This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer (raw, json) Hash identifier: Km5ZduLBgbMQS5F+AMVtOWqfj+R5LWi/7MQOoLPOK3s= Subject key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3553C29D0D9729A8C80797AECFC5A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31688 IP: 5.63.24.0/21 IP: 91.190.168.0/21 IP: 185.85.76.0/22 IP: 2a02:798::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:55:3c:29:d0:d9:72:9a:8c:80:79:7a:ec:fc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a141c5090824d0a17c29ec4050e21007113fbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:dd:dd:a4:6d:a5:15:80:1e:fc:3f:ac:22: cf:39:45:82:d7:af:83:d3:3a:ac:91:b6:92:ab:0b: 25:94:d1:26:a1:36:ce:74:b5:16:af:0e:7f:f7:3c: 77:69:71:71:c8:6a:ed:97:99:ef:34:ab:f5:eb:42: 8b:ec:13:64:26:a2:99:ea:91:64:38:dc:48:49:4a: 6b:d0:c6:12:9d:11:4f:83:a0:31:bb:98:94:0f:39: a4:a1:32:4d:ad:8d:6b:dd:d1:da:c2:81:a5:a7:b8: 79:fa:52:ae:80:72:84:22:f2:6c:13:6a:ac:f1:6a: f3:d3:bb:28:4d:c3:11:2b:f1:e0:51:c3:50:da:66: af:f5:bf:18:d1:2e:a5:56:25:fb:eb:76:e2:65:7a: 69:86:a9:22:53:f1:e1:5d:1b:43:e8:6d:2c:21:c5: ed:ba:ca:8f:63:e6:7a:2c:1e:77:fa:17:aa:fe:12: 2e:9a:51:4b:22:ed:3c:8c:d8:35:31:f9:da:1e:a6: fe:03:78:ab:b4:59:36:e4:ca:75:07:d5:f0:21:f6: 0f:d6:ab:6a:98:a1:a9:4c:2c:08:34:81:97:22:ae: 25:9c:63:a4:a1:a8:2e:dc:8b:67:f7:d9:75:f2:f5: 6e:c2:28:ea:c4:f5:d8:3b:7b:34:1d:4a:72:af:a9: 5f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.24.0/21 91.190.168.0/21 185.85.76.0/22 IPv6: 2a02:798::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31688 Signature Algorithm: sha256WithRSAEncryption 3f:a9:ad:80:76:84:48:af:fd:40:23:87:4d:5c:ff:20:7f:2a: 54:8e:83:ec:ab:1a:f2:3f:f8:56:35:67:66:b9:6b:ff:b8:20: 42:f4:36:b5:02:db:4a:08:d3:eb:2c:65:1f:ae:78:a8:48:a7: 1a:4b:7d:3c:9e:fe:e0:07:6b:f7:90:2f:9a:02:b3:d5:08:5f: 56:87:28:f3:07:9c:f1:0f:5a:6e:db:98:22:0b:d2:63:48:46: 02:6b:6f:c2:f9:2d:36:c8:26:09:fa:a9:70:20:24:e5:c7:3d: b1:24:9e:9b:de:f6:2b:8f:48:c9:df:57:05:73:f6:a2:2f:26: 5d:00:43:de:df:49:62:14:12:7d:fa:e6:81:c3:b2:e7:f5:46: 0d:7c:34:ef:e5:c5:74:f3:a5:4a:97:0e:f9:ad:95:f1:42:e0: d9:bc:23:2e:80:97:76:c2:65:3a:b8:47:8c:0d:de:be:af:5b: 6e:bb:37:12:ac:97:aa:b8:82:6b:64:14:15:68:96:48:18:a5: 2a:ce:86:83:09:9a:63:00:18:2e:5b:66:d2:7d:a6:df:c6:ae: 31:22:8a:de:d0:04:12:76:54:2e:f4:ac:1e:c7:c6:f9:09:e4: 2f:37:0a:89:fc:45:0f:32:06:3c:6f:71:b4:0e:cf:2b:b8:56: 4a:bf:9f:e7 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt7o1U8KdDZcpqMgHl67PxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTE0MWM1MDkwODI0ZDBhMTdjMjllYzQwNTBlMjEwMDcxMTNmYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSXd3aRtpRWAHvw/rCLPOUWC16+D 0zqskbaSqwsllNEmoTbOdLUWrw5/9zx3aXFxyGrtl5nvNKv160KL7BNkJqKZ6pFk ONxISUpr0MYSnRFPg6Axu5iUDzmkoTJNrY1r3dHawoGlp7h5+lKugHKEIvJsE2qs 8Wrz07soTcMRK/HgUcNQ2mav9b8Y0S6lViX763biZXpphqkiU/HhXRtD6G0sIcXt usqPY+Z6LB53+heq/hIumlFLIu08jNg1MfnaHqb+A3irtFk25Mp1B9XwIfYP1qtq mKGpTCwINIGXIq4lnGOkoagu3Itn99l18vVuwijqxPXYO3s0HUpyr6lfYQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFFoUHFCQgk0KF8KexAUOIQBxE/vaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlL2IyMGU5 MC1iZjZlLTRlMjUtODdkNS1lY2VlZmY4ZTg0ZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvYjIwZTkw LWJmNmUtNGUyNS04N2Q1LWVjZWVmZjhlODRlMC8xL1doUWNVSkNDVFFvWHdwN0VC UTRoQUhFVC05by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDBT8YAwQDW76oAwQCuVVMMA0EAgACMAcDBQAq AgeYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnvIMA0GCSqGSIb3DQEBCwUAA4IB AQA/qa2AdoRIr/1AI4dNXP8gfypUjoPsqxryP/hWNWdmuWv/uCBC9Da1AttKCNPr LGUfrnioSKcaS308nv7gB2v3kC+aArPVCF9WhyjzB5zxD1pu25giC9JjSEYCa2/C +S02yCYJ+qlwICTlxz2xJJ6b3vYrj0jJ31cFc/aiLyZdAEPe30liFBJ9+uaBw7Ln 9UYNfDTv5cV086VKlw75rZXxQuDZvCMugJd2wmU6uEeMDd6+r1tuuzcSrJequIJr ZBQVaJZIGKUqzoaDCZpjABguW2bSfabfxq4xIore0AQSdlQu9Kwex8b5CeQvNwqJ /EUPMgY8b3G0Ds8ruFZKv5/n -----END CERTIFICATE-----Generated at Sun Jan 25 07:29:00 2026 by rpki-client