This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer File: WsPivbYyltXw86_pW9FUURelsUk.cer (raw, json) Hash identifier: Wz+mwzWUltZV4mT8xcz0E4R5Z+4W/sfGyksO1vvBGkQ= Subject key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3784F206AF7EB75A7A6DB8EBAF890A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.117.67.0/24 IP: 212.23.205.0/24 IP: 2a0c:8480::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:84:f2:06:af:7e:b7:5a:7a:6d:b8:eb:af:89:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:6e:09:6e:e7:5d:f8:77:d8:a8:d0:5e:bf: 53:94:6c:77:6e:f8:1e:5e:58:c6:5c:f9:48:45:9b: fb:ea:83:04:61:5d:42:75:52:28:31:f7:36:c0:3a: 9a:8a:fa:5c:15:58:97:8b:38:07:d3:54:6f:ee:d4: e3:61:15:b7:0a:11:fa:96:85:b9:1b:6c:2a:b2:58: 84:d0:2f:93:14:94:e2:9e:61:f6:fc:f2:78:d6:3a: 0b:a7:63:9c:93:8c:bf:d2:6c:44:69:3e:4c:dc:45: e4:54:ee:e6:5e:5d:15:29:b2:42:86:1a:78:03:1e: 6f:66:7a:30:e9:95:50:5d:36:c1:7e:4c:8c:5a:e7: 29:59:28:63:82:04:07:4e:be:e4:b3:04:e1:3f:02: a1:20:95:10:77:d9:6a:eb:c4:ac:83:67:64:69:3f: 80:85:5a:36:08:93:fc:83:37:3d:5d:07:59:74:40: cb:e6:f3:39:e9:e1:af:b0:c6:a7:ee:bb:99:c5:94: d6:23:1d:11:85:cd:2f:15:69:6b:d8:72:86:c8:38: a2:a2:3c:56:a0:9a:6a:27:e0:81:b0:f5:dd:17:fd: 04:b2:de:21:35:7c:44:73:1f:38:86:54:a7:12:62: 19:85:49:c3:53:f6:bd:de:9f:bf:51:65:83:98:b0: f8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.67.0/24 212.23.205.0/24 IPv6: 2a0c:8480::/30 Signature Algorithm: sha256WithRSAEncryption 70:78:20:f5:06:2c:91:76:a7:15:6a:a3:79:eb:93:96:55:04: d9:f6:32:0a:51:f9:ac:25:ec:51:73:a0:86:25:7a:ee:57:93: c3:f4:25:e0:e7:61:57:f4:a8:5f:ec:b9:75:55:a1:ed:0a:1e: 09:90:8b:5a:84:dd:26:3b:a6:5d:72:90:b5:b2:15:ad:90:f6: c9:9b:8c:14:19:74:ad:72:67:23:fb:bf:5c:e3:b1:f9:e0:ea: 7e:59:20:9f:86:3f:69:c6:ae:43:08:b9:18:e3:0c:d8:81:2d: 99:5b:79:98:02:a8:65:fc:65:36:0d:5d:5d:02:6e:8b:a2:36: fe:05:d1:a4:15:1c:17:b6:bd:a9:5b:56:58:80:bd:2f:1d:f9: 7d:ca:91:a3:b2:54:c4:df:e4:ac:53:c2:bb:fc:92:bd:97:bf: ad:12:c9:1a:e7:dc:3f:c6:c5:05:17:d7:9d:e2:99:27:c2:64: 00:d0:b5:8d:5a:d8:b0:5f:a3:43:3e:80:48:57:f2:e2:23:a0: 2f:cf:d2:e8:07:4e:9a:0a:77:07:5f:e2:b3:a7:df:34:55:f5: 70:a5:c3:f7:54:51:f1:e5:42:37:e4:a3:2e:50:a3:fe:50:0d: 50:8c:79:11:5f:05:17:c8:15:95:e8:7a:f4:31:e4:1b:1f:38: ac:9e:9f:b9 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt+N4TyBq9+t1p6bbjrr4kKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWMzZTJiZGI2MzI5NmQ1ZjBmM2FmZTk1YmQxNTQ1MTE3YTViMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnutuCW7nXfh32KjQXr9TlGx3bvge XljGXPlIRZv76oMEYV1CdVIoMfc2wDqaivpcFViXizgH01Rv7tTjYRW3ChH6loW5 G2wqsliE0C+TFJTinmH2/PJ41joLp2Ock4y/0mxEaT5M3EXkVO7mXl0VKbJChhp4 Ax5vZnow6ZVQXTbBfkyMWucpWShjggQHTr7kswThPwKhIJUQd9lq68Ssg2dkaT+A hVo2CJP8gzc9XQdZdEDL5vM56eGvsMan7ruZxZTWIx0Rhc0vFWlr2HKGyDiiojxW oJpqJ+CBsPXdF/0Est4hNXxEcx84hlSnEmIZhUnDU/a93p+/UWWDmLD4/QIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFFrD4r22MpbV8POv6VvRVFEXpbFJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2JlMDcx NS0zYmIyLTQ0ZjQtYmJmNi0yNDA2OThmYmRkZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvYmUwNzE1 LTNiYjItNDRmNC1iYmY2LTI0MDY5OGZiZGRmZi8xL1dzUGl2Yll5bHRYdzg2X3BX OUZVVVJlbHNVay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwnVDAwQA1BfNMA0EAgACMAcDBQIqDISAMA0G CSqGSIb3DQEBCwUAA4IBAQBweCD1BiyRdqcVaqN565OWVQTZ9jIKUfmsJexRc6CG JXruV5PD9CXg52FX9Khf7Ll1VaHtCh4JkItahN0mO6ZdcpC1shWtkPbJm4wUGXSt cmcj+79c47H54Op+WSCfhj9pxq5DCLkY4wzYgS2ZW3mYAqhl/GU2DV1dAm6Lojb+ BdGkFRwXtr2pW1ZYgL0vHfl9ypGjslTE3+SsU8K7/JK9l7+tEska59w/xsUFF9ed 4pknwmQA0LWNWtiwX6NDPoBIV/LiI6Avz9LoB06aCncHX+Kzp980VfVwpcP3VFHx 5UI35KMuUKP+UA1QjHkRXwUXyBWV6Hr0MeQbHzisnp+5 -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:40 2026 by rpki-client