This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer (raw, json) Hash identifier: dvUKkc9yrp1pQx/0IN8jYLY0wTn+zPqLXYNQRdmYlHY= Subject key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDC5FC8FD6D04768DACAE593A0E82C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.79.72.0/22 IP: 2a05:7240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c5:fc:8f:d6:d0:47:68:da:ca:e5:93:a0:e8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0f92571108958786b65ffa241b1f11f6d058b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:14:07:31:35:c1:7b:9e:55:b3:9f:5d:5c:3a: 15:d1:b7:3c:fc:4c:e0:25:ae:5d:52:74:64:e5:8a: 47:7b:ab:2f:89:c7:73:10:4f:05:31:e5:40:b2:ee: d1:1e:e0:e4:06:bf:70:f0:60:62:c1:4c:78:82:df: 2a:a1:3d:7a:82:0b:88:c8:54:db:76:65:09:2d:01: 18:8a:bc:c2:77:f1:38:4d:16:c2:d2:48:39:23:33: 82:65:b2:51:d7:67:ee:3a:b8:78:fa:c9:b2:e1:80: 94:1e:d9:b2:f1:c3:7a:57:ba:57:b6:ff:83:6d:6e: 18:e7:97:44:c7:b1:5d:9f:23:c5:df:9f:82:79:32: 53:c3:bd:e1:8a:67:e0:73:9c:cb:a6:3a:1d:49:78: 5d:67:fc:d8:83:75:99:1c:dd:6c:28:d4:81:ea:77: fe:4e:04:b6:26:28:23:dc:9f:e0:e1:33:fe:23:1d: 53:a0:54:2a:80:bb:d0:fc:48:ea:28:7c:d9:c1:cf: 3e:d9:3f:5f:0c:ea:e0:29:3a:e9:2c:72:8c:e2:c2: 03:f7:ee:c6:95:e8:a3:9a:9d:01:8d:c3:67:78:44: e1:08:11:28:63:c5:69:98:ee:4d:00:10:77:5b:82: 42:91:d9:6a:d6:16:32:9a:07:81:53:c9:7a:be:7b: 6c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.72.0/22 IPv6: 2a05:7240::/29 Signature Algorithm: sha256WithRSAEncryption 9f:a1:95:24:fd:8f:47:a3:e3:14:2d:3b:46:af:76:fd:b8:fd: e3:f4:f6:ed:07:7e:1d:1c:46:17:c1:70:a8:50:06:74:80:37: df:8e:55:83:76:c9:2e:ab:53:e0:91:40:4d:8e:f0:b4:52:85: aa:58:60:ea:8f:3a:68:b8:2b:91:39:3e:00:e7:27:74:85:82: 43:e0:b2:cd:55:43:69:46:1b:f9:50:84:08:98:c8:22:46:6c: 27:cd:ea:a1:e0:6c:6e:24:52:63:e3:a6:04:16:89:8c:f8:f4: e8:e3:f7:e2:c3:0f:fb:68:ff:0f:b4:2f:b8:03:35:72:42:3b: bf:ed:5e:83:6f:18:45:dd:27:de:5c:f6:e9:19:9c:fd:fc:3c: cc:37:d0:76:60:e7:fd:76:e6:12:8f:51:2f:57:07:b0:21:d3: d4:e6:a4:4f:1f:5e:1a:77:f9:91:3f:3e:d5:12:06:fe:b2:f9: 94:51:6d:31:8a:60:cb:61:e4:33:b4:a3:f5:f8:41:34:76:44: b2:ec:06:d5:6c:87:8f:67:0d:9f:9a:5e:a9:39:bf:61:6e:84: 11:28:f2:7c:b1:60:44:09:a6:95:90:7f:70:49:8f:c3:5b:00: 6a:9e:e3:08:20:53:ca:df:aa:9f:52:79:42:90:47:60:af:20: 58:c4:16:bd -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87cX8j9bQR2jayuWToOgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGY5MjU3MTEwODk1ODc4NmI2NWZmYTI0MWIxZjExZjZkMDU4YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthQHMTXBe55Vs59dXDoV0bc8/Ezg Ja5dUnRk5YpHe6svicdzEE8FMeVAsu7RHuDkBr9w8GBiwUx4gt8qoT16gguIyFTb dmUJLQEYirzCd/E4TRbC0kg5IzOCZbJR12fuOrh4+smy4YCUHtmy8cN6V7pXtv+D bW4Y55dEx7FdnyPF35+CeTJTw73himfgc5zLpjodSXhdZ/zYg3WZHN1sKNSB6nf+ TgS2Jigj3J/g4TP+Ix1ToFQqgLvQ/EjqKHzZwc8+2T9fDOrgKTrpLHKM4sID9+7G leijmp0BjcNneEThCBEoY8VpmO5NABB3W4JCkdlq1hYymgeBU8l6vnts+QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMD5JXEQiVh4a2X/okGx8R9tBYtWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2JmMWNj Yi05ZjMyLTRmNDEtOGRhZC05YjJiOWVhOTU1MzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvYmYxY2Ni LTlmMzItNGY0MS04ZGFkLTliMmI5ZWE5NTUzNS8xL3dQa2xjUkNKV0hoclpmLWlR Ykh4SDIwRmkxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuU9IMA0EAgACMAcDBQMqBXJAMA0GCSqGSIb3 DQEBCwUAA4IBAQCfoZUk/Y9Ho+MULTtGr3b9uP3j9PbtB34dHEYXwXCoUAZ0gDff jlWDdskuq1PgkUBNjvC0UoWqWGDqjzpouCuROT4A5yd0hYJD4LLNVUNpRhv5UIQI mMgiRmwnzeqh4GxuJFJj46YEFomM+PTo4/fiww/7aP8PtC+4AzVyQju/7V6DbxhF 3SfeXPbpGZz9/DzMN9B2YOf9duYSj1EvVwewIdPU5qRPH14ad/mRPz7VEgb+svmU UW0ximDLYeQztKP1+EE0dkSy7AbVbIePZw2fml6pOb9hboQRKPJ8sWBECaaVkH9w SY/DWwBqnuMIIFPK36qfUnlCkEdgryBYxBa9 -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:47 2026 by rpki-client