This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer File: wBOZtGfJBmYt4A7HZsx-AA6uwns.cer (raw, json) Hash identifier: Jjup9yF+uU73zN1celwaddZVoWrWuG6XQf4ccUIP6e4= Subject key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A7E3AB6B70B3D27B440F5F3CCDBAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210666 IP: 91.216.22.0/24 IP: 2001:67c:11c8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:7e:3a:b6:b7:0b:3d:27:b4:40:f5:f3:cc:db:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c01399b467c906662de00ec766cc7e000eaec27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:8b:7f:d9:09:57:e7:3e:b3:2f:0e:6f:26: b8:b2:48:df:f1:bf:87:84:fc:51:37:64:23:67:31: d8:39:d5:89:e6:c6:40:88:f4:1d:40:cc:bb:4c:44: 2c:00:4b:ac:6e:14:b2:6d:26:7c:e6:37:0e:b9:b0: df:57:a4:fa:d8:27:e6:2a:48:5a:e3:fb:9f:c9:54: c7:32:4b:7d:dc:c3:d5:39:d9:ea:e0:26:b5:fa:2d: e9:07:6c:fd:cf:16:7c:03:e4:82:92:e4:9a:ae:cf: 10:e7:bc:50:81:9b:4c:e3:a5:eb:0c:14:84:38:fe: 03:7c:a6:9d:58:9f:07:70:92:a7:d4:95:ae:d7:c9: 54:36:ab:f3:0f:b9:de:3b:43:88:86:22:6b:67:4b: 22:17:5f:2f:78:6a:b8:1d:6e:4e:96:4d:96:3d:12: 03:71:16:8d:39:82:91:a1:da:d7:f1:7e:67:79:64: c8:d7:54:0c:c8:4a:c7:f7:92:6c:ac:63:9f:26:9a: d8:c8:7b:f4:7d:77:18:35:8a:de:bd:16:60:33:9f: 05:eb:14:ef:20:d3:1e:e8:fa:a5:a9:14:8f:8b:75: 60:e4:e2:de:6f:3f:0b:ac:5c:3b:05:ac:39:a3:e1: a8:d8:41:88:22:ad:61:04:9d:87:0e:7d:8c:82:51: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.22.0/24 IPv6: 2001:67c:11c8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210666 Signature Algorithm: sha256WithRSAEncryption 61:cc:c1:79:c0:9e:11:e8:97:fa:3c:eb:82:20:37:c5:c0:c0: 1b:53:1d:b0:82:4a:6b:6b:33:37:f4:92:94:f9:b1:55:51:fa: e2:d1:28:bc:2e:d4:74:b4:0c:e8:6b:07:46:af:da:ba:ff:92: 6e:7a:b0:32:18:e5:df:73:30:bb:e0:71:57:57:99:d3:18:4d: 1e:b3:86:86:bf:bb:44:7d:ce:ea:ce:e0:eb:3d:e4:6e:d6:23: 44:91:50:12:3f:a1:b1:3b:2b:ab:d0:8d:3b:a9:29:fa:00:a9: 2b:16:9d:63:ea:7e:b2:28:43:28:f2:d0:de:70:dd:e6:0c:ea: 75:bc:b9:f9:12:d6:36:25:74:cf:14:e1:3c:33:5f:15:9e:bd: 58:f5:54:df:4d:9c:72:52:9e:ef:eb:76:ec:b7:82:db:09:38: 13:18:64:a5:9e:ca:b7:ed:64:c1:f5:6d:d9:cd:47:27:d2:ea: 2a:02:87:80:8e:e0:ad:ff:a3:11:af:e3:7e:4d:91:51:30:e2: 1d:1c:f6:6a:58:b2:d4:5e:c8:e4:f3:49:eb:01:44:06:45:a9: 36:eb:a3:56:c0:5c:5c:41:54:66:b0:dd:61:39:1e:7a:b6:00: 62:a3:bf:2f:4c:21:4c:c4:44:4a:25:1f:b4:51:f7:f9:e4:8b: 78:13:b9:f2 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt6Wn46trcLPSe0QPXzzNutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDEzOTliNDY3YzkwNjY2MmRlMDBlYzc2NmNjN2UwMDBlYWVjMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcqLf9kJV+c+sy8Obya4skjf8b+H hPxRN2QjZzHYOdWJ5sZAiPQdQMy7TEQsAEusbhSybSZ85jcOubDfV6T62CfmKkha 4/ufyVTHMkt93MPVOdnq4Ca1+i3pB2z9zxZ8A+SCkuSars8Q57xQgZtM46XrDBSE OP4DfKadWJ8HcJKn1JWu18lUNqvzD7neO0OIhiJrZ0siF18veGq4HW5Olk2WPRID cRaNOYKRodrX8X5neWTI11QMyErH95JsrGOfJprYyHv0fXcYNYrevRZgM58F6xTv INMe6PqlqRSPi3Vg5OLebz8LrFw7Baw5o+Go2EGIIq1hBJ2HDn2MglE97QIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFMATmbRnyQZmLeAOx2bMfgAOrsJ7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzRjODQ5 Zi04NjUwLTRhMWUtYmU1OS0xZTYzYmJkNzBkOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNGM4NDlm LTg2NTAtNGExZS1iZTU5LTFlNjNiYmQ3MGQ5Ni8xL3dCT1p0R2ZKQm1ZdDRBN0ha c3gtQUE2dXducy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9gWMA8EAgACMAkDBwAgAQZ8EcgwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAzbqMA0GCSqGSIb3DQEBCwUAA4IBAQBhzMF5wJ4R 6Jf6POuCIDfFwMAbUx2wgkprazM39JKU+bFVUfri0Si8LtR0tAzoawdGr9q6/5Ju erAyGOXfczC74HFXV5nTGE0es4aGv7tEfc7qzuDrPeRu1iNEkVASP6GxOyur0I07 qSn6AKkrFp1j6n6yKEMo8tDecN3mDOp1vLn5EtY2JXTPFOE8M18Vnr1Y9VTfTZxy Up7v63bst4LbCTgTGGSlnsq37WTB9W3ZzUcn0uoqAoeAjuCt/6MRr+N+TZFRMOId HPZqWLLUXsjk80nrAUQGRak266NWwFxcQVRmsN1hOR56tgBio78vTCFMxERKJR+0 Uff55It4E7ny -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:07 2026 by rpki-client