This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer File: WtikTa0xXyHqmS_G4QSCxB7N_PU.cer (raw, json) Hash identifier: F81WSlbu4jp4eehgP5eYs5fjmYgwOs+PJfLaEEW3j20= Subject key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECFD73314AD316A4983F0870DAC4E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.233.35.0/24 IP: 2001:67c:2688::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fd:73:31:4a:d3:16:a4:98:3f:08:70:da:c4:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:30:ef:46:db:5d:26:bb:b6:b4:5d:a2:db: 31:3e:de:73:21:c7:a1:1c:da:e8:9f:1a:e8:11:1f: f9:25:2a:21:f9:44:cb:e6:5e:db:d9:9a:d3:3c:08: 24:f0:51:97:df:5b:09:4b:e5:ea:24:6b:7d:40:a2: b2:07:4f:2d:98:18:28:59:06:78:5e:81:64:30:5e: 42:d1:af:cf:54:58:91:34:b3:36:c3:b9:f4:a4:d8: f5:e9:44:fc:4d:8a:ab:9f:55:00:de:b0:4c:50:ff: e4:2b:32:a2:28:01:33:bc:45:f2:00:ca:86:5c:96: bd:3e:0f:8e:60:f9:33:ad:f8:6f:2d:48:ea:1f:df: 3f:bf:b8:f6:9f:63:55:7d:8d:b4:fc:80:a8:67:89: 04:b8:a7:0a:7d:f0:72:af:78:53:d9:83:fc:57:2c: a5:f0:ce:e8:bd:73:89:68:e0:7c:9e:31:4e:f9:07: 97:af:c0:a7:50:fd:e4:83:43:db:43:16:4f:41:3e: fd:d3:19:f9:05:63:0e:33:19:bb:c3:3b:be:d5:ab: 3c:78:a5:cb:68:0a:f4:61:57:f1:d2:1c:1f:4d:64: 29:ae:6e:51:8e:52:51:4c:2e:6a:05:2c:40:ee:2e: 4b:ce:39:a9:ac:cb:d2:63:b9:ad:54:c1:6d:86:da: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.35.0/24 IPv6: 2001:67c:2688::/48 Signature Algorithm: sha256WithRSAEncryption 14:fa:17:51:3c:06:d2:39:08:39:7d:94:6d:4c:e6:f9:b1:37: 74:d8:06:7b:57:24:04:b1:e1:c8:55:f4:31:73:dc:72:6c:b5: db:f4:17:7d:d2:79:8d:12:0e:6d:f0:8f:82:c0:65:f6:eb:a3: 91:8f:ab:b9:ef:ec:71:44:0c:08:ed:d1:2f:de:66:76:2e:93: 91:09:a1:a5:fa:6a:51:21:fa:23:41:bd:64:3b:83:a1:15:a1: 84:95:44:1b:97:1e:e9:f3:9d:d2:16:8f:ac:e4:52:c7:01:89: 65:f8:dd:67:c8:10:6a:9a:6c:92:08:50:ed:7e:6d:04:4b:c8: 0d:5e:0e:f6:f8:fa:92:46:c8:67:8b:f4:58:e1:87:e3:f8:e1: a3:24:3e:40:87:07:7f:d7:2a:c3:21:2c:e7:e8:9d:74:a9:c3: 5c:d8:f4:ea:f9:8b:ef:c4:4f:23:c6:d8:75:a2:45:41:8c:9a: 85:84:7b:c2:95:be:8b:92:47:cc:4f:65:dd:30:a4:50:fc:a3: 74:09:7a:f4:e8:f0:01:a6:c2:be:ac:83:c1:46:b9:11:7d:eb: ca:a1:a5:8a:73:2e:6c:e8:d3:17:2d:fc:1e:43:d8:53:5a:c9: a4:91:d7:64:4c:f1:71:9b:6e:a8:55:24:91:d2:2e:d3:c1:cc: 75:72:a9:13 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt57P1zMUrTFqSYPwhw2sTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ4YTQ0ZGFkMzE1ZjIxZWE5OTJmYzZlMTA0ODJjNDFlY2RmY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF4w70bbXSa7trRdotsxPt5zIceh HNronxroER/5JSoh+UTL5l7b2ZrTPAgk8FGX31sJS+XqJGt9QKKyB08tmBgoWQZ4 XoFkMF5C0a/PVFiRNLM2w7n0pNj16UT8TYqrn1UA3rBMUP/kKzKiKAEzvEXyAMqG XJa9Pg+OYPkzrfhvLUjqH98/v7j2n2NVfY20/ICoZ4kEuKcKffByr3hT2YP8Vyyl 8M7ovXOJaOB8njFO+QeXr8CnUP3kg0PbQxZPQT790xn5BWMOMxm7wzu+1as8eKXL aAr0YVfx0hwfTWQprm5RjlJRTC5qBSxA7i5LzjmprMvSY7mtVMFthtrW2wIDAQAB o4IClTCCApEwHQYDVR0OBBYEFFrYpE2tMV8h6pkvxuEEgsQezfz1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzgzZjgx OC0xOWMwLTQ3MDItODNlNS1kOTU2MzZhN2E2NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvODNmODE4 LTE5YzAtNDcwMi04M2U1LWQ5NTYzNmE3YTY2NC8xL1d0aWtUYTB4WHlIcW1TX0c0 UVNDeEI3Tl9QVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW+kjMA8EAgACMAkDBwAgAQZ8JogwDQYJKoZI hvcNAQELBQADggEBABT6F1E8BtI5CDl9lG1M5vmxN3TYBntXJASx4chV9DFz3HJs tdv0F33SeY0SDm3wj4LAZfbro5GPq7nv7HFEDAjt0S/eZnYuk5EJoaX6alEh+iNB vWQ7g6EVoYSVRBuXHunzndIWj6zkUscBiWX43WfIEGqabJIIUO1+bQRLyA1eDvb4 +pJGyGeL9Fjhh+P44aMkPkCHB3/XKsMhLOfonXSpw1zY9Or5i+/ETyPG2HWiRUGM moWEe8KVvouSR8xPZd0wpFD8o3QJevTo8AGmwr6sg8FGuRF968qhpYpzLmzo0xct /B5D2FNayaSR12RM8XGbbqhVJJHSLtPBzHVyqRM= -----END CERTIFICATE-----Generated at Mon Jan 26 12:28:53 2026 by rpki-client