This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer File: w3URP9S_vTixBDhDwwkmoRDMD1E.cer (raw, json) Hash identifier: 02bixU5irJhsH/TxZa4suwxreC862jEawcH+MTpJds8= Subject key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14FC1FD353A5314B0F80293F9315BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42417 IP: 193.239.218.0/23 IP: 2001:67c:2584::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fc:1f:d3:53:a5:31:4b:0f:80:29:3f:93:15:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c375113fd4bfbd38b1043843c30926a110cc0f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:17:8a:f7:75:6f:07:41:15:6a:24:34:c8: 4b:52:18:ee:e6:91:2f:d1:0d:40:5f:a4:35:57:65: be:85:5a:a1:5a:fb:a5:36:56:30:07:a5:f3:db:50: 5e:72:e5:fe:90:65:63:65:bc:0f:62:e1:e3:88:8d: 8a:ea:63:14:8b:10:b0:02:27:d4:84:86:64:66:e7: ab:6d:98:bf:f0:fe:7c:a0:1e:ab:ab:08:92:92:e6: e9:7b:7b:7b:5d:18:d4:0e:0b:0e:4c:7d:9c:ca:b2: d2:2b:da:5f:12:12:be:b9:48:e9:ac:2b:ce:fb:83: de:c2:81:cf:2a:93:e1:0f:06:bf:e2:47:53:ec:be: 83:43:17:a7:66:67:1b:d3:f8:60:d1:92:d3:eb:bf: 72:b2:6c:a1:af:af:e1:0c:ac:2e:71:9f:fb:9b:b6: 36:a3:c2:98:d5:aa:6e:d9:a7:b8:7f:cf:ed:c5:b3: 0e:42:a1:f9:5d:d4:01:29:14:1c:1e:35:a1:f0:3c: 92:88:e3:72:02:62:86:33:21:0a:62:79:6d:8c:94: be:8b:99:08:a3:c2:a1:90:48:f9:ed:09:12:c1:ab: b9:76:88:cc:74:65:c3:36:6f:20:02:40:00:0f:7f: 55:c2:a9:83:94:d8:8e:28:b6:a9:8b:f8:99:ed:a6: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.218.0/23 IPv6: 2001:67c:2584::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42417 Signature Algorithm: sha256WithRSAEncryption 7d:d9:45:66:00:55:bd:3f:94:05:91:b8:08:d8:24:19:1a:6a: e7:2b:a2:79:83:c6:dc:c0:93:3d:b4:5e:65:d6:af:05:2e:03: e0:ea:92:0f:9f:5d:9a:dc:fd:10:68:76:cd:c9:81:4b:e7:5f: 23:78:b1:c8:9b:fb:9a:d9:08:18:44:d5:79:ee:26:ff:1f:7b: 1f:ae:f5:bf:15:83:ee:35:25:e5:7c:94:e8:b3:f3:8b:60:80: b4:7e:58:79:70:e6:dd:c1:71:7d:72:4b:b7:a3:8c:a3:7a:90: 8b:d1:1e:c5:79:b3:d5:6f:31:7e:43:71:a8:db:f9:f5:2f:91: c3:de:8c:e9:a6:a7:95:7f:5b:83:c3:55:fc:5a:c5:ad:5d:27: 0e:94:e3:0c:d5:1d:21:c2:61:e3:d0:c3:78:3e:51:7b:b1:12: b9:f1:e7:cd:18:35:ea:3f:67:8a:5e:80:28:df:38:57:de:77: 9a:0d:78:37:94:c3:da:36:6c:0d:17:97:9c:88:7a:b5:c4:b4: 61:d4:1c:52:ed:91:38:2c:b6:67:24:b1:38:eb:a4:ba:d5:c8: e3:bf:69:cd:2f:5c:f2:00:db:fa:7d:0a:a6:6d:c0:f7:03:9d: 0e:07:6b:6b:b5:87:f6:1a:b2:06:83:94:50:53:eb:29:04:4b: 44:c4:2f:e9 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt/FPwf01OlMUsPgCk/kxW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzc1MTEzZmQ0YmZiZDM4YjEwNDM4NDNjMzA5MjZhMTEwY2MwZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqYXivd1bwdBFWokNMhLUhju5pEv 0Q1AX6Q1V2W+hVqhWvulNlYwB6Xz21BecuX+kGVjZbwPYuHjiI2K6mMUixCwAifU hIZkZuerbZi/8P58oB6rqwiSkubpe3t7XRjUDgsOTH2cyrLSK9pfEhK+uUjprCvO +4PewoHPKpPhDwa/4kdT7L6DQxenZmcb0/hg0ZLT679ysmyhr6/hDKwucZ/7m7Y2 o8KY1apu2ae4f8/txbMOQqH5XdQBKRQcHjWh8DySiONyAmKGMyEKYnltjJS+i5kI o8KhkEj57QkSwau5dojMdGXDNm8gAkAAD39VwqmDlNiOKLapi/iZ7abRcQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFMN1ET/Uv704sQQ4Q8MJJqEQzA9RMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2FmOWM3 OC02ZWRlLTQwZGYtODljMS03OTcyNWZhMmUxMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvYWY5Yzc4 LTZlZGUtNDBkZi04OWMxLTc5NzI1ZmEyZTEzMy8xL3czVVJQOVNfdlRpeEJEaER3 d2ttb1JETUQxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwe/aMA8EAgACMAkDBwAgAQZ8JYQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAKWxMA0GCSqGSIb3DQEBCwUAA4IBAQB92UVmAFW9 P5QFkbgI2CQZGmrnK6J5g8bcwJM9tF5l1q8FLgPg6pIPn12a3P0QaHbNyYFL518j eLHIm/ua2QgYRNV57ib/H3sfrvW/FYPuNSXlfJTos/OLYIC0flh5cObdwXF9cku3 o4yjepCL0R7FebPVbzF+Q3Go2/n1L5HD3ozppqeVf1uDw1X8WsWtXScOlOMM1R0h wmHj0MN4PlF7sRK58efNGDXqP2eKXoAo3zhX3neaDXg3lMPaNmwNF5eciHq1xLRh 1BxS7ZE4LLZnJLE466S61cjjv2nNL1zyANv6fQqmbcD3A50OB2trtYf2GrIGg5RQ U+spBEtExC/p -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:08 2026 by rpki-client