This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer File: rrwz1bpYUjTMzvilethsoer8SqI.cer (raw, json) Hash identifier: S0bG8Ycq7Eva5RoVExaBMLLgcwQSnYeF8I3xDL74E38= Subject key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B50221C0EBF54B3C4491C54D4D7EB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.217.141.0/24 IP: 194.93.123.128/25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:50:22:1c:0e:bf:54:b3:c4:49:1c:54:d4:d7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:78:93:95:94:12:35:03:bd:9c:9c:20:fe:66: 40:3d:f0:43:ad:56:41:ff:d3:a1:ff:5e:e1:48:2c: 1f:d2:35:19:e9:e0:e7:de:2f:14:8f:bb:d3:6b:a7: 2b:53:6d:0d:d7:35:fa:c4:66:72:36:b6:23:f6:52: 74:03:c2:6f:6e:c6:11:a6:7e:df:9d:8c:f4:b8:bd: 1c:cf:c1:37:75:66:02:08:96:04:d5:fc:ac:e8:4d: ba:7a:0b:3d:71:d9:4b:d5:a9:50:5a:f4:78:02:dc: cf:a9:3a:40:51:76:8f:50:ec:74:a7:f4:ac:bc:aa: a7:1c:30:9b:6f:eb:25:d1:08:d5:2b:16:2c:34:8c: de:48:d6:89:e5:31:8c:22:57:c4:de:11:76:25:e7: db:58:9e:cb:d9:3f:fd:1d:87:fe:2d:c7:dd:fe:0d: b4:ac:03:47:20:26:fd:23:36:8f:75:56:2b:27:8f: 83:98:28:68:85:d0:33:39:ef:fa:0a:44:8d:a1:bf: 97:03:8b:2d:4f:de:5b:94:53:ae:9d:5a:85:a4:e9: 9f:a9:6b:84:eb:f7:7f:2e:b7:3d:79:42:3c:0f:27: 14:62:7c:75:c7:81:0d:a0:87:68:e3:fe:24:eb:cf: 05:89:ec:8a:34:9b:2a:92:33:5f:07:96:bb:0a:0c: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.141.0/24 194.93.123.128/25 Signature Algorithm: sha256WithRSAEncryption 40:24:92:7a:c7:d2:6b:49:4a:30:d8:df:ec:80:ce:df:b8:19: d9:ff:c9:c2:57:f4:7b:e3:ec:98:95:7c:95:73:10:68:8e:45: c1:53:0b:97:91:2b:ad:7b:13:8e:ab:52:f5:9d:96:b9:c6:27: 76:54:51:63:68:50:4e:df:d2:d3:49:32:87:d3:72:00:3b:82: ff:b6:af:62:4d:fd:93:94:df:b7:f0:e2:6a:8b:81:a1:e9:28: 65:09:f4:3d:d1:e1:8e:9a:a6:43:77:5b:1c:20:a1:07:12:91: bd:16:b2:aa:ef:fd:d4:84:30:2f:d7:05:de:b5:80:da:d1:ec: 6f:68:20:35:1c:f4:e7:10:d6:8f:05:5e:49:f1:a8:c5:4d:17: 25:06:9b:67:a0:2a:58:ee:ef:07:24:05:21:eb:5c:4a:18:1a: 27:5f:7f:31:0c:fd:d7:0f:ba:13:91:eb:d3:ec:ee:94:9f:17: 15:94:b6:f9:6e:66:bf:44:96:a8:3d:51:db:48:72:a2:8c:6e: 75:24:e4:f5:7a:b8:a8:b2:91:83:3c:f5:a1:4c:0a:e1:2d:ed: 5d:7b:7a:34:90:4d:3b:8c:c3:1d:e9:f8:4f:cc:73:ad:1e:ab: 63:96:f2:7d:2b:f2:ab:6f:3c:c7:4b:92:b4:58:59:b2:88:1e: 5f:4f:c2:47 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZt6W1AiHA6/VLPESRxU1NfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWJjMzNkNWJhNTg1MjM0Y2NjZWY4YTU3YWQ4NmNhMWVhZmM0YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3iTlZQSNQO9nJwg/mZAPfBDrVZB /9Oh/17hSCwf0jUZ6eDn3i8Uj7vTa6crU20N1zX6xGZyNrYj9lJ0A8JvbsYRpn7f nYz0uL0cz8E3dWYCCJYE1fys6E26egs9cdlL1alQWvR4AtzPqTpAUXaPUOx0p/Ss vKqnHDCbb+sl0QjVKxYsNIzeSNaJ5TGMIlfE3hF2JefbWJ7L2T/9HYf+Lcfd/g20 rANHICb9IzaPdVYrJ4+DmChohdAzOe/6CkSNob+XA4stT95blFOunVqFpOmfqWuE 6/d/Lrc9eUI8DycUYnx1x4ENoIdo4/4k688FieyKNJsqkjNfB5a7Cgwz5wIDAQAB o4ICizCCAocwHQYDVR0OBBYEFK68M9W6WFI0zM74pXrYbKHq/EqiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2I2NzU1 MS0zNWUzLTQyZjEtOTEyYi05NmE1YjVkYWQ2NzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvYjY3NTUx LTM1ZTMtNDJmMS05MTJiLTk2YTViNWRhZDY3MS8xL3Jyd3oxYnBZVWpUTXp2aWxl dGhzb2VyOFNxSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCYGCCsGAQUF BwEHAQH/BBcwFTATBAIAATANAwQAW9mNAwUHwl17gDANBgkqhkiG9w0BAQsFAAOC AQEAQCSSesfSa0lKMNjf7IDO37gZ2f/Jwlf0e+PsmJV8lXMQaI5FwVMLl5ErrXsT jqtS9Z2WucYndlRRY2hQTt/S00kyh9NyADuC/7avYk39k5Tft/DiaouBoekoZQn0 PdHhjpqmQ3dbHCChBxKRvRayqu/91IQwL9cF3rWA2tHsb2ggNRz05xDWjwVeSfGo xU0XJQabZ6AqWO7vByQFIetcShgaJ19/MQz91w+6E5Hr0+zulJ8XFZS2+W5mv0SW qD1R20hyooxudSTk9Xq4qLKRgzz1oUwK4S3tXXt6NJBNO4zDHen4T8xzrR6rY5by fSvyq288x0uStFhZsogeX0/CRw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:09 2026 by rpki-client