This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer File: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer (raw, json) Hash identifier: Th2qMZj6fWX1fI0lcR8Apl57qQasAIFasBi/yGXTfIU= Subject key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E32A0CF98C8C1DC53A6D26DFDE1D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212714 IP: 185.152.172.0/22 IP: 2a11:180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:32:a0:cf:98:c8:c1:dc:53:a6:d2:6d:fd:e1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c115b327e84761685022f47328d6f4cbd6d3041e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5a:3e:d5:81:44:6e:c8:cf:03:eb:2e:d4:84: f7:af:81:70:c2:c9:d5:24:92:4c:d2:6f:1d:80:a5: f3:de:1e:8e:a2:1d:66:cb:bd:77:69:e7:b5:d6:c3: 63:c1:11:6d:ef:ff:50:47:8f:26:26:62:10:c5:0a: 2b:0f:c1:b0:62:e4:f5:10:9a:c5:b4:5e:b9:2e:b7: d6:c7:c6:b5:3a:9f:50:6b:59:ed:58:ed:5e:3b:be: 16:8f:ed:27:56:87:34:a0:b6:88:fa:90:08:c3:8b: df:d5:34:d1:20:28:de:e3:eb:f2:b3:2a:1c:5c:e1: 28:d7:9d:59:8f:03:5d:de:2b:bb:4c:0a:8f:8d:b0: bc:47:36:40:97:19:5c:d0:1b:e8:e9:6f:54:3f:df: 34:f6:45:3c:79:98:ce:62:94:42:6e:d8:47:f0:de: 5d:b8:c7:9f:86:24:01:be:63:f1:38:96:29:04:71: 63:d8:35:70:e9:6b:25:43:8e:c6:c5:62:f7:be:b9: b5:26:6e:83:5b:67:e3:f5:a0:96:50:b1:0c:ff:c5: 68:fa:d7:0f:61:a8:2b:f8:c3:a4:80:ec:95:5f:c3: 2c:a9:a1:fd:00:2b:b5:01:05:38:f1:b6:fa:b0:69: df:55:32:76:c6:86:0d:c3:49:74:0e:4a:f1:0d:ac: 51:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.172.0/22 IPv6: 2a11:180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212714 Signature Algorithm: sha256WithRSAEncryption 1f:85:14:94:f1:37:69:c9:9e:64:f0:8d:0d:73:e8:ed:49:e9: 90:7d:a1:ae:a8:d0:81:6f:25:2d:2c:f7:79:45:46:25:3b:c8: f4:7e:3c:40:f4:6f:c0:3a:42:b2:09:fd:8c:58:9d:8c:fa:8c: 2c:52:92:8c:7a:6f:82:d6:e5:9e:c3:31:b5:d1:e4:a0:01:af: bc:88:6d:08:67:b6:4b:9e:c7:00:0c:47:e5:1f:b7:6f:c6:ea: e3:2f:a9:78:cb:04:00:74:0a:de:0f:92:87:27:86:28:a2:f6: fc:6c:ea:01:e2:4d:1b:d9:86:53:71:bd:33:08:7f:fb:a2:93: ba:e9:9d:b4:21:71:e4:df:22:62:2c:53:d3:df:7a:2c:c9:02: e8:52:21:d7:8d:3b:7f:00:80:9c:f9:01:ab:41:c9:85:4a:67: 3c:2e:cc:af:d3:47:ff:e4:38:d5:67:98:0f:b6:70:b2:d3:b1: 72:b4:7c:af:32:37:84:18:c4:63:c3:dd:8b:10:c6:c6:ed:5e: 47:db:a6:3f:b0:74:01:9d:cf:be:b0:5f:4e:98:24:ac:e8:02: ee:45:cf:7f:27:40:98:68:3f:06:16:de:80:22:02:60:71:2e: 7f:84:ff:2e:6b:9e:c6:38:ca:51:30:cc:50:07:22:6e:31:f9: 09:11:4f:85 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fjKgz5jIwdxTptJt/eHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTE1YjMyN2U4NDc2MTY4NTAyMmY0NzMyOGQ2ZjRjYmQ2ZDMwNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklo+1YFEbsjPA+su1IT3r4FwwsnV JJJM0m8dgKXz3h6Ooh1my713aee11sNjwRFt7/9QR48mJmIQxQorD8GwYuT1EJrF tF65LrfWx8a1Op9Qa1ntWO1eO74Wj+0nVoc0oLaI+pAIw4vf1TTRICje4+vysyoc XOEo151ZjwNd3iu7TAqPjbC8RzZAlxlc0Bvo6W9UP9809kU8eZjOYpRCbthH8N5d uMefhiQBvmPxOJYpBHFj2DVw6WslQ47GxWL3vrm1Jm6DW2fj9aCWULEM/8Vo+tcP Yagr+MOkgOyVX8MsqaH9ACu1AQU48bb6sGnfVTJ2xoYNw0l0DkrxDaxROQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMEVsyfoR2FoUCL0cyjW9MvW0wQeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2E0YmRm Ny0yNTc5LTRiZDAtOGE5My0yMjRmZDc4ZWY4MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYTRiZGY3 LTI1NzktNGJkMC04YTkzLTIyNGZkNzhlZjgyNy8xL3dSV3pKLWhIWVdoUUl2UnpL TmIweTliVEJCNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZisMA0EAgACMAcDBQMqEQGAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM+6jANBgkqhkiG9w0BAQsFAAOCAQEAH4UUlPE3acme ZPCNDXPo7UnpkH2hrqjQgW8lLSz3eUVGJTvI9H48QPRvwDpCsgn9jFidjPqMLFKS jHpvgtblnsMxtdHkoAGvvIhtCGe2S57HAAxH5R+3b8bq4y+peMsEAHQK3g+ShyeG KKL2/GzqAeJNG9mGU3G9Mwh/+6KTuumdtCFx5N8iYixT0996LMkC6FIh1407fwCA nPkBq0HJhUpnPC7Mr9NH/+Q41WeYD7ZwstOxcrR8rzI3hBjEY8PdixDGxu1eR9um P7B0AZ3PvrBfTpgkrOgC7kXPfydAmGg/BhbegCICYHEuf4T/LmuexjjKUTDMUAci bjH5CRFPhQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:48 2026 by rpki-client