31:1c:f6:c2:f2:a8:4f:cd:8e: a0:0d:f4:c3:06:fd:9b:a9:6e:83:9e:25:e7:4e:f9:a9:6a:36: 24:a7:d7:2e:b9:23:88:19:25:04:9c:f0:f3:1f:d8:07:ea:ba: 4d:9d:97:20:29:7e:2b:da:55:f6:28:0f:6c:54:a2:53:59:07: c5:a2:09:9a:c8:9c:b5:5a:16:ae:00:5d:ff:05:e0:ec:87:0f: b4:6b:00:e8:e6:de:bd:84:c6:cb:e0:92:1f:52:90:43:d7:2c: ab:2d:c9:d8:bd:95:e4:ed:bd:cf:e8:b2:3e:8a:f5:3b:3e:cc: a8:a8:1e:fd -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8fyznnO8LQAtCTO8L7qcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTBhYTk2ODJjNjgzYTljMWI5NWNlOTY3NmQ1MWIyMGQzOWZkMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmopWrvNq1mi5mBLnX+IBoFHSzXqk Lnrk3G3mijquy6VWvrWz5+bkPcMNUgNTe3X1z8zZp5w2aTZvuvPl+XQOSchak9hD L4y2cwJCwTCrDTLuD1iLn7qV2cf34X6nLGbEqpGPWA3hxUkG8Uq8pNHJ8iqvl0oz XBoJOlZrEUsQ5mu9ICr6SzaEGpqu/MBDEz3OXgcaPRotC/X024N4cwF4eK7xdGlC H4BWTH2c/b6VcjF4YCk3gf0w8itIvOHgWjFi0dOUG9V6W3qAho/stG1DG12R2Vqb TMdxitVFR2NJqKDZCbPXg+acx9ooLBKTvPZl/+WIpKukBOVCULRF9tps2wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFoKqWgsaDqcG5XOlnbVGyDTn9KuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2Y0OTFh MC1iNjY2LTRlOWYtYjBmOS02ZWVkNTI5NjhiMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvZjQ5MWEw LWI2NjYtNGU5Zi1iMGY5LTZlZWQ1Mjk2OGIxYy8xL1dncXBhQ3hvT3B3YmxjNldk dFViSU5PZjBxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuZnqMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM2/zANBgkqhkiG9w0BAQsFAAOCAQEAgQWpUdKZw3u2D7VoZcPgT02doaBSlUvy ymbquzln8O4oQbHAxxKAOohREjrAXZkiISJrJbA3zYhBF2aVuqR03Dog/oTN+QDX 82m7iJg6yfuc/m1G7WLUSXi3rdiXyw7BhxH4+XEeHiY4VCilROP3m4aap/oS2m54 JEytUaO2GCtN++G1CjkgMRz2wvKoT82OoA30wwb9m6lug54l5075qWo2JKfXLrkj iBklBJzw8x/YB+q6TZ2XICl+K9pV9igPbFSiU1kHxaIJmsictVoWrgBd/wXg7IcP tGsA6ObevYTGy+CSH1KQQ9csqy3J2L2V5O29z+iyPor1Oz7MqKge/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:25 2026 by rpki-client