This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer File: WsRmzIn5204xxUANKueiv_2yJUc.cer (raw, json) Hash identifier: 6osnAXZCLLhDrdMiALQIeCqKArh4FaeOAxAKx8DcRFA= Subject key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F44E7C122C484D0625F430E03F923 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34893 IP: 185.112.52.0 -- 185.112.54.255 IP: 194.30.181.0/24 IP: 2a06:6540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:44:e7:c1:22:c4:84:d0:62:5f:43:0e:03:f9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:e1:2e:cf:09:77:69:ef:77:6f:52:46:77: cf:47:90:a3:87:83:f5:44:7f:60:c7:4d:15:a9:93: 51:29:99:5a:1d:f1:42:56:98:9a:dc:84:53:36:12: d1:c4:e8:7c:f0:50:1d:ab:21:fd:5b:1f:9d:ec:68: 6d:5f:62:55:91:82:cf:05:39:00:53:91:51:9f:5d: 3a:eb:9d:28:5b:5c:f9:79:98:ff:28:85:ad:22:74: c8:ef:2b:e0:af:29:ed:d8:f3:ed:8c:d5:f5:ab:09: dd:10:6c:93:ad:91:0f:91:0e:99:69:2c:c5:26:5b: d4:4d:ae:30:fe:4e:26:33:f6:31:ae:a5:87:0b:c6: 97:48:94:a2:59:23:a0:86:56:3d:4c:9a:55:9a:bc: 5c:0b:97:73:e4:fd:f7:ec:aa:7f:dd:d1:50:ea:e5: d9:9d:2d:4e:c6:06:1b:43:53:d9:a4:92:95:8a:1e: d6:35:7e:08:cb:e7:ad:d3:ca:a4:82:d5:50:e4:2e: 24:99:83:a8:8a:a4:e7:60:0d:e5:13:61:fe:87:8b: 22:90:03:b8:b9:cc:78:b8:85:32:74:80:8b:56:14: e6:f0:2c:95:c9:a3:c0:2d:1e:d2:c1:1a:0f:d6:fb: 4d:48:ac:64:83:f4:c7:c6:f8:e5:cd:7e:e5:5e:cb: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.52.0-185.112.54.255 194.30.181.0/24 IPv6: 2a06:6540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34893 Signature Algorithm: sha256WithRSAEncryption 4b:78:d0:12:f2:ff:b4:de:c1:15:a6:f1:5d:bb:e3:bc:25:36: eb:30:c2:f9:3b:88:58:59:ff:85:d2:7d:6c:2b:6f:36:43:aa: bb:99:88:de:64:30:f8:4b:4c:9e:5d:31:72:dd:b1:2c:72:25: 9a:a1:16:70:8b:1c:49:96:15:50:e6:3a:f1:3a:4f:df:82:51: b8:1c:35:26:29:a2:de:04:ce:ff:39:25:6d:8f:c1:d9:25:1e: 24:d3:5b:82:18:af:ae:33:10:e1:59:02:9c:c4:42:38:9e:c1: fe:6f:85:34:1b:4e:64:04:ff:45:dc:a7:29:0e:8f:68:63:04: 92:52:d7:eb:f8:5e:5f:6c:d6:a2:f4:e6:a8:9c:d7:2a:62:29: 22:90:a8:74:98:43:3f:19:f1:89:6f:16:9b:b2:2b:38:b0:f6: f8:91:4f:62:fe:87:c7:5c:81:c1:8b:3a:cf:ef:8b:3f:bc:4c: 98:68:20:7b:79:b2:1a:f6:4f:2f:df:45:f8:1d:4b:c2:a2:5a: 48:fa:1a:e6:b9:00:22:8c:24:5f:05:c3:69:26:c8:97:c1:a9: 30:34:5e:5a:93:39:09:0b:ba:9a:87:1b:64:4c:dc:b4:8a:fd: c5:52:8d:7b:44:47:3a:04:a6:83:74:2f:a0:6b:8c:45:b7:47: 4b:63:92:21 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt5f0TnwSLEhNBiX0MOA/kjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWM0NjZjYzg5ZjlkYjRlMzFjNTQwMGQyYWU3YTJiZmZkYjIyNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk3hLs8Jd2nvd29SRnfPR5Cjh4P1 RH9gx00VqZNRKZlaHfFCVpia3IRTNhLRxOh88FAdqyH9Wx+d7GhtX2JVkYLPBTkA U5FRn106650oW1z5eZj/KIWtInTI7yvgrynt2PPtjNX1qwndEGyTrZEPkQ6ZaSzF JlvUTa4w/k4mM/YxrqWHC8aXSJSiWSOghlY9TJpVmrxcC5dz5P337Kp/3dFQ6uXZ nS1OxgYbQ1PZpJKVih7WNX4Iy+et08qkgtVQ5C4kmYOoiqTnYA3lE2H+h4sikAO4 ucx4uIUydICLVhTm8CyVyaPALR7SwRoP1vtNSKxkg/THxvjlzX7lXssA4wIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFFrEZsyJ+dtOMcVADSrnor/9siVHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2UyOWM4 Ny00NjgzLTQ0M2UtODgzZi05YWJkMWFhNjRiZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZTI5Yzg3 LTQ2ODMtNDQzZS04ODNmLTlhYmQxYWE2NGJlMS8xL1dzUm16SW41MjA0eHhVQU5L dWVpdl8yeUpVYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBAK5cDQDBAC5cDYDBADCHrUwDQQCAAIwBwMF AyoGZUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIhNMA0GCSqGSIb3DQEBCwUA A4IBAQBLeNAS8v+03sEVpvFdu+O8JTbrMML5O4hYWf+F0n1sK282Q6q7mYjeZDD4 S0yeXTFy3bEsciWaoRZwixxJlhVQ5jrxOk/fglG4HDUmKaLeBM7/OSVtj8HZJR4k 01uCGK+uMxDhWQKcxEI4nsH+b4U0G05kBP9F3KcpDo9oYwSSUtfr+F5fbNai9Oao nNcqYikikKh0mEM/GfGJbxabsis4sPb4kU9i/ofHXIHBizrP74s/vEyYaCB7ebIa 9k8v30X4HUvColpI+hrmuQAijCRfBcNpJsiXwakwNF5akzkJC7qahxtkTNy0iv3F Uo17REc6BKaDdC+ga4xFt0dLY5Ih -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:52 2026 by rpki-client