This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer File: wBWqbOyG3yEV4qEOkgnYqi35i78.cer (raw, json) Hash identifier: dzyTNUbBqULuvwLln+jZGkf0IvO9K2Mbjkl/kW0aTLQ= Subject key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84F2AC9190B55AF2A51C437B92401B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8289 AS: 49515 AS: 59727 IP: 185.230.32.0/22 IP: 188.95.32.0/21 IP: 2a02:ca80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f2:ac:91:90:b5:5a:f2:a5:1c:43:7b:92:40:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:75:af:48:c9:fb:18:df:9f:38:c8:34:ae:30: f9:68:97:7e:5c:a7:5b:e2:09:50:5b:6f:0b:0b:29: 0e:ad:cf:58:02:c6:25:fa:d2:ba:cb:98:14:42:d9: 08:38:96:c7:79:6a:58:30:97:10:96:f6:6d:b4:f8: 67:7e:57:4e:34:fe:d2:24:18:bc:ed:ba:24:03:b8: c3:1a:03:61:81:d0:26:73:c1:48:40:99:d2:2d:57: c1:e5:5e:e9:c2:76:0e:c2:3d:26:7c:1f:45:3d:fa: 81:fa:ab:5e:d5:68:dd:18:cb:a0:b5:80:bf:9d:b8: 43:dc:85:89:4a:4a:c9:b1:e5:a4:ed:dd:7b:0c:a8: b0:4e:ed:59:91:ef:e2:bb:e4:41:b4:d9:55:d3:e1: e3:60:3d:2f:9a:4a:16:b5:69:70:8e:2c:0c:b4:c8: 05:4c:d0:35:f3:3c:bf:54:13:7f:92:e6:e1:22:e3: 50:d4:b1:15:a2:a0:91:b8:f3:9e:bb:66:05:c9:aa: 24:d4:e6:32:17:6f:61:c2:d3:f7:6f:a4:8e:db:a7: f5:a0:3c:f9:67:bd:67:09:ef:15:b0:c3:f6:04:48: b5:2f:5b:05:0d:58:5d:a5:0e:de:89:0b:8a:84:0a: 10:df:b2:72:0a:6b:c0:67:91:4c:68:ac:4e:b9:2d: 4d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.32.0/22 188.95.32.0/21 IPv6: 2a02:ca80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8289 49515 59727 Signature Algorithm: sha256WithRSAEncryption 5c:b0:3c:5a:42:d4:ea:1f:01:2b:45:87:99:7f:be:49:7b:74: e9:7d:37:d5:ed:1e:82:48:88:74:f2:4d:cd:98:2d:f5:3a:50: e2:4a:13:0f:ad:d8:df:58:f2:c8:4a:66:89:aa:8a:fe:e3:cd: 40:7d:9b:b1:b8:98:3b:94:6d:2f:39:f7:0b:b9:1c:cd:bd:57: 5f:b3:af:00:09:68:26:1f:96:3c:85:28:38:30:94:3b:f5:b6: 6b:18:38:80:b4:1f:19:2e:bf:49:c8:00:80:59:d1:03:e1:48: 1e:0c:51:4c:d2:7d:7b:8a:fe:ef:42:73:5c:b3:d2:f2:bb:a3: 88:9f:19:86:7e:82:72:af:34:5e:9b:fe:8c:f5:af:a5:ae:88: fc:ab:8d:92:82:52:da:61:dc:5a:1d:98:85:be:b9:7c:b4:72: 24:71:af:a8:1f:70:a6:8a:ff:be:27:2a:ca:2d:8d:5c:8c:10: 9b:80:a9:9e:e2:3a:d1:94:20:77:08:fe:3d:6a:83:1c:ca:6d: 06:79:4a:13:f1:1d:28:92:49:1a:a9:f7:9b:5e:4d:e0:7d:6e: 22:3a:17:44:d8:3e:69:6e:a3:0b:29:68:c2:ba:ee:28:a9:20: 07:20:c1:75:f5:05:6e:12:8a:30:2e:d4:d1:af:5d:84:a8:47: e7:d1:80:1e -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt/hPKskZC1WvKlHEN7kkAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDE1YWE2Y2VjODZkZjIxMTVlMmExMGU5MjA5ZDhhYTJkZjk4YmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HWvSMn7GN+fOMg0rjD5aJd+XKdb 4glQW28LCykOrc9YAsYl+tK6y5gUQtkIOJbHeWpYMJcQlvZttPhnfldONP7SJBi8 7bokA7jDGgNhgdAmc8FIQJnSLVfB5V7pwnYOwj0mfB9FPfqB+qte1WjdGMugtYC/ nbhD3IWJSkrJseWk7d17DKiwTu1Zke/iu+RBtNlV0+HjYD0vmkoWtWlwjiwMtMgF TNA18zy/VBN/kubhIuNQ1LEVoqCRuPOeu2YFyaok1OYyF29hwtP3b6SO26f1oDz5 Z71nCe8VsMP2BEi1L1sFDVhdpQ7eiQuKhAoQ37JyCmvAZ5FMaKxOuS1NXwIDAQAB o4ICvjCCArowHQYDVR0OBBYEFMAVqmzsht8hFeKhDpIJ2Kot+Yu/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1Lzc0ZTA4 NS0zYTI5LTRjMTktODQ4NS1iN2Y5YjcwMmVkNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvNzRlMDg1 LTNhMjktNGMxOS04NDg1LWI3ZjliNzAyZWQ0OC8xL3dCV3FiT3lHM3lFVjRxRU9r Z25ZcWkzNWk3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCueYgAwQDvF8gMA0EAgACMAcDBQMqAsqAMCMG CCsGAQUFBwEIAQH/BBQwEqAQMA4CAiBhAgMAwWsCAwDpTzANBgkqhkiG9w0BAQsF AAOCAQEAXLA8WkLU6h8BK0WHmX++SXt06X031e0egkiIdPJNzZgt9TpQ4koTD63Y 31jyyEpmiaqK/uPNQH2bsbiYO5RtLzn3C7kczb1XX7OvAAloJh+WPIUoODCUO/W2 axg4gLQfGS6/ScgAgFnRA+FIHgxRTNJ9e4r+70JzXLPS8rujiJ8Zhn6Ccq80Xpv+ jPWvpa6I/KuNkoJS2mHcWh2Yhb65fLRyJHGvqB9wpor/vicqyi2NXIwQm4CpnuI6 0ZQgdwj+PWqDHMptBnlKE/EdKJJJGqn3m15N4H1uIjoXRNg+aW6jCylowrruKKkg ByDBdfUFbhKKMC7U0a9dhKhH59GAHg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:49:11 2026 by rpki-client