This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer File: wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer (raw, json) Hash identifier: HgqNqjpJoZ+D+g+lGvpRW8niRyzob454COfaCN7FsQw= Subject key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12EBB6250D77D9FEAAC894EB195707 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:444::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:eb:b6:25:0d:77:d9:fe:aa:c8:94:eb:19:57:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:1f:9c:9e:40:26:3f:9e:51:f6:cd:af:d8: 28:8b:99:71:69:24:18:5a:66:79:73:64:b2:b1:01: be:28:d0:20:c8:1b:9b:b3:ba:c8:8c:18:d7:fe:bb: 50:43:e9:cb:e0:33:dd:d5:e4:19:6c:d9:3d:28:3f: df:c2:4b:b8:83:c3:39:b2:cf:4d:d3:a1:42:f0:95: c6:bd:b6:8b:ed:39:86:5a:cf:3b:f7:a5:20:67:86: c3:5c:9c:2d:43:7b:ed:d3:e0:43:4a:05:a5:27:fb: 81:76:7c:f7:48:4c:33:cc:9a:1e:8a:bb:fa:0e:70: 94:05:6c:2f:7c:5d:ff:5a:57:fa:fd:d4:d2:5f:15: 01:0f:6a:ad:b0:fd:66:52:90:35:78:f8:02:70:e8: bd:89:a5:a6:8e:65:93:c4:6a:4b:70:d7:1c:1e:94: 12:05:8f:e1:6f:cc:dc:81:ae:48:28:68:0e:c2:8c: 6f:4c:45:b2:7a:b6:9e:19:e0:69:db:f5:3e:ec:5c: 05:f9:5f:f2:ff:ec:f0:6c:bf:99:92:e5:33:94:af: f1:5b:59:d6:92:9c:db:91:41:2d:a6:14:14:a4:39: 10:dc:3e:ea:95:97:02:c1:4e:c3:7e:c6:7f:e1:2f: a1:f4:75:83:59:52:ca:cf:43:6c:2d:0a:41:54:fd: a9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:444::/48 Signature Algorithm: sha256WithRSAEncryption 45:c5:2d:28:bf:f5:e6:b5:56:e9:1f:87:24:2b:5b:20:34:3e: d4:ef:c3:7b:71:87:4f:5b:77:1d:3f:94:d4:52:9f:c6:73:74: f4:a9:01:80:b6:63:d4:61:8b:60:1e:d8:ee:aa:ba:29:22:1f: 2d:7f:66:62:2e:14:b2:2a:0a:07:11:35:c9:79:0b:fb:aa:d4: 4f:5d:4a:82:5d:4a:d4:0d:1b:0c:f2:b2:24:50:32:10:49:ef: b2:b7:73:dc:a9:bf:39:d9:f4:7a:16:dc:c4:9d:d0:ea:2c:fd: 0a:af:7e:87:44:00:3c:ef:8d:e4:e4:0b:bf:47:b4:f9:31:2c: f1:aa:6c:f4:ae:bb:d7:ed:e1:29:e2:2a:19:59:c4:02:b2:a9: 2c:7d:39:1b:59:ab:cd:47:a5:cc:2a:d1:b3:ae:5b:58:f4:e2: 32:6c:4d:a1:94:37:13:b0:a9:4b:10:ad:d3:71:66:2a:bf:c4: 3b:26:5b:d8:bb:85:1b:77:83:cb:95:4d:57:6f:87:19:5c:53: a5:e7:b5:90:0d:f7:f3:f8:1b:2f:3e:80:ad:f7:64:af:f3:96: 47:bb:fa:23:32:10:61:b9:1d:af:03:0a:26:d0:f6:e7:4e:6a: a8:ed:d4:95:d6:27:f3:b3:42:97:20:c4:33:ae:14:de:ce:bd: ad:bc:31:4e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt8Euu2JQ132f6qyJTrGVcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTE3M2Y0N2VjMWQ5MmU3ODg2ZWEyOTA3ZmY5MjdlZTE3Y2JmMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9QfnJ5AJj+eUfbNr9goi5lxaSQY WmZ5c2SysQG+KNAgyBubs7rIjBjX/rtQQ+nL4DPd1eQZbNk9KD/fwku4g8M5ss9N 06FC8JXGvbaL7TmGWs8796UgZ4bDXJwtQ3vt0+BDSgWlJ/uBdnz3SEwzzJoeirv6 DnCUBWwvfF3/Wlf6/dTSXxUBD2qtsP1mUpA1ePgCcOi9iaWmjmWTxGpLcNccHpQS BY/hb8zcga5IKGgOwoxvTEWyeraeGeBp2/U+7FwF+V/y/+zwbL+ZkuUzlK/xW1nW kpzbkUEtphQUpDkQ3D7qlZcCwU7DfsZ/4S+h9HWDWVLKz0NsLQpBVP2pWwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFMEXP0fsHZLniG6ikH/5J+4Xy/L0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2VmMTg4 Yi02MmU5LTRmZDYtOTdmMC1iYjM5MzI5Zjg3ZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvZWYxODhi LTYyZTktNGZkNi05N2YwLWJiMzkzMjlmODdmMy8xL3dSY19SLXdka3VlSWJxS1Fm X2tuN2hmTDh2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAREMA0GCSqGSIb3DQEBCwUAA4IBAQBF xS0ov/XmtVbpH4ckK1sgND7U78N7cYdPW3cdP5TUUp/Gc3T0qQGAtmPUYYtgHtju qropIh8tf2ZiLhSyKgoHETXJeQv7qtRPXUqCXUrUDRsM8rIkUDIQSe+yt3Pcqb85 2fR6FtzEndDqLP0Kr36HRAA8743k5Au/R7T5MSzxqmz0rrvX7eEp4ioZWcQCsqks fTkbWavNR6XMKtGzrltY9OIybE2hlDcTsKlLEK3TcWYqv8Q7JlvYu4Ubd4PLlU1X b4cZXFOl57WQDffz+BsvPoCt92Sv85ZHu/ojMhBhuR2vAwom0PbnTmqo7dSV1ifz s0KXIMQzrhTezr2tvDFO -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:03 2026 by rpki-client