This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer File: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer (raw, json) Hash identifier: C6MMR+W6YeitjjNenrgqmbixobzcrJt43kc7JbHiF68= Subject key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A3000358FAFFD8E03C822C8CE36C71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47253 IP: 46.18.16.0/21 IP: 62.16.64.0/20 IP: 93.184.0.0/20 IP: 185.6.56.0/22 IP: 193.124.248.0/22 IP: 194.58.72.0 -- 194.58.77.255 IP: 194.58.152.0/23 IP: 194.58.220.0/23 IP: 194.58.240.0/24 IP: 194.58.242.0 -- 194.58.245.255 IP: 194.58.247.0/24 IP: 2a02:26d0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:00:03:58:fa:ff:d8:e0:3c:82:2c:8c:e3:6c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3e86569b1690c9dff745cbb43805b8582b005ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:c5:41:a7:e4:e4:f7:84:a3:bd:a4:0b:cf: de:ea:84:5f:9c:62:d7:73:6f:08:78:83:77:cd:83: 8f:a6:36:7f:e6:e7:0d:18:e2:5c:f9:a2:75:bf:c6: 49:3c:c8:0f:1c:86:30:4e:d1:a5:5e:a6:19:7a:2f: f6:6b:93:1e:7e:0c:34:07:59:85:ed:d1:2d:b6:97: 13:58:95:51:f1:ae:bf:84:24:ca:96:ec:ee:f2:3a: 72:21:99:53:bf:e1:dd:ce:48:cd:ff:73:60:27:41: 7f:b0:92:81:0b:fd:7f:68:27:07:d1:6d:08:56:09: 9a:27:04:ae:40:70:37:e5:c9:0a:b3:eb:b3:a5:54: 02:e3:9e:95:a5:a7:38:be:91:dc:ab:7f:c0:6a:d8: 67:3d:5b:f7:0b:d3:f8:64:16:10:40:2a:40:cb:92: 43:b6:82:69:92:1d:31:83:45:68:bb:48:20:71:e9: 42:72:e8:77:c3:88:60:36:26:a3:59:36:eb:2b:54: 9a:b6:58:3e:69:26:73:f6:21:bb:f8:06:8b:9e:8f: 58:a1:cf:d3:f3:2d:8d:1f:9a:23:26:0a:fa:6a:ea: a2:c6:3c:a8:c6:d0:b6:55:c2:c0:52:69:52:a1:f7: 0f:e5:07:b9:94:74:e4:68:92:6b:36:ea:d4:c5:b3: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.16.0/21 62.16.64.0/20 93.184.0.0/20 185.6.56.0/22 193.124.248.0/22 194.58.72.0-194.58.77.255 194.58.152.0/23 194.58.220.0/23 194.58.240.0/24 194.58.242.0-194.58.245.255 194.58.247.0/24 IPv6: 2a02:26d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47253 Signature Algorithm: sha256WithRSAEncryption 76:82:f2:69:46:ee:46:79:07:ba:94:1a:66:22:71:e8:f8:36: fc:54:01:80:33:83:7f:dc:37:b2:b9:33:d0:c9:88:99:81:20: f0:cb:b8:73:86:0e:6c:43:14:a6:76:72:3f:3a:02:c0:fe:e1: bc:42:2a:62:c1:3e:a3:a0:9f:8e:01:a2:3d:4d:21:ce:d5:f3: 62:82:18:8f:9f:28:2b:00:ad:c2:fb:c8:d0:08:1f:32:7d:4a: 9b:9c:f7:ab:da:8c:14:82:59:37:44:f6:54:c6:a0:05:4e:51: f3:30:3b:06:99:84:ef:19:b4:08:27:91:60:08:24:e3:19:95: 18:01:2e:8d:8a:21:72:ed:1e:c3:f9:ed:ad:fd:26:9d:4d:9e: ea:fc:1f:af:b2:bc:67:c4:5b:37:9c:ff:f1:ac:79:57:14:22: 74:7a:2a:2c:ff:43:1a:2d:3c:17:a3:0c:69:aa:3a:f7:ee:de: 65:ca:a1:6a:a5:93:a4:e4:39:a9:5e:9e:b6:5a:41:99:f9:95: 74:7a:07:40:15:7b:0b:e5:c9:7e:f1:a8:8e:cc:71:a7:11:89: 4d:9b:36:d6:24:aa:04:55:88:2a:5d:d4:ee:c4:2d:0e:ce:d9: 8b:f3:b8:5a:65:1f:f5:5c:f5:4b:e3:1b:b5:d9:d7:c9:74:74: 5b:fb:a1:af -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgISAZt4owADWPr/2OA8giyM42xxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2U4NjU2OWIxNjkwYzlkZmY3NDVjYmI0MzgwNWI4NTgyYjAwNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh3FQafk5PeEo72kC8/e6oRfnGLX c28IeIN3zYOPpjZ/5ucNGOJc+aJ1v8ZJPMgPHIYwTtGlXqYZei/2a5Mefgw0B1mF 7dEttpcTWJVR8a6/hCTKluzu8jpyIZlTv+HdzkjN/3NgJ0F/sJKBC/1/aCcH0W0I VgmaJwSuQHA35ckKs+uzpVQC456Vpac4vpHcq3/AathnPVv3C9P4ZBYQQCpAy5JD toJpkh0xg0Vou0ggcelCcuh3w4hgNiajWTbrK1Satlg+aSZz9iG7+AaLno9Yoc/T 8y2NH5ojJgr6auqixjyoxtC2VcLAUmlSofcP5Qe5lHTkaJJrNurUxbMvZwIDAQAB o4IC+zCCAvcwHQYDVR0OBBYEFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5L2M5NzZm Yy1kN2QzLTRjYmEtYjAyZS1kYmJiMzVjOWUzNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvYzk3NmZj LWQ3ZDMtNGNiYS1iMDJlLWRiYmIzNWM5ZTM3OC8xL3ctaGxhYkZwREozX2RGeTdR NEJiaFlLd0JhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHoGCCsGAQUF BwEHAQH/BGswaTBYBAIAATBSAwQDLhIQAwQEPhBAAwQEXbgAAwQCuQY4AwQCwXz4 MAwDBAPCOkgDBAHCOkwDBAHCOpgDBAHCOtwDBADCOvAwDAMEAcI68gMEAcI69AME AMI69zANBAIAAjAHAwUAKgIm0DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAuJUw DQYJKoZIhvcNAQELBQADggEBAHaC8mlG7kZ5B7qUGmYicej4NvxUAYAzg3/cN7K5 M9DJiJmBIPDLuHOGDmxDFKZ2cj86AsD+4bxCKmLBPqOgn44Boj1NIc7V82KCGI+f KCsArcL7yNAIHzJ9Spuc96vajBSCWTdE9lTGoAVOUfMwOwaZhO8ZtAgnkWAIJOMZ lRgBLo2KIXLtHsP57a39Jp1Nnur8H6+yvGfEWzec//GseVcUInR6Kiz/QxotPBej DGmqOvfu3mXKoWqlk6TkOalenrZaQZn5lXR6B0AVewvlyX7xqI7McacRiU2bNtYk qgRViCpd1O7ELQ7O2YvzuFplH/Vc9UvjG7XZ18l0dFv7oa8= -----END CERTIFICATE-----Generated at Mon Jan 26 06:35:32 2026 by rpki-client