This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer File: wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer (raw, json) Hash identifier: AgeZLoBtiulqBkTUtLCSSo9tPVI/bAtvdZSPG2UOXxo= Subject key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7D3BD7DCF85C9E7CA9EC23CD399AE8D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 13 Nov 2025 12:41:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 51984 AS: 199736 AS: 208909 AS: 209202 IP: 2.57.128.0/22 IP: 5.183.220.0/22 IP: 45.15.136.0/22 IP: 46.253.32.0/21 IP: 91.204.124.0/22 IP: 162.213.64.0/22 IP: 185.38.128.0/22 IP: 185.41.96.0/22 IP: 185.58.172.0/22 IP: 185.87.188.0/22 IP: 185.132.90.0/24 IP: 185.219.136.0/22 IP: 195.211.168.0/22 IP: 212.22.32.0/19 IP: 2a00:fde0::/32 IP: 2a01:57a0::/32 IP: 2a09:d940::/29 IP: 2a0e:3c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:3b:d7:dc:f8:5c:9e:7c:a9:ec:23:cd:39:9a:e8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 13 12:41:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:c3:ea:b7:a5:86:46:aa:db:b4:59:1a:b1: c1:9e:ed:a6:96:65:a2:4e:d5:a8:a6:7e:95:11:0f: d7:f5:7d:60:db:13:6c:6a:0a:e2:4f:60:cb:59:a7: 25:15:29:66:c8:d7:4a:dd:16:57:7b:4d:34:34:ca: 13:db:35:9a:7d:b7:06:fb:88:1c:e3:a8:ef:19:cb: 16:04:6d:75:fe:75:b5:0f:d8:2e:81:bc:c0:a8:3b: 08:68:b3:db:8a:46:c9:a2:6e:fe:97:b0:0b:b5:52: c1:15:24:97:6a:09:55:0c:42:99:5e:93:22:cd:0c: 22:54:5f:f8:ca:3c:88:39:a3:44:ae:3f:53:6a:e2: e0:ce:51:51:ea:e2:d2:41:cb:6d:31:50:e6:62:ca: 85:58:d9:42:57:17:08:84:8e:a8:4e:cc:db:a8:f1: 7c:4d:a8:c5:d4:af:cb:4c:ad:ec:fe:c6:f6:32:a1: 49:35:88:76:10:3d:07:10:26:43:7b:49:90:2b:05: 0c:ce:bd:db:9b:1f:9f:21:f5:54:9a:5e:9a:00:41: 12:77:9a:eb:de:95:ce:4b:65:5a:81:3d:24:34:36: 9a:fc:df:5a:4e:c0:da:c0:ff:61:fc:e6:99:df:8c: 37:fa:e3:8f:c9:88:39:df:9d:ea:67:d1:43:2b:16: b3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.128.0/22 5.183.220.0/22 45.15.136.0/22 46.253.32.0/21 91.204.124.0/22 162.213.64.0/22 185.38.128.0/22 185.41.96.0/22 185.58.172.0/22 185.87.188.0/22 185.132.90.0/24 185.219.136.0/22 195.211.168.0/22 212.22.32.0/19 IPv6: 2a00:fde0::/32 2a01:57a0::/32 2a09:d940::/29 2a0e:3c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51984 199736 208909 209202 Signature Algorithm: sha256WithRSAEncryption 88:84:59:aa:10:29:cd:c3:df:a8:77:b2:c5:14:be:8c:f8:d3: 03:fa:f8:2d:ed:3b:78:81:82:0a:7a:c1:67:97:2a:83:45:06: 2b:88:7f:71:ed:6b:5b:8e:75:f2:33:48:f5:89:57:ae:ba:db: 16:c6:3e:c8:3b:75:aa:ca:1e:b4:c1:97:d1:ca:e0:24:b2:81: 58:d4:ef:0a:09:d6:5f:1b:64:eb:8e:6d:ac:bf:4e:57:df:36: fa:d5:9b:41:21:08:57:9f:4f:f7:97:68:2c:74:92:f9:f2:4c: fc:5e:34:57:66:65:d1:aa:71:1c:0b:f7:28:b6:5c:3e:80:4f: 0c:e6:dd:5f:4f:24:10:61:61:ee:73:69:75:e6:6a:b5:16:23: 89:51:2d:85:e7:f8:29:ed:4e:30:fa:d3:5a:3a:32:e8:ec:2d: 4d:c9:68:3b:0f:87:ec:ff:71:0e:81:d5:f0:6c:d3:87:13:b8: 29:8e:ad:a2:f3:00:ac:5e:89:93:3f:52:82:fc:e8:99:90:97: 94:63:c4:35:02:b4:af:36:1d:cb:c1:2b:31:bc:82:ad:9e:fe: ee:df:1c:56:fc:e7:82:db:15:40:32:78:d9:96:54:83:2e:39: be:30:22:4b:d5:a8:b0:02:22:9b:c1:52:d4:88:a6:01:06:e1: 9e:13:e3:f1 -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISAZp9O9fc+FyefKnsI805mujYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEzMTI0MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGU4ZTU2YjE4ZDQ1YzY0NmYwM2NiNmY5MDY5ZGEwYzhiM2M3NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTzD6relhkaq27RZGrHBnu2mlmWi TtWopn6VEQ/X9X1g2xNsagriT2DLWaclFSlmyNdK3RZXe000NMoT2zWafbcG+4gc 46jvGcsWBG11/nW1D9gugbzAqDsIaLPbikbJom7+l7ALtVLBFSSXaglVDEKZXpMi zQwiVF/4yjyIOaNErj9TauLgzlFR6uLSQcttMVDmYsqFWNlCVxcIhI6oTszbqPF8 TajF1K/LTK3s/sb2MqFJNYh2ED0HECZDe0mQKwUMzr3bmx+fIfVUml6aAEESd5rr 3pXOS2VagT0kNDaa/N9aTsDawP9h/OaZ34w3+uOPyYg5353qZ9FDKxazuQIDAQAB o4IDJDCCAyAwHQYDVR0OBBYEFMDo5WsY1FxkbwPLb5Bp2gyLPHStMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzJhYmVh Mi0zMGQwLTQ2NTQtYTgzNC03NDViY2UzMDYwYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvMmFiZWEy LTMwZDAtNDY1NC1hODM0LTc0NWJjZTMwNjBjOS8xL3dPamxheGpVWEdSdkE4dHZr R25hRElzOGRLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGTBggrBgEF BQcBBwEB/wSBgzCBgDBaBAIAATBUAwQCAjmAAwQCBbfcAwQCLQ+IAwQDLv0gAwQC W8x8AwQCotVAAwQCuSaAAwQCuSlgAwQCuTqsAwQCuVe8AwQAuYRaAwQCuduIAwQC w9OoAwQF1BYgMCIEAgACMBwDBQAqAP3gAwUAKgFXoAMFAyoJ2UADBQMqDjyAMCkG CCsGAQUFBwEIAQH/BBowGKAWMBQCAwDLEAIDAww4AgMDMA0CAwMxMjANBgkqhkiG 9w0BAQsFAAOCAQEAiIRZqhApzcPfqHeyxRS+jPjTA/r4Le07eIGCCnrBZ5cqg0UG K4h/ce1rW4518jNI9YlXrrrbFsY+yDt1qsoetMGX0crgJLKBWNTvCgnWXxtk645t rL9OV982+tWbQSEIV59P95doLHSS+fJM/F40V2Zl0apxHAv3KLZcPoBPDObdX08k EGFh7nNpdeZqtRYjiVEthef4Ke1OMPrTWjoy6OwtTcloOw+H7P9xDoHV8GzThxO4 KY6tovMArF6Jkz9SgvzomZCXlGPENQK0rzYdy8ErMbyCrZ7+7t8cVvzngtsVQDJ4 2ZZUgy45vjAiS9WosAIim8FS1IimAQbhnhPj8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:45:19 2025 by rpki-client