This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer File: WtRDrRlESBQSLzsny5OlBavlB5k.cer (raw, json) Hash identifier: Q0mlXM0dbYe9h43nQ+CvRKBd7nKh1Xb3NtcofGcZMyU= Subject key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC87A98295640F8FCF00E5ED4E7A6A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61238 IP: 91.242.200.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7a:98:29:56:40:f8:fc:f0:0e:5e:d4:e7:a6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ad443ad19444814122f3b27cb93a505abe50799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:fe:79:83:72:30:b6:d0:ee:1c:e0:54:3a: 17:73:18:5e:9d:75:4c:e0:e5:10:f8:f0:fd:f5:84: 1b:7a:0a:79:a4:41:5c:99:8c:29:ab:d1:c2:af:36: f8:86:5d:42:78:66:55:be:5c:5f:b9:b9:01:fa:2b: 0c:f6:3e:f5:7d:2f:3a:a5:69:3f:0a:cc:19:92:e9: ce:77:6a:eb:fe:bf:01:d5:90:24:f3:87:1b:76:4e: 70:14:25:56:fe:7a:91:cc:27:89:00:ef:34:de:dc: 40:03:11:4d:25:95:02:7b:e0:69:08:ec:17:c4:84: 80:88:d3:4b:98:d7:59:a5:fe:6b:65:61:65:2d:f0: 02:a6:82:f5:5e:04:ec:90:d7:eb:cc:65:1a:55:36: 8b:a1:95:cb:34:46:9b:40:99:65:31:fc:f5:49:2f: 07:72:e0:3e:25:b7:87:0d:22:8c:4f:25:c1:c5:eb: b9:80:7c:ba:d0:1a:95:10:33:7d:9e:8f:d1:68:6b: 58:fb:3e:84:bc:9c:2c:b3:56:64:eb:10:b1:8f:c6: 9b:60:1c:4c:12:68:96:37:c8:a3:c6:1b:03:73:0e: 6b:fe:08:06:b4:ff:71:50:af:28:c5:37:50:8e:0a: 2a:78:14:cb:75:c4:8f:fd:f4:c0:a1:36:d8:cb:96: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.200.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61238 Signature Algorithm: sha256WithRSAEncryption 45:ce:88:d9:2e:d7:3f:ad:6c:c0:98:79:d5:92:b2:d7:ce:e1: cc:b8:26:ca:67:9d:da:4d:c3:cd:2b:2a:01:41:8b:72:92:ca: 97:d5:99:ba:98:a8:6c:8d:19:23:ec:de:85:1a:d2:25:57:79: 16:fb:94:16:76:a3:20:ba:0e:76:79:9d:64:5b:a1:79:6f:cc: 19:c9:ef:3d:7a:27:f1:11:24:4f:b2:b9:f3:b4:15:57:dc:41: 7c:8c:51:8e:83:bf:69:90:7f:4d:a6:3d:48:69:fe:8e:b4:23: 19:c2:3d:cb:b8:8d:a1:24:54:55:e7:54:de:ae:8f:e3:52:0d: cd:c0:85:eb:b2:49:7d:a0:1a:fe:7d:fb:5a:cd:98:4f:c7:27: 8e:e9:b7:da:c6:f1:cc:98:3b:c7:96:73:43:4c:61:0e:fc:fb: c1:77:bb:6d:a0:4c:56:43:f8:b4:d6:b1:c7:bf:ed:0d:c1:b4: e3:98:be:81:ff:02:66:1d:1b:4e:e0:03:2c:ec:94:0d:5c:cc: c2:09:a4:48:cb:2a:c8:d3:17:d2:39:2b:db:30:80:e9:46:d6: 81:73:35:b0:0a:dc:82:07:e2:ce:2d:6f:0d:94:b2:f8:c3:03: a7:2a:bb:77:75:f4:71:e8:7b:2c:50:12:a8:b9:71:3c:4d:b2: 60:a8:da:7f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yHqYKVZA+PzwDl7U56aoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ0NDNhZDE5NDQ0ODE0MTIyZjNiMjdjYjkzYTUwNWFiZTUwNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxb+eYNyMLbQ7hzgVDoXcxhenXVM 4OUQ+PD99YQbegp5pEFcmYwpq9HCrzb4hl1CeGZVvlxfubkB+isM9j71fS86pWk/ CswZkunOd2rr/r8B1ZAk84cbdk5wFCVW/nqRzCeJAO803txAAxFNJZUCe+BpCOwX xISAiNNLmNdZpf5rZWFlLfACpoL1XgTskNfrzGUaVTaLoZXLNEabQJllMfz1SS8H cuA+JbeHDSKMTyXBxeu5gHy60BqVEDN9no/RaGtY+z6EvJwss1Zk6xCxj8abYBxM EmiWN8ijxhsDcw5r/ggGtP9xUK8oxTdQjgoqeBTLdcSP/fTAoTbYy5ah7wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFrUQ60ZREgUEi87J8uTpQWr5QeZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmLzVmODA3 NC0wMWNlLTRjYzQtYjk0NS0wMjRlNzI1NzMzNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvNWY4MDc0 LTAxY2UtNGNjNC1iOTQ1LTAyNGU3MjU3MzM1Zi8xL1d0UkRyUmxFU0JRU0x6c255 NU9sQmF2bEI1ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDW/LIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDvNjANBgkqhkiG9w0BAQsFAAOCAQEARc6I2S7XP61swJh51ZKy187hzLgmymed 2k3DzSsqAUGLcpLKl9WZupiobI0ZI+zehRrSJVd5FvuUFnajILoOdnmdZFuheW/M GcnvPXon8REkT7K587QVV9xBfIxRjoO/aZB/TaY9SGn+jrQjGcI9y7iNoSRUVedU 3q6P41INzcCF67JJfaAa/n37Ws2YT8cnjum32sbxzJg7x5ZzQ0xhDvz7wXe7baBM VkP4tNaxx7/tDcG045i+gf8CZh0bTuADLOyUDVzMwgmkSMsqyNMX0jkr2zCA6UbW gXM1sArcggfizi1vDZSy+MMDpyq7d3X0ceh7LFASqLlxPE2yYKjafw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:44 2026 by rpki-client