This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer File: Wxos8vE3Re4bv38KdL6tPOUHSFU.cer (raw, json) Hash identifier: Ud4xJmiAdX+3yLHr2wqCqndDZepess0HezKD9MvailM= Subject key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ADF3AA6F82826A370CB6C465B4B7E1C8F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 02 Dec 2025 13:22:34 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 91.198.58.0/24 IP: 2001:678:d98::/48 IP: 2001:678:d9c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:3a:a6:f8:28:26:a3:70:cb:6c:46:5b:4b:7e:1c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 2 13:22:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:25:ad:22:93:2c:9c:c3:6e:dc:99:d0:55:f8: 91:61:b6:04:e0:db:93:39:e9:d3:ad:1a:e5:88:7d: 4d:6c:c4:4b:e1:37:9f:99:3d:e5:3c:9f:3b:c9:13: 11:d6:04:2e:db:c5:e9:56:8e:c5:f3:b4:36:1f:0b: f8:93:40:31:bb:4f:dd:4e:e8:94:fb:bf:09:51:fd: 6a:cc:75:55:be:6e:f9:3a:9b:fc:a9:5a:06:b0:9a: d2:7f:de:1d:09:75:42:35:c7:61:1e:83:d9:92:49: 69:a7:df:f1:4c:19:67:fd:e3:ed:4d:5e:5e:e6:9b: 0d:5c:d0:6a:e7:0a:a2:e7:26:eb:55:75:16:45:6c: 7c:a2:eb:8f:e0:86:15:34:f3:85:1d:57:8d:54:7f: 80:b1:3f:91:29:d2:e8:5d:aa:96:e4:a6:4a:ba:90: 8a:7e:16:a0:9c:49:4e:45:fb:a2:3c:58:28:7d:47: 0c:ea:39:92:b8:88:72:87:5c:18:a9:b0:93:76:a1: b8:17:22:ab:c0:fe:4e:d8:a2:67:51:34:72:34:7b: de:f5:5a:bd:68:3e:a9:19:97:1a:7d:3a:19:35:74: 33:45:58:46:37:32:f0:f4:59:4b:bc:aa:34:04:f5: 2f:25:60:12:57:62:b1:2e:3a:ad:72:d4:19:a0:c7: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.58.0/24 IPv6: 2001:678:d98::/48 2001:678:d9c::/48 Signature Algorithm: sha256WithRSAEncryption 8d:03:ec:83:a4:e1:df:0c:40:75:42:d7:ba:59:52:4d:98:47: 2b:cb:a2:3a:a4:6c:dd:4f:ac:36:eb:26:83:df:c1:6a:e7:93: 6a:10:1d:b0:92:5f:c3:c2:06:78:2c:af:ae:9e:f9:d6:98:7c: ab:a2:52:ca:ab:df:79:3c:0d:fa:e2:c8:db:7b:3c:f8:4c:70: 37:6b:bb:ab:aa:cc:56:93:3d:58:59:0d:82:88:7c:0c:4f:d6: 9a:88:b0:5a:49:d4:ba:79:f4:9d:5b:83:0c:33:69:f8:0c:8f: ef:4c:62:67:0b:5e:3e:5c:10:8f:96:4b:bb:6e:08:8d:ab:63: 74:2d:89:43:40:49:5a:ec:f0:73:ee:7e:3d:0a:27:5d:34:0d: 2d:8e:ba:1f:ba:34:c8:c0:67:71:59:2c:3a:e6:04:50:75:63: e5:54:17:de:e1:f8:36:ef:b5:6b:25:05:10:8a:b0:6f:24:8b: cc:f0:be:56:46:60:66:bd:64:4c:66:df:d7:15:eb:b8:14:3d: c9:77:5c:e9:5c:c7:74:f5:1c:43:ec:c7:46:58:5a:1e:26:43: 41:b2:54:fa:37:f2:6d:d9:91:31:7e:dd:45:e1:e7:8f:3f:a9: 3e:00:e1:3d:c4:eb:b3:eb:d5:8d:46:da:b5:ee:32:6b:a5:d2: b9:92:b3:ec -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZrfOqb4KCajcMtsRltLfhyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAyMTMyMjM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjFhMmNmMmYxMzc0NWVlMWJiZjdmMGE3NGJlYWQzY2U1MDc0ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SWtIpMsnMNu3JnQVfiRYbYE4NuT OenTrRrliH1NbMRL4TefmT3lPJ87yRMR1gQu28XpVo7F87Q2Hwv4k0Axu0/dTuiU +78JUf1qzHVVvm75Opv8qVoGsJrSf94dCXVCNcdhHoPZkklpp9/xTBln/ePtTV5e 5psNXNBq5wqi5ybrVXUWRWx8ouuP4IYVNPOFHVeNVH+AsT+RKdLoXaqW5KZKupCK fhagnElORfuiPFgofUcM6jmSuIhyh1wYqbCTdqG4FyKrwP5O2KJnUTRyNHve9Vq9 aD6pGZcafToZNXQzRVhGNzLw9FlLvKo0BPUvJWASV2KxLjqtctQZoMc0EwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFFsaLPLxN0XuG79/CnS+rTzlB0hVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzI0ZjAy ZC1iMjNhLTRjODEtOTFmMC03ZjkwMjVlNTMxMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvMjRmMDJk LWIyM2EtNGM4MS05MWYwLTdmOTAyNWU1MzEwOS8xL1d4b3M4dkUzUmU0YnYzOEtk TDZ0UE9VSFNGVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAMBAIAATAGAwQAW8Y6MBgEAgACMBIDBwAgAQZ4DZgDBwAgAQZ4 DZwwDQYJKoZIhvcNAQELBQADggEBAI0D7IOk4d8MQHVC17pZUk2YRyvLojqkbN1P rDbrJoPfwWrnk2oQHbCSX8PCBngsr66e+daYfKuiUsqr33k8DfriyNt7PPhMcDdr u6uqzFaTPVhZDYKIfAxP1pqIsFpJ1Lp59J1bgwwzafgMj+9MYmcLXj5cEI+WS7tu CI2rY3QtiUNASVrs8HPufj0KJ100DS2Ouh+6NMjAZ3FZLDrmBFB1Y+VUF97h+Dbv tWslBRCKsG8ki8zwvlZGYGa9ZExm39cV67gUPcl3XOlcx3T1HEPsx0ZYWh4mQ0Gy VPo38m3ZkTF+3UXh548/qT4A4T3E67Pr1Y1G2rXuMmul0rmSs+w= -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:25 2025 by rpki-client