This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer File: Wm-SlVId8woVj1Brp8uHOrlSncM.cer (raw, json) Hash identifier: 6DIvGdZICoviyMYbhIriwnve9XMCYbzasjhhMPD7NEM= Subject key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECF313D7FFDAD7FC60D0A1D0D58D2E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5408 AS: 50745 AS: 199399 IP: 37.32.128.0/17 IP: 62.217.64.0/18 IP: 83.212.0.0/16 IP: 91.227.108.0/24 IP: 176.126.38.0/24 IP: 185.1.123.0/24 IP: 185.5.76.0/22 IP: 185.81.196.0/22 IP: 193.105.109.0/24 IP: 194.42.50.0 -- 194.42.54.255 IP: 194.177.192.0/19 IP: 195.130.64.0/18 IP: 195.251.0.0/16 IP: 2001:648::/29 IP: 2001:7f8:6e::/48 IP: 2001:7f8:ce::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f3:13:d7:ff:da:d7:fc:60:d0:a1:d0:d5:8d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:5a:25:c2:86:86:a0:66:e0:be:61:0e:30: e8:e2:6c:2c:e1:5b:ec:48:75:fc:78:42:80:5c:93: 3c:4e:df:e4:2a:20:67:35:21:94:e3:6f:d5:4d:67: 11:e3:a8:84:5f:44:7a:6c:bf:9e:2b:94:0c:30:d5: f1:a7:12:06:c9:7d:94:d6:14:23:73:87:ff:f4:b9: ce:26:08:48:2a:5a:1a:89:21:4a:2c:1e:e4:47:23: 4c:a1:67:3c:1e:bd:ba:b4:66:f2:cd:0e:20:23:28: 3b:24:32:a4:d9:cb:76:e1:84:1e:69:41:b0:fc:8a: 0f:29:59:ae:c3:e2:f1:a3:58:39:ba:14:c7:b8:2b: 52:63:bd:da:b1:32:e8:57:8a:84:87:ac:3f:08:4c: 15:33:e2:77:b7:37:e6:e3:72:15:d0:ab:8c:a9:c9: b2:0b:b7:23:e8:b9:1a:a6:21:7d:d7:bc:7d:00:7b: 57:44:27:9c:b9:25:a9:37:f6:af:3c:87:9d:4a:e3: 6a:8d:cc:35:a6:fd:f6:8c:46:63:fb:80:dc:34:c2: cf:92:02:a7:75:94:2e:c5:5c:77:85:fa:97:81:3e: 4c:01:e6:ee:90:f5:d4:2f:8f:21:00:f6:29:d2:50: 9c:46:f6:6b:fe:d7:ea:4b:ed:7c:4c:aa:ba:de:34: 32:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.128.0/17 62.217.64.0/18 83.212.0.0/16 91.227.108.0/24 176.126.38.0/24 185.1.123.0/24 185.5.76.0/22 185.81.196.0/22 193.105.109.0/24 194.42.50.0-194.42.54.255 194.177.192.0/19 195.130.64.0/18 195.251.0.0/16 IPv6: 2001:648::/29 2001:7f8:6e::/48 2001:7f8:ce::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5408 50745 199399 Signature Algorithm: sha256WithRSAEncryption 25:37:fa:78:26:84:5a:78:3c:66:45:36:64:b2:db:ec:68:44: 80:3e:c1:5f:23:00:5c:aa:6a:54:08:81:2a:8d:3a:5a:0f:fb: c3:41:ea:33:5a:90:e5:24:18:43:5b:6c:7c:ac:9a:b8:4e:ab: 0f:ea:49:66:b0:b1:62:eb:a3:ff:ac:95:95:06:b5:5a:20:91: c8:cc:56:33:74:ea:83:eb:fc:69:ad:6e:52:b7:64:c8:b7:78: 2a:85:6c:3a:b9:46:f7:e7:d3:26:7d:2c:00:e4:7d:87:47:26: e7:3e:41:5f:7a:d5:e7:f1:65:ed:36:4d:a7:5a:85:ee:1f:90: d0:9d:78:72:98:9c:83:8e:29:70:1e:00:5e:6b:8b:83:48:ca: 8f:dc:26:60:b1:e3:1e:9b:32:3e:23:3a:c2:f3:e6:b9:1b:a0: 62:02:4c:59:27:c5:00:e8:0c:ed:7f:4b:f5:23:c8:c7:02:ff: a5:70:f3:77:51:1b:3c:04:32:d7:6d:37:b1:e0:c6:99:70:16: 9c:48:17:a4:8d:25:5b:9e:e8:6c:0a:5c:17:18:dc:86:de:7a: d7:fb:b7:ff:96:4f:41:c9:ba:b2:88:9d:f1:13:a9:cc:b3:83: 9f:00:14:28:6b:83:18:d7:00:05:fa:e9:64:73:bb:a6:e9:a5: 8d:bc:2d:e7 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgISAZt87PMT1//a1/xg0KHQ1Y0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTZmOTI5NTUyMWRmMzBhMTU4ZjUwNmJhN2NiODczYWI5NTI5ZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupZaJcKGhqBm4L5hDjDo4mws4Vvs SHX8eEKAXJM8Tt/kKiBnNSGU42/VTWcR46iEX0R6bL+eK5QMMNXxpxIGyX2U1hQj c4f/9LnOJghIKloaiSFKLB7kRyNMoWc8Hr26tGbyzQ4gIyg7JDKk2ct24YQeaUGw /IoPKVmuw+Lxo1g5uhTHuCtSY73asTLoV4qEh6w/CEwVM+J3tzfm43IV0KuMqcmy C7cj6LkapiF917x9AHtXRCecuSWpN/avPIedSuNqjcw1pv32jEZj+4DcNMLPkgKn dZQuxVx3hfqXgT5MAebukPXUL48hAPYp0lCcRvZr/tfqS+18TKq63jQyQwIDAQAB o4IDGTCCAxUwHQYDVR0OBBYEFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2E5Zjkz Yi1iZTMxLTQ1Y2YtYWE3ZS1hYWE0NTUzZDJhYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYTlmOTNi LWJlMzEtNDVjZi1hYTdlLWFhYTQ1NTNkMmFiZC8xL1dtLVNsVklkOHdvVmoxQnJw OHVIT3JsU25jTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGOBggrBgEF BQcBBwEB/wR/MH0wWgQCAAEwVAMEByUggAMEBj7ZQAMDAFPUAwQAW+NsAwQAsH4m AwQAuQF7AwQCuQVMAwQCuVHEAwQAwWltMAwDBAHCKjIDBADCKjYDBAXCscADBAbD gkADAwDD+zAfBAIAAjAZAwUDIAEGSAMHACABB/gAbgMHACABB/gAzjAjBggrBgEF BQcBCAEB/wQUMBKgEDAOAgIVIAIDAMY5AgMDCucwDQYJKoZIhvcNAQELBQADggEB ACU3+ngmhFp4PGZFNmSy2+xoRIA+wV8jAFyqalQIgSqNOloP+8NB6jNakOUkGENb bHysmrhOqw/qSWawsWLro/+slZUGtVogkcjMVjN06oPr/GmtblK3ZMi3eCqFbDq5 Rvfn0yZ9LADkfYdHJuc+QV961efxZe02Tadahe4fkNCdeHKYnIOOKXAeAF5ri4NI yo/cJmCx4x6bMj4jOsLz5rkboGICTFknxQDoDO1/S/UjyMcC/6Vw83dRGzwEMtdt N7HgxplwFpxIF6SNJVue6GwKXBcY3Ibeetf7t/+WT0HJurKInfETqcyzg58AFChr gxjXAAX66WRzu6bppY28Lec= -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:34 2026 by rpki-client