This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer File: WpVcpFhGjFd2uNmTbf6bCyZocxw.cer (raw, json) Hash identifier: cqDdmdyerSvKG6/x8lDvGezGu2DrI4QxE2SdzhGaquE= Subject key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9FAEC8A9655252599F068455C5A16 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57173 IP: 87.247.224.0/21 IP: 185.197.100.0/22 IP: 2a02:d580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fa:ec:8a:96:55:25:25:99:f0:68:45:5c:5a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:8d:11:97:bc:ae:86:ce:88:f2:7f:e3:75: 2e:e2:2a:51:07:5b:c8:1a:87:b5:3c:27:d9:48:3c: 01:23:ea:22:df:c9:06:c7:35:29:7d:31:53:63:94: e6:7f:e3:f7:a7:92:81:94:c2:4e:ce:c0:57:cb:9d: 5b:11:7d:1c:23:a5:1f:8b:76:a6:10:fb:ef:b7:75: ca:ed:60:19:a4:5b:29:9e:9d:b9:9a:97:1b:70:35: 75:50:a4:6e:56:f9:36:f2:0e:a1:3e:f2:03:f6:b8: 34:1b:14:67:7d:af:12:b9:b2:4d:41:27:aa:f4:07: e8:5e:70:fd:be:12:14:f4:99:11:51:22:16:b4:77: 1a:31:5a:fc:c1:2b:32:58:94:a2:4a:20:5e:13:d5: e5:90:94:72:bb:fc:51:8f:3f:ba:af:0b:aa:2c:e7: 5f:8a:e4:1a:b9:02:0f:71:93:f4:b2:1b:db:1a:c7: 19:5b:68:18:b1:6e:d8:c2:d7:e1:eb:bd:d2:03:13: 94:67:5e:70:b3:ff:42:34:f5:f4:5e:01:6a:e7:97: 80:59:5c:d4:98:24:3b:37:66:53:42:52:b5:a9:9f: a0:3e:55:68:15:ee:40:85:3a:65:49:e6:ab:fa:54: 40:ae:9e:ac:c3:da:20:06:cb:fa:e4:b1:ca:4a:8f: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.247.224.0/21 185.197.100.0/22 IPv6: 2a02:d580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57173 Signature Algorithm: sha256WithRSAEncryption 1b:b9:af:27:2f:f9:24:1f:0f:91:3d:ae:9b:ff:92:ab:bf:5c: 7f:e7:12:57:38:77:52:6c:7d:e9:d8:4b:9a:d4:8e:a9:d9:73: 55:5d:f4:c0:ad:d1:f9:37:00:5a:af:d0:55:58:7a:41:55:8d: 25:ed:2d:76:c5:b4:e2:08:34:3a:8c:3c:6f:c0:30:98:7c:55: 53:f2:17:e7:2f:06:fb:a1:4d:ef:d1:15:7b:a5:7d:a5:29:50: fe:73:1a:c0:26:58:4b:55:1c:2e:49:e8:50:82:b0:7a:c2:32: 3c:4a:34:83:7b:7c:0b:a6:66:ed:22:a0:e0:3d:5b:d4:8d:74: f7:6f:4c:c9:38:c4:26:d2:57:13:e2:db:cb:89:09:b0:d7:a6: 6c:c5:7b:24:de:07:e1:53:74:69:bd:b0:42:87:88:0a:fc:47: 83:d2:39:43:82:b7:c3:ed:d2:68:cc:c9:0c:01:c1:4e:59:fa: 17:47:1c:8e:4b:bb:70:1c:63:23:bc:13:86:c2:3f:9f:ca:b5: 5b:14:e1:96:84:42:59:9d:86:23:26:95:73:a6:58:8c:8f:46: 05:6f:f4:e1:eb:9d:e3:ae:00:64:68:8f:b3:b9:54:16:e2:91: 70:2b:e7:37:1a:25:8a:0b:f1:1a:96:b7:de:a0:bc:07:9b:3a: fd:39:ca:8e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yfrsipZVJSWZ8GhFXFoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTk1NWNhNDU4NDY4YzU3NzZiOGQ5OTM2ZGZlOWIwYjI2Njg3MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXaNEZe8robOiPJ/43Uu4ipRB1vI Goe1PCfZSDwBI+oi38kGxzUpfTFTY5Tmf+P3p5KBlMJOzsBXy51bEX0cI6Ufi3am EPvvt3XK7WAZpFspnp25mpcbcDV1UKRuVvk28g6hPvID9rg0GxRnfa8SubJNQSeq 9AfoXnD9vhIU9JkRUSIWtHcaMVr8wSsyWJSiSiBeE9XlkJRyu/xRjz+6rwuqLOdf iuQauQIPcZP0shvbGscZW2gYsW7Ywtfh673SAxOUZ15ws/9CNPX0XgFq55eAWVzU mCQ7N2ZTQlK1qZ+gPlVoFe5AhTplSear+lRArp6sw9ogBsv65LHKSo9TSQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFqVXKRYRoxXdrjZk23+mwsmaHMcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2JlOWEw MC1lMGIxLTQ1NDEtOWMwZi0xMzg1OGRhODVmNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvYmU5YTAw LWUwYjEtNDU0MS05YzBmLTEzODU4ZGE4NWY1My8xL1dwVmNwRmhHakZkMnVObVRi ZjZiQ3lab2N4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDV/fgAwQCucVkMA0EAgACMAcDBQMqAtWAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDfVTANBgkqhkiG9w0BAQsFAAOCAQEAG7mv Jy/5JB8PkT2um/+Sq79cf+cSVzh3Umx96dhLmtSOqdlzVV30wK3R+TcAWq/QVVh6 QVWNJe0tdsW04gg0Oow8b8AwmHxVU/IX5y8G+6FN79EVe6V9pSlQ/nMawCZYS1Uc LknoUIKwesIyPEo0g3t8C6Zm7SKg4D1b1I10929MyTjEJtJXE+Lby4kJsNembMV7 JN4H4VN0ab2wQoeICvxHg9I5Q4K3w+3SaMzJDAHBTln6F0ccjku7cBxjI7wThsI/ n8q1WxThloRCWZ2GIyaVc6ZYjI9GBW/04eud464AZGiPs7lUFuKRcCvnNxoligvx Gpa33qC8B5s6/TnKjg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:11:51 2026 by rpki-client