This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer File: w1k2RMcJGfYIPygZpz89Oeucteg.cer (raw, json) Hash identifier: ghVJzLz4bTsayMdE2/ZlBF6MqxDK4CGZYDF3lWFmkd8= Subject key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED71DD7E752E90523AE849A7B27254 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.19.103.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:71:dd:7e:75:2e:90:52:3a:e8:49:a7:b2:72:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f7:2d:f8:27:1a:7c:97:11:d5:9b:2b:a3:a4: 19:78:1d:59:ea:27:20:9c:f7:0b:06:2c:1f:9c:45: f5:54:e4:03:e2:38:c8:45:b9:ab:85:0e:fe:3f:db: 79:46:5e:91:fd:f9:03:68:f5:a1:4f:d5:a8:80:9d: bd:63:4c:be:12:57:54:cc:cc:3a:ba:2f:e9:ef:be: 10:83:c5:ee:41:ca:19:b6:c5:bd:b3:25:28:fa:db: a8:b9:69:43:ef:46:41:f6:89:64:28:3a:09:d7:6c: 3e:14:d2:81:10:7d:05:5d:a2:a0:d5:18:ae:95:ff: 06:57:51:7d:87:03:f8:f3:d4:e5:3f:8d:4b:d3:33: bb:0f:19:87:7c:e7:f7:09:8a:3e:ff:39:8b:7b:b1: 48:8f:0d:b3:30:34:8c:f9:f9:a9:31:f4:17:74:c1: f1:1e:04:5b:0c:40:e7:75:98:0b:d2:41:9c:35:26: 13:0a:36:f5:c3:e2:80:6a:c7:62:9b:02:d5:19:9f: 4b:d9:ee:66:bd:d1:0f:89:44:0b:22:0e:bc:70:4c: f3:35:07:53:ae:c6:1e:bf:ee:aa:b6:84:47:d5:05: 14:bf:53:87:53:ca:32:04:f1:00:72:b0:8a:4b:8c: 3d:45:e5:c3:f7:6d:e4:e1:25:55:a5:cb:23:51:a6: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.103.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:cf:16:cd:67:d4:48:ae:bb:e4:59:57:9e:0b:86:84:d2:88: 50:88:b0:ed:3d:2a:e0:68:90:f1:5a:ec:37:48:6b:91:8d:23: c2:b1:74:08:86:19:85:ff:19:2b:49:98:f3:f7:7f:49:6c:76: ab:3e:b7:71:9a:a5:32:8c:6c:72:8f:59:4e:0d:b3:52:e0:18: ba:65:6a:de:f3:8c:af:a1:b4:f0:5a:b9:49:42:01:fb:ae:05: 2e:8b:05:8e:b5:22:45:da:37:d5:be:e6:9c:1b:5d:42:7b:4f: 83:b2:f8:b7:b3:2d:43:0b:03:3a:31:08:0c:f2:b9:dd:15:f8: f0:1e:59:6c:d0:8a:de:72:2d:74:19:a8:5c:85:12:78:8e:b8: a1:7c:e2:45:72:b5:b4:73:cf:2c:c5:04:6c:b1:2f:a0:60:aa: d0:88:25:77:c7:fc:90:10:04:3c:f6:f0:7f:b6:f9:52:af:0f: ef:fa:91:51:c9:2d:03:80:2f:6d:41:29:f2:db:2b:4c:23:0f: ab:d1:5b:56:bf:d2:3f:46:b0:1c:6d:d3:3b:56:c5:5d:d2:f7: 54:de:bf:60:5c:8d:ff:50:b7:da:ff:2a:36:f9:82:30:21:11: 0f:ca:ab:00:85:96:4a:bd:93:3d:f2:28:37:ed:58:a5:0d:70: c7:47:6e:1a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87XHdfnUukFI66EmnsnJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzU5MzY0NGM3MDkxOWY2MDgzZjI4MTlhNzNmM2QzOWViOWNiNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPct+CcafJcR1Zsro6QZeB1Z6icg nPcLBiwfnEX1VOQD4jjIRbmrhQ7+P9t5Rl6R/fkDaPWhT9WogJ29Y0y+EldUzMw6 ui/p774Qg8XuQcoZtsW9syUo+tuouWlD70ZB9olkKDoJ12w+FNKBEH0FXaKg1Riu lf8GV1F9hwP489TlP41L0zO7DxmHfOf3CYo+/zmLe7FIjw2zMDSM+fmpMfQXdMHx HgRbDEDndZgL0kGcNSYTCjb1w+KAasdimwLVGZ9L2e5mvdEPiUQLIg68cEzzNQdT rsYev+6qtoRH1QUUv1OHU8oyBPEAcrCKS4w9ReXD923k4SVVpcsjUaZFfwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMNZNkTHCRn2CD8oGac/PTnrnLXoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2ViM2Fi NS01NmNkLTQyMjctYjA2ZC1hNmNlMzhmM2QxZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZWIzYWI1 LTU2Y2QtNDIyNy1iMDZkLWE2Y2UzOGYzZDFkOC8xL3cxazJSTWNKR2ZZSVB5Z1pw ejg5T2V1Y3RlZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAkhNnMA0GCSqGSIb3DQEBCwUAA4IBAQCczxbN Z9RIrrvkWVeeC4aE0ohQiLDtPSrgaJDxWuw3SGuRjSPCsXQIhhmF/xkrSZjz939J bHarPrdxmqUyjGxyj1lODbNS4Bi6ZWre84yvobTwWrlJQgH7rgUuiwWOtSJF2jfV vuacG11Ce0+Dsvi3sy1DCwM6MQgM8rndFfjwHlls0Ireci10GahchRJ4jrihfOJF crW0c88sxQRssS+gYKrQiCV3x/yQEAQ89vB/tvlSrw/v+pFRyS0DgC9tQSny2ytM Iw+r0VtWv9I/RrAcbdM7VsVd0vdU3r9gXI3/ULfa/yo2+YIwIREPyqsAhZZKvZM9 8ig37VilDXDHR24a -----END CERTIFICATE-----Generated at Mon Jan 26 04:25:00 2026 by rpki-client