This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer File: Wxos8vE3Re4bv38KdL6tPOUHSFU.cer (raw, json) Hash identifier: t5JceleaA3KF9juIaV6EjvRj16ZvDrlkmNifzNP5WJg= Subject key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F17675FA873D711E975AE96B07DFD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.58.0/24 IP: 2001:678:d98::/48 IP: 2001:678:d9c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:17:67:5f:a8:73:d7:11:e9:75:ae:96:b0:7d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:ad:22:93:2c:9c:c3:6e:dc:99:d0:55:f8: 91:61:b6:04:e0:db:93:39:e9:d3:ad:1a:e5:88:7d: 4d:6c:c4:4b:e1:37:9f:99:3d:e5:3c:9f:3b:c9:13: 11:d6:04:2e:db:c5:e9:56:8e:c5:f3:b4:36:1f:0b: f8:93:40:31:bb:4f:dd:4e:e8:94:fb:bf:09:51:fd: 6a:cc:75:55:be:6e:f9:3a:9b:fc:a9:5a:06:b0:9a: d2:7f:de:1d:09:75:42:35:c7:61:1e:83:d9:92:49: 69:a7:df:f1:4c:19:67:fd:e3:ed:4d:5e:5e:e6:9b: 0d:5c:d0:6a:e7:0a:a2:e7:26:eb:55:75:16:45:6c: 7c:a2:eb:8f:e0:86:15:34:f3:85:1d:57:8d:54:7f: 80:b1:3f:91:29:d2:e8:5d:aa:96:e4:a6:4a:ba:90: 8a:7e:16:a0:9c:49:4e:45:fb:a2:3c:58:28:7d:47: 0c:ea:39:92:b8:88:72:87:5c:18:a9:b0:93:76:a1: b8:17:22:ab:c0:fe:4e:d8:a2:67:51:34:72:34:7b: de:f5:5a:bd:68:3e:a9:19:97:1a:7d:3a:19:35:74: 33:45:58:46:37:32:f0:f4:59:4b:bc:aa:34:04:f5: 2f:25:60:12:57:62:b1:2e:3a:ad:72:d4:19:a0:c7: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.58.0/24 IPv6: 2001:678:d98::/48 2001:678:d9c::/48 Signature Algorithm: sha256WithRSAEncryption 9f:5a:d2:89:8a:68:6c:79:c2:90:d0:c2:5a:ff:c3:2c:34:52: 7f:ee:8e:5d:08:c9:b5:70:b0:12:86:63:46:5d:68:9b:d7:96: 96:eb:80:78:3f:15:39:8c:48:63:36:37:6e:09:24:75:d6:79: 23:3f:4b:de:6e:a3:bf:67:67:11:2e:25:fd:43:1e:6c:c6:5c: 64:a1:b9:c4:9a:cd:cc:98:62:7c:dd:d0:23:e9:45:6a:a5:58: 9e:46:6d:55:cb:33:4e:66:68:a9:ce:64:a6:30:42:11:f4:ef: 6d:fd:36:b5:95:9e:ed:85:94:90:0f:06:70:48:7c:bf:94:21: 45:9a:38:92:9d:49:d6:43:68:1a:90:16:23:a9:76:98:1b:68: 7e:b2:88:50:58:c6:b4:cd:54:7a:45:50:62:14:f2:62:e7:6f: e3:e7:8d:2d:16:19:95:7b:34:37:21:dc:22:fe:26:2b:fd:f2: 7f:c6:76:90:5d:c7:c6:a6:4c:ba:de:cc:cf:ef:ab:ef:da:bd: 8e:07:5a:21:65:c2:86:9b:27:52:a0:c0:8b:ff:2b:19:23:61: 1a:f1:c8:c4:f0:4d:61:5c:d1:93:85:82:d1:74:70:bc:f8:11: 39:0c:9e:a5:38:d4:04:16:18:c3:06:cb:2d:f0:a8:f4:0f:6c: c7:80:b6:be -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt5fxdnX6hz1xHpda6WsH39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjFhMmNmMmYxMzc0NWVlMWJiZjdmMGE3NGJlYWQzY2U1MDc0ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SWtIpMsnMNu3JnQVfiRYbYE4NuT OenTrRrliH1NbMRL4TefmT3lPJ87yRMR1gQu28XpVo7F87Q2Hwv4k0Axu0/dTuiU +78JUf1qzHVVvm75Opv8qVoGsJrSf94dCXVCNcdhHoPZkklpp9/xTBln/ePtTV5e 5psNXNBq5wqi5ybrVXUWRWx8ouuP4IYVNPOFHVeNVH+AsT+RKdLoXaqW5KZKupCK fhagnElORfuiPFgofUcM6jmSuIhyh1wYqbCTdqG4FyKrwP5O2KJnUTRyNHve9Vq9 aD6pGZcafToZNXQzRVhGNzLw9FlLvKo0BPUvJWASV2KxLjqtctQZoMc0EwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFFsaLPLxN0XuG79/CnS+rTzlB0hVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzI0ZjAy ZC1iMjNhLTRjODEtOTFmMC03ZjkwMjVlNTMxMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvMjRmMDJk LWIyM2EtNGM4MS05MWYwLTdmOTAyNWU1MzEwOS8xL1d4b3M4dkUzUmU0YnYzOEtk TDZ0UE9VSFNGVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAMBAIAATAGAwQAW8Y6MBgEAgACMBIDBwAgAQZ4DZgDBwAgAQZ4 DZwwDQYJKoZIhvcNAQELBQADggEBAJ9a0omKaGx5wpDQwlr/wyw0Un/ujl0IybVw sBKGY0ZdaJvXlpbrgHg/FTmMSGM2N24JJHXWeSM/S95uo79nZxEuJf1DHmzGXGSh ucSazcyYYnzd0CPpRWqlWJ5GbVXLM05maKnOZKYwQhH07239NrWVnu2FlJAPBnBI fL+UIUWaOJKdSdZDaBqQFiOpdpgbaH6yiFBYxrTNVHpFUGIU8mLnb+PnjS0WGZV7 NDch3CL+Jiv98n/GdpBdx8amTLrezM/vq+/avY4HWiFlwoabJ1KgwIv/KxkjYRrx yMTwTWFc0ZOFgtF0cLz4ETkMnqU41AQWGMMGyy3wqPQPbMeAtr4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:57 2026 by rpki-client