This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer File: wSXvTcnT7N9IZlXC3SMenLuwoLc.cer (raw, json) Hash identifier: 8Uqt3bm1j2hqE+Nr4H32rOlFXF7450bmgdt0RaaDjrU= Subject key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB3DF5D061A70F4B13AA46AD117A9A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209859 IP: 2001:67c:1768::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3d:f5:d0:61:a7:0f:4b:13:aa:46:ad:11:7a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:16:99:55:37:0f:45:c5:24:3e:df:63:56: 73:57:52:80:8f:cc:4d:90:13:97:12:fc:42:0c:f6: 13:6d:e2:15:15:4b:c4:ee:06:41:39:ef:2c:a7:da: 65:94:ae:26:d8:e8:14:de:d4:79:13:98:58:01:fd: 66:0a:9e:a0:bc:14:02:88:e9:3c:8e:6b:54:fb:a6: 18:61:e8:30:e5:1d:47:75:72:fa:da:d4:ae:fd:5e: 20:4b:c7:ed:5d:50:dd:94:a4:ed:a7:48:99:6f:6e: 65:10:40:83:b2:6c:c9:5d:6b:0a:27:81:5e:a5:71: c7:16:49:b0:ef:14:54:35:a8:c0:0b:d6:6b:e7:d3: f9:b8:6d:c6:8d:c2:37:09:63:16:f5:35:db:fc:69: 13:2a:a6:91:25:5a:f0:ab:df:5e:7b:bd:21:0f:4b: ae:ab:f7:45:8e:14:42:70:c6:63:68:8d:9a:74:d2: 9d:ff:5c:03:03:70:12:3f:65:32:3a:30:9d:0f:e9: fc:d0:96:f8:19:4d:9e:fb:6e:30:13:b0:6b:07:b0: 01:14:b1:29:f0:9f:75:f2:39:66:35:36:0e:ec:bd: 45:29:53:4e:7b:56:58:f9:df:c3:33:c5:c1:68:f7: 1b:a2:e3:4d:de:dd:fa:54:90:c7:08:6b:45:79:54: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1768::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209859 Signature Algorithm: sha256WithRSAEncryption 84:1b:14:cc:d6:31:0a:d5:d2:d0:07:e0:6c:a7:69:2e:5e:96: 54:d6:cb:c1:5b:11:c3:46:8b:f8:f1:35:b6:f1:69:6a:0a:38: 0b:a0:e1:cd:ac:05:0d:93:c2:2e:6c:f0:d2:87:64:6f:96:57: 10:db:91:4b:b6:6c:99:63:ab:98:df:7d:e1:8e:32:5b:3f:80: 81:da:f8:56:35:23:c4:46:71:7f:c3:0a:66:c4:53:3e:b8:88: c4:d7:32:48:de:49:5c:83:b2:f1:45:a3:40:b2:b9:bd:33:56: a4:c2:fa:17:36:15:4d:65:9d:27:87:c5:0e:11:61:ea:d7:f2: ea:38:a4:55:6d:28:2e:28:11:6d:d9:6e:3e:28:be:d3:34:34: cc:52:fe:f7:da:ea:94:fd:b7:6e:aa:4e:f1:3f:11:fb:c9:ce: 26:72:16:e3:c6:f4:48:6e:1e:44:b2:dc:dc:a6:d8:08:5f:50: 54:4e:63:c3:9d:29:01:6d:8e:50:9b:cf:eb:60:66:67:ea:4b: 9a:ca:79:26:4c:35:69:04:3b:00:cc:fc:36:33:0a:3a:e3:ca: e5:ba:b1:39:aa:bd:37:6b:53:3f:be:35:d0:9c:ac:9b:a2:af: e1:c5:77:85:e6:92:89:0c:b3:23:76:55:c9:54:f0:48:80:ae: 70:2a:6e:76 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt26z310GGnD0sTqkatEXqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTI1ZWY0ZGM5ZDNlY2RmNDg2NjU1YzJkZDIzMWU5Y2JiYjBhMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q8WmVU3D0XFJD7fY1ZzV1KAj8xN kBOXEvxCDPYTbeIVFUvE7gZBOe8sp9pllK4m2OgU3tR5E5hYAf1mCp6gvBQCiOk8 jmtU+6YYYegw5R1HdXL62tSu/V4gS8ftXVDdlKTtp0iZb25lEECDsmzJXWsKJ4Fe pXHHFkmw7xRUNajAC9Zr59P5uG3GjcI3CWMW9TXb/GkTKqaRJVrwq99ee70hD0uu q/dFjhRCcMZjaI2adNKd/1wDA3ASP2UyOjCdD+n80Jb4GU2e+24wE7BrB7ABFLEp 8J918jlmNTYO7L1FKVNOe1ZY+d/DM8XBaPcbouNN3t36VJDHCGtFeVRTIQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMEl703J0+zfSGZVwt0jHpy7sKC3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2VhODE3 MC0wZGIzLTRkMDItYWE4YS1lNzQ0YzViZWY1NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvZWE4MTcw LTBkYjMtNGQwMi1hYThhLWU3NDRjNWJlZjU2MS8xL3dTWHZUY25UN045SVpsWEMz U01lbkx1d29MYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBdoMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMzwzANBgkqhkiG9w0BAQsFAAOCAQEAhBsUzNYxCtXS0AfgbKdpLl6WVNbL wVsRw0aL+PE1tvFpago4C6DhzawFDZPCLmzw0odkb5ZXENuRS7ZsmWOrmN994Y4y Wz+Agdr4VjUjxEZxf8MKZsRTPriIxNcySN5JXIOy8UWjQLK5vTNWpML6FzYVTWWd J4fFDhFh6tfy6jikVW0oLigRbdluPii+0zQ0zFL+99rqlP23bqpO8T8R+8nOJnIW 48b0SG4eRLLc3KbYCF9QVE5jw50pAW2OUJvP62BmZ+pLmsp5Jkw1aQQ7AMz8NjMK OuPK5bqxOaq9N2tTP7410Jysm6Kv4cV3heaSiQyzI3ZVyVTwSICucCpudg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:13 2026 by rpki-client