This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer (raw, json) Hash identifier: KruF+FWLNgH1EWF7FIsFHaRL3cgZpCmXrL6F9K+k6VQ= Subject key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C117E505228A95871E7552F2A3420AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50010 AS: 201413 IP: 5.21.0.0/16 IP: 5.162.0.0/16 IP: 37.28.0.0/17 IP: 37.200.128.0/17 IP: 46.40.192.0/18 IP: 94.185.0.0/18 IP: 145.255.64.0/18 IP: 185.6.220.0/22 IP: 188.66.128.0/17 IP: 188.135.0.0/17 IP: 2a02:2908::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7e:50:52:28:a9:58:71:e7:55:2f:2a:34:20:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:03:22:61:dd:66:2a:59:fa:a8:30:0e:5d: e1:6f:13:65:57:16:53:07:8e:ba:e5:6a:35:ef:f0: 8d:0e:a1:4b:5b:7f:74:6f:c7:62:d1:1d:36:79:2e: 83:9b:92:d2:da:d6:85:48:7e:3d:c7:80:05:98:aa: 18:89:3b:3d:c9:45:58:00:ef:50:1a:e2:4c:07:b8: a4:21:6c:0b:59:77:eb:8c:ce:5f:74:95:46:0a:79: 40:fd:9f:23:fe:82:a7:df:db:36:23:f1:9f:5c:3d: 37:91:3b:47:61:01:05:3b:db:ee:f5:3d:c6:e7:b8: 83:f5:1d:ad:7a:99:78:e3:2a:fe:44:d4:fc:ec:dc: 18:e5:d5:8f:d4:72:a1:46:56:77:53:1c:c5:05:ce: e1:d7:2a:59:0c:41:f3:2d:ec:d5:96:e9:11:5c:67: 3c:7f:e6:61:99:73:63:3e:45:9c:e6:b3:60:ef:74: 12:42:49:9f:67:81:cc:9b:f0:d8:52:ea:49:97:cf: aa:a6:18:9a:b4:13:a4:5b:75:af:b2:e1:a1:7f:d4: 15:79:bd:2f:89:42:cd:68:ae:18:99:b7:b7:94:4f: ad:64:ec:13:57:3e:40:79:d0:89:ba:1e:54:60:dd: 11:20:57:d8:75:52:3d:94:36:25:67:88:59:56:bc: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.21.0.0/16 5.162.0.0/16 37.28.0.0/17 37.200.128.0/17 46.40.192.0/18 94.185.0.0/18 145.255.64.0/18 185.6.220.0/22 188.66.128.0/17 188.135.0.0/17 IPv6: 2a02:2908::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50010 201413 Signature Algorithm: sha256WithRSAEncryption 04:fd:40:e5:56:47:15:89:c9:d6:54:06:1c:66:90:a6:35:4e: 0e:2b:bb:70:0f:fc:30:c0:07:0a:c2:76:e4:d9:ac:1f:be:06: ec:93:f9:f5:a7:c7:51:7b:aa:6b:f6:b9:98:99:31:ed:9e:f7: 55:0a:cc:9c:05:3a:3c:0e:13:08:fd:d3:dc:df:71:cf:36:a3: ac:c8:73:50:70:c6:a7:99:21:c0:9d:03:90:dc:a3:47:62:c6: 89:02:2f:5b:5c:81:4f:7b:86:8f:3c:dc:c8:df:75:9a:27:d4: 0a:1e:59:85:af:1a:62:d8:40:6b:d7:6f:3e:96:82:a5:23:9f: 9e:54:a5:23:54:f8:56:0a:cf:8e:a9:2b:b2:c3:c1:64:bf:15: 46:bb:dd:f8:fc:d9:48:47:0a:9c:f9:9e:c8:08:a3:a6:6e:9a: a5:e8:21:5a:8d:17:75:28:d4:50:e9:ee:66:a6:b9:49:2e:17: 0b:05:38:5d:45:b7:51:88:64:68:ed:b6:11:7d:ec:e4:13:ee: 88:80:b1:48:50:13:96:70:d1:0f:61:31:28:45:06:ff:06:ce: 27:6c:e0:b5:3e:ee:69:76:25:de:5c:0a:58:d7:0d:b2:2c:53: ad:ba:04:92:07:fc:2b:f8:2d:02:cb:f0:ea:c0:53:00:1c:15: f1:1a:bf:72 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZt8EX5QUiipWHHnVS8qNCCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzVmMDM5NDllNjYxZTI0YmUwZjFlMDhjNjRkYWQwNWUzMWM0ZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWsDImHdZipZ+qgwDl3hbxNlVxZT B4665Wo17/CNDqFLW390b8di0R02eS6Dm5LS2taFSH49x4AFmKoYiTs9yUVYAO9Q GuJMB7ikIWwLWXfrjM5fdJVGCnlA/Z8j/oKn39s2I/GfXD03kTtHYQEFO9vu9T3G 57iD9R2tepl44yr+RNT87NwY5dWP1HKhRlZ3UxzFBc7h1ypZDEHzLezVlukRXGc8 f+ZhmXNjPkWc5rNg73QSQkmfZ4HMm/DYUupJl8+qphiatBOkW3WvsuGhf9QVeb0v iULNaK4Ymbe3lE+tZOwTVz5AedCJuh5UYN0RIFfYdVI9lDYlZ4hZVrznZQIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFMNfA5SeZh4kvg8eCMZNrQXjHE6vMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzI4OWZj Mi1mMjc4LTRmNjYtYjhlYy1jNzQzY2I2ZDJmYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMjg5ZmMy LWYyNzgtNGY2Ni1iOGVjLWM3NDNjYjZkMmZjMy8xL3cxOERsSjVtSGlTLUR4NEl4 azJ0QmVNY1RxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF BwEHAQH/BFMwUTBABAIAATA6AwMABRUDAwAFogMEByUcAAMEByXIgAMEBi4owAME Bl65AAMEBpH/QAMEArkG3AMEB7xCgAMEB7yHADANBAIAAjAHAwUDKgIpCDAfBggr BgEFBQcBCAEB/wQQMA6gDDAKAgMAw1oCAwMSxTANBgkqhkiG9w0BAQsFAAOCAQEA BP1A5VZHFYnJ1lQGHGaQpjVODiu7cA/8MMAHCsJ25NmsH74G7JP59afHUXuqa/a5 mJkx7Z73VQrMnAU6PA4TCP3T3N9xzzajrMhzUHDGp5khwJ0DkNyjR2LGiQIvW1yB T3uGjzzcyN91mifUCh5Zha8aYthAa9dvPpaCpSOfnlSlI1T4VgrPjqkrssPBZL8V Rrvd+PzZSEcKnPmeyAijpm6apeghWo0XdSjUUOnuZqa5SS4XCwU4XUW3UYhkaO22 EX3s5BPuiICxSFATlnDRD2ExKEUG/wbOJ2zgtT7uaXYl3lwKWNcNsixTrboEkgf8 K/gtAsvw6sBTABwV8Rq/cg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:09 2026 by rpki-client