This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer File: wQKF31sDng8E4t_s4opaj77G6Tg.cer (raw, json) Hash identifier: KRzyS727LLP7YLm+EbZIVcwDvpEEP5N3C528hsI7f8o= Subject key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7644C242BA712F631570E60366750 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62100 AS: 202987 IP: 185.127.124.0/22 IP: 193.27.232.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:64:4c:24:2b:a7:12:f6:31:57:0e:60:36:67:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ac:c2:7b:f7:f1:4c:7a:f9:3b:92:27:99:83: 13:26:35:24:75:4f:47:40:bd:22:92:d0:01:37:64: 25:39:26:d8:b0:6a:ea:50:a3:2f:c5:4d:58:97:06: 98:4c:c7:b2:1c:e4:75:08:84:b8:12:7b:e8:c1:3e: c4:cb:a3:6d:08:d6:c9:0d:c5:32:de:22:39:e7:36: b9:22:91:cc:3f:33:fa:c7:9a:57:53:60:b2:64:75: 43:29:ea:e4:74:8d:88:35:90:35:b3:5b:29:98:a2: c7:e2:c4:eb:b0:48:7f:fb:3e:4e:50:22:00:7d:7f: a4:3f:72:f1:9c:68:9f:3b:9a:57:52:7c:e1:28:0c: fb:a4:ee:44:46:e3:74:cf:9e:4a:9e:41:cf:c4:b4: db:b4:05:c4:d4:68:04:c0:c7:85:55:37:fe:a7:69: fc:b6:b2:5e:8d:09:41:0a:99:07:25:eb:aa:62:20: 50:32:39:39:3f:b9:4a:c3:54:89:3b:80:6b:3b:c7: d9:22:42:85:c9:a0:74:f1:d9:4d:be:42:f1:dd:10: 5c:c5:a0:1d:32:e7:fe:96:fd:bc:e5:a4:d3:f1:57: 81:3e:a7:df:96:12:1d:c4:b4:1f:71:70:f5:1c:51: d6:66:fc:af:55:d2:b3:4f:40:ba:d6:4b:af:84:cf: 87:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.124.0/22 193.27.232.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62100 202987 Signature Algorithm: sha256WithRSAEncryption 7f:d1:1b:1b:28:68:c1:ce:5f:1b:9f:35:54:e9:fe:7c:56:1c: 09:61:aa:34:b1:e0:b0:2b:6f:99:46:eb:c4:4e:84:14:e3:9e: 1b:e0:61:8b:79:6a:67:24:cc:d5:2f:4f:59:e2:bf:87:a9:49: 88:30:7d:43:56:8f:1d:92:9a:f0:f1:2f:19:3d:63:74:ac:e8: c4:11:67:1c:5d:a3:c6:ec:a8:2e:0b:b3:15:92:c5:80:e0:29: a7:38:78:60:e4:63:9b:6a:10:f0:ff:48:9e:9b:8e:53:40:40: 31:31:24:aa:36:8c:d6:f5:8f:31:91:9a:4c:cc:a9:e7:89:86: 96:37:b1:ed:b6:6b:9d:b8:61:d6:58:1a:7e:dd:dc:f7:0d:38: 3b:7b:e7:a3:cf:1d:e1:10:fd:20:23:a8:25:b5:0f:c8:47:b8: 28:f0:e1:1a:39:b9:10:e0:1e:b2:03:8d:01:1e:1e:fa:2a:9b: 7c:6d:23:27:a7:55:ed:e4:88:e7:e1:51:1d:e8:e9:96:84:2b: ad:98:c5:a1:6a:0a:e9:be:04:71:74:ca:0e:35:47:8d:5a:3c: b8:02:b3:b7:df:1a:4d:f6:ac:32:a9:d8:0f:c0:d8:53:00:d7: a7:3d:9e:5d:ca:6d:6a:b1:2a:91:93:8d:18:44:fe:d0:c7:86: a4:0b:a3:9c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt3x2RMJCunEvYxVw5gNmdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTAyODVkZjViMDM5ZTBmMDRlMmRmZWNlMjhhNWE4ZmJlYzZlOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6zCe/fxTHr5O5InmYMTJjUkdU9H QL0iktABN2QlOSbYsGrqUKMvxU1YlwaYTMeyHOR1CIS4EnvowT7Ey6NtCNbJDcUy 3iI55za5IpHMPzP6x5pXU2CyZHVDKerkdI2INZA1s1spmKLH4sTrsEh/+z5OUCIA fX+kP3LxnGifO5pXUnzhKAz7pO5ERuN0z55KnkHPxLTbtAXE1GgEwMeFVTf+p2n8 trJejQlBCpkHJeuqYiBQMjk5P7lKw1SJO4BrO8fZIkKFyaB08dlNvkLx3RBcxaAd Muf+lv285aTT8VeBPqfflhIdxLQfcXD1HFHWZvyvVdKzT0C61kuvhM+H7wIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFMEChd9bA54PBOLf7OKKWo++xuk4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2FlYmQ0 Mi0wN2EzLTRjYjUtODUyZS01MmFmYzc3Y2ExOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvYWViZDQy LTA3YTMtNGNiNS04NTJlLTUyYWZjNzdjYTE4Zi8xL3dRS0YzMXNEbmc4RTR0X3M0 b3Bhajc3RzZUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCuX98AwQCwRvoMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwDylAIDAxjrMA0GCSqGSIb3DQEBCwUAA4IBAQB/0RsbKGjBzl8bnzVU 6f58VhwJYao0seCwK2+ZRuvEToQU454b4GGLeWpnJMzVL09Z4r+HqUmIMH1DVo8d kprw8S8ZPWN0rOjEEWccXaPG7KguC7MVksWA4CmnOHhg5GObahDw/0iem45TQEAx MSSqNozW9Y8xkZpMzKnniYaWN7HttmuduGHWWBp+3dz3DTg7e+ejzx3hEP0gI6gl tQ/IR7go8OEaObkQ4B6yA40BHh76Kpt8bSMnp1Xt5Ijn4VEd6OmWhCutmMWhagrp vgRxdMoONUeNWjy4ArO33xpN9qwyqdgPwNhTANenPZ5dym1qsSqRk40YRP7Qx4ak C6Oc -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:00 2026 by rpki-client