This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer File: wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer (raw, json) Hash identifier: iUD6nZKgD+FDfC6XODWVm0Y7Zxg9zLhAkapcaN4ZZiQ= Subject key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783500F9B951DDDD4CB3FA335C5B6FA2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.228.128.0/20 IP: 185.173.208.0/22 IP: 193.110.108.0/23 IP: 2a03:7800::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:00:f9:b9:51:dd:dd:4c:b3:fa:33:5c:5b:6f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1233861207a230564ef36f11e0157344731e3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e4:73:4c:63:44:61:47:05:c4:e0:ff:a2:e1: 98:bb:d8:89:63:e1:38:2b:91:88:77:aa:2c:93:93: d7:aa:8c:62:dc:0c:b3:46:7d:67:5b:63:3d:03:61: 31:30:ae:1f:9c:bd:2a:55:1c:f5:a3:3e:c1:ca:77: 6b:30:d7:50:d2:a7:3f:4e:e0:16:2c:a3:0b:ea:d1: c4:a7:45:cb:1c:ce:91:68:df:05:a0:90:c7:83:c0: c9:78:dc:c2:36:f1:fb:6f:59:a6:32:95:14:90:c2: 26:c9:d9:e4:31:90:a8:ca:72:8c:96:97:a3:9e:55: 65:8c:cd:fc:c4:4d:93:9c:7c:28:0e:8d:b4:8a:2c: a0:fd:dc:e2:75:d8:ac:67:99:94:52:97:dd:92:53: 00:43:ce:4f:31:7a:17:d6:13:be:7e:8b:10:9a:44: 7c:65:04:2d:25:f8:a2:62:24:9f:1f:f3:8b:d7:b9: 82:4b:af:93:c2:bb:1d:d5:45:2d:02:af:43:4d:c2: 16:45:11:ec:77:b7:b4:8b:5f:e3:0c:cb:fd:bb:bd: 23:5d:5f:ff:22:eb:b6:44:f9:0e:86:55:57:70:ab: 96:fa:fc:eb:7d:b2:58:ac:a5:a7:ef:59:1d:dd:1b: 13:fa:4d:03:e8:4a:0f:33:40:03:25:8b:2f:b5:09: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.128.0/20 185.173.208.0/22 193.110.108.0/23 IPv6: 2a03:7800::/32 Signature Algorithm: sha256WithRSAEncryption 27:b4:0f:e5:be:26:ad:11:61:f1:db:d9:c6:ad:f1:8b:f2:6a: fd:5f:f2:f1:c5:9a:36:18:27:b6:6d:65:d7:2d:aa:7d:66:04: e7:54:05:85:af:25:a7:7d:99:c3:a1:bd:f2:e7:e6:dc:2e:09: 9c:5a:7e:09:8f:05:fe:e3:41:b2:d6:51:b2:d5:8c:be:9d:6b: 19:92:09:f1:67:2d:de:42:14:f4:b6:f8:bc:4b:29:9f:96:4d: 17:4e:d5:38:e1:e6:7a:47:04:69:cf:68:d1:ab:8c:1f:78:dd: 8e:8e:77:7d:1b:c2:85:ae:73:70:db:2d:05:75:57:8e:35:78: 5d:36:25:67:23:30:e8:c8:fb:89:bf:8b:11:b7:50:92:71:92: be:5b:3b:61:f3:21:2c:f9:6b:16:62:86:38:e5:0a:7b:48:f0: db:70:e8:5a:f5:96:da:15:13:18:0d:67:c0:03:57:38:af:45: 38:37:2c:9f:53:76:bf:2a:4e:b5:77:b1:41:2e:76:c7:95:d9: 7e:ed:86:62:d7:ec:aa:d5:55:6d:3a:a5:a6:f6:7a:49:62:21: bd:fd:32:60:06:31:4d:82:dc:d3:4a:a1:a7:c1:8f:f4:6d:16: 35:74:b8:ea:ce:30:49:ab:1a:ce:52:67:b9:c2:de:eb:24:73: 85:01:6d:9f -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NQD5uVHd3Uyz+jNcW2+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTIzMzg2MTIwN2EyMzA1NjRlZjM2ZjExZTAxNTczNDQ3MzFlM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+RzTGNEYUcFxOD/ouGYu9iJY+E4 K5GId6osk5PXqoxi3AyzRn1nW2M9A2ExMK4fnL0qVRz1oz7ByndrMNdQ0qc/TuAW LKML6tHEp0XLHM6RaN8FoJDHg8DJeNzCNvH7b1mmMpUUkMImydnkMZCoynKMlpej nlVljM38xE2TnHwoDo20iiyg/dziddisZ5mUUpfdklMAQ85PMXoX1hO+fosQmkR8 ZQQtJfiiYiSfH/OL17mCS6+Twrsd1UUtAq9DTcIWRRHsd7e0i1/jDMv9u70jXV// Iuu2RPkOhlVXcKuW+vzrfbJYrKWn71kd3RsT+k0D6EoPM0ADJYsvtQlMXwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFMEjOGEgeiMFZO828R4BVzRHMeP5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzJjOTMy MC0zOGQ5LTQ2MDQtYWQ5Mi0xYzdiMmI5MWQzMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMmM5MzIw LTM4ZDktNDYwNC1hZDkyLTFjN2IyYjkxZDMwOC8xL3dTTTRZU0I2SXdWazd6YnhI Z0ZYTkVjeDRfay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQELuSAAwQCua3QAwQBwW5sMA0EAgACMAcDBQAq A3gAMA0GCSqGSIb3DQEBCwUAA4IBAQAntA/lviatEWHx29nGrfGL8mr9X/LxxZo2 GCe2bWXXLap9ZgTnVAWFryWnfZnDob3y5+bcLgmcWn4JjwX+40Gy1lGy1Yy+nWsZ kgnxZy3eQhT0tvi8Symflk0XTtU44eZ6RwRpz2jRq4wfeN2Ojnd9G8KFrnNw2y0F dVeONXhdNiVnIzDoyPuJv4sRt1CScZK+Wzth8yEs+WsWYoY45Qp7SPDbcOha9Zba FRMYDWfAA1c4r0U4NyyfU3a/Kk61d7FBLnbHldl+7YZi1+yq1VVtOqWm9npJYiG9 /TJgBjFNgtzTSqGnwY/0bRY1dLjqzjBJqxrOUme5wt7rJHOFAW2f -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:18 2026 by rpki-client