This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer File: wDleyIIdj4GJQTOSvYdte9eVwWw.cer (raw, json) Hash identifier: KBgn+lRooN51t8min0Bfj2eQUtLvXkh9HqdW6dOZy/U= Subject key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910128350C44B53AC4AE547B288FE26 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.39.121.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:12:83:50:c4:4b:53:ac:4a:e5:47:b2:88:fe:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0395ec8821d8f8189413392bd876d7bd795c16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:90:cd:fe:d8:a1:19:bd:9d:20:20:71:e1: b7:b9:ff:ae:26:ce:7b:5d:29:7a:05:50:4f:73:a5: 1c:a5:da:d1:20:8b:69:a5:a6:7d:f5:7a:ee:7f:45: 71:53:ed:2a:9a:a6:97:13:79:65:4f:59:bc:d1:44: 39:b5:5c:80:c9:3e:b8:3e:f8:b1:a8:75:2b:39:96: 64:e4:db:a9:c5:f0:95:ce:a0:8e:62:5f:c3:cd:06: ba:16:31:09:72:90:57:4e:81:d6:46:09:7a:75:7d: 86:99:2e:7c:a0:a2:11:c4:85:9e:88:b8:b0:6c:9b: df:e9:e3:58:50:a1:52:bf:9a:a8:cc:df:c9:6f:18: 1c:f7:9a:a9:4d:6a:91:e0:b2:60:c8:ac:ef:b8:c1: 70:8d:30:b8:8e:fc:85:14:b2:d6:a9:4a:bb:85:50: 46:d6:c8:ea:d0:95:11:17:e5:57:cb:70:34:f8:83: 57:b6:29:7b:89:91:4a:72:d4:66:5e:47:e9:eb:7c: 5e:1b:c6:9f:f3:6b:d5:9f:a7:d6:c2:e8:19:7c:c3: 8b:c3:7e:56:0e:8a:86:b3:48:c2:2b:4e:f4:59:c0: d3:aa:5d:05:0f:e1:47:ab:b1:3e:0e:f5:1b:5b:4e: 75:dd:c0:d8:c8:7f:66:06:ac:6e:88:23:fc:ce:76: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.121.0/24 Signature Algorithm: sha256WithRSAEncryption 67:da:7d:78:8a:ad:00:0d:a5:06:af:26:c5:c3:3e:15:35:af: eb:89:e6:f1:fd:46:64:47:3a:1c:0a:73:6b:1e:a6:8c:6a:3d: 9a:33:4a:6d:66:b3:9d:b3:45:74:5e:6c:8f:a8:68:ee:54:4c: e5:8f:a8:ab:75:a8:f8:7d:23:2a:94:76:f0:d5:5f:5d:46:07: d4:56:23:39:cd:fc:fc:36:22:c6:8e:51:03:9a:96:af:80:d8: 10:6b:7d:cd:de:4c:bb:68:8c:f3:26:67:9c:d5:5f:d4:19:f6: 5b:72:32:71:7d:10:3c:b1:bc:70:13:55:67:52:a5:4e:ab:44: af:33:b8:66:aa:c1:8f:cb:d2:6f:c1:4f:14:d3:69:b1:65:cb: 61:5d:2a:c4:27:cc:98:4c:cf:a3:f3:f4:57:30:da:09:80:13: b9:ea:90:99:3b:84:a1:59:d2:8c:ed:29:00:8e:ba:38:c6:77: 94:cb:f4:7a:17:0e:01:50:a2:4a:f9:d8:0d:cb:5c:7d:9b:bb: 31:a9:b8:50:39:73:08:fd:d3:0d:12:69:9a:67:0d:5f:6e:ec: dd:fa:d3:6f:62:6f:d6:25:be:32:e3:e9:4e:9d:69:de:54:a3: 0b:53:cd:68:78:47:51:04:5a:a6:36:17:cf:f1:e4:d4:c2:d9: df:77:7d:2a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EBKDUMRLU6xK5UeyiP4mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDM5NWVjODgyMWQ4ZjgxODk0MTMzOTJiZDg3NmQ3YmQ3OTVjMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB6Qzf7YoRm9nSAgceG3uf+uJs57 XSl6BVBPc6UcpdrRIItppaZ99Xruf0VxU+0qmqaXE3llT1m80UQ5tVyAyT64Pvix qHUrOZZk5NupxfCVzqCOYl/DzQa6FjEJcpBXToHWRgl6dX2GmS58oKIRxIWeiLiw bJvf6eNYUKFSv5qozN/Jbxgc95qpTWqR4LJgyKzvuMFwjTC4jvyFFLLWqUq7hVBG 1sjq0JURF+VXy3A0+INXtil7iZFKctRmXkfp63xeG8af82vVn6fWwugZfMOLw35W DoqGs0jCK070WcDTql0FD+FHq7E+DvUbW0513cDYyH9mBqxuiCP8znZ5pwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMA5XsiCHY+BiUEzkr2HbXvXlcFsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzAyOTY2 YS1hN2FlLTQwNTQtYWIzNC1mN2U3M2RkZWY0ZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvMDI5NjZh LWE3YWUtNDA1NC1hYjM0LWY3ZTczZGRlZjRlMi8xL3dEbGV5SUlkajRHSlFUT1N2 WWR0ZTllVndXdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwid5MA0GCSqGSIb3DQEBCwUAA4IBAQBn2n14 iq0ADaUGrybFwz4VNa/riebx/UZkRzocCnNrHqaMaj2aM0ptZrOds0V0XmyPqGju VEzlj6irdaj4fSMqlHbw1V9dRgfUViM5zfz8NiLGjlEDmpavgNgQa33N3ky7aIzz Jmec1V/UGfZbcjJxfRA8sbxwE1VnUqVOq0SvM7hmqsGPy9JvwU8U02mxZcthXSrE J8yYTM+j8/RXMNoJgBO56pCZO4ShWdKM7SkAjro4xneUy/R6Fw4BUKJK+dgNy1x9 m7sxqbhQOXMI/dMNEmmaZw1fbuzd+tNvYm/WJb4y4+lOnWneVKMLU81oeEdRBFqm NhfP8eTUwtnfd30q -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:06 2026 by rpki-client