This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer File: wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer (raw, json) Hash identifier: zX6j3tSJ12q+YR4vQ93dwK5EwnclPRKBanK2IpVzil0= Subject key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED5B0E47BB2936106660CE79547B6D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.3.19.0/24 IP: 2a13:c740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5b:0e:47:bb:29:36:10:66:60:ce:79:54:7b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c14d63d39707d45a8c683cb52e47171d136ce508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:db:d1:2c:64:7e:e8:8b:43:e0:26:85:31: 94:32:e4:d7:77:8d:de:e3:e9:a4:d7:4a:00:64:b9: 07:a9:48:ed:8c:5d:bf:e8:ad:f1:2d:d4:c0:67:f0: ae:6c:67:17:30:cd:c8:da:c2:9e:1d:d1:7e:66:59: 55:96:1a:66:73:9c:8c:f0:28:c5:bb:14:a5:ff:8f: a1:82:80:80:69:93:bf:dc:87:e7:2c:2c:fe:70:4b: 3e:41:5f:58:12:f3:a6:c6:d6:64:2e:3f:6f:d8:e4: 4d:c7:95:db:7a:68:3a:5f:ec:ad:0e:ab:3a:40:53: 62:18:2e:45:d2:45:b1:a4:c9:1d:c7:d1:5c:ed:a3: 4b:51:7c:c1:e1:59:61:0a:42:ac:42:be:52:58:42: 1c:73:b1:1a:14:9e:f7:ad:32:a8:e4:73:35:ca:4c: a3:19:97:36:43:dc:a0:11:f2:2d:12:c9:f8:15:b2: f2:1b:c3:1a:e7:93:25:a6:67:fb:a5:70:e5:89:ab: 5e:5b:24:17:b5:bc:f2:19:33:6e:23:20:b0:1e:36: 6f:de:25:13:30:b3:58:e3:05:e8:f2:bf:da:b3:eb: 02:fb:f1:9b:70:77:20:a3:ac:81:5c:6d:32:11:42: 6d:7c:3a:32:3a:3f:87:b0:06:81:6f:5e:58:e6:26: 24:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.19.0/24 IPv6: 2a13:c740::/29 Signature Algorithm: sha256WithRSAEncryption 2f:da:1b:de:63:16:6d:e7:ca:a1:85:5a:dd:93:d8:85:2c:b2: 3f:95:66:bf:6b:ae:78:16:88:44:fc:75:c7:68:2d:8d:27:a8: f7:34:2e:24:b9:58:61:fe:0f:6b:18:7b:63:aa:a6:c4:a9:b4: 55:93:28:45:f8:39:d6:b2:4c:85:0e:a5:4e:a8:c4:90:a5:4a: c6:0f:18:61:cc:e6:8b:41:57:4e:93:bf:f2:4b:ef:48:92:5e: 0c:a4:25:57:39:b2:45:aa:73:a5:79:80:0a:3f:a4:2b:d8:29: 40:38:7f:ea:f7:8c:b3:03:0c:12:58:aa:47:b6:bc:82:26:28: 66:a4:93:f5:ef:24:fa:99:85:5e:89:c2:d2:2d:69:fd:52:39: c7:86:18:dc:23:33:de:fe:df:8b:66:05:61:d7:5e:d5:5c:36: 40:4b:5a:3e:82:95:f0:5e:a2:eb:f2:6f:c7:88:b8:bf:24:6b: 02:b7:d8:55:eb:37:4d:3a:63:bc:06:af:a4:08:35:56:3d:31: 2a:5d:6d:cb:ee:0f:1c:c7:0a:dc:44:a6:e7:04:29:a0:b4:60: 18:86:ee:9c:f3:de:25:fc:8a:cd:4a:e6:20:06:39:38:11:15: 13:6a:c8:fa:f4:a2:b4:ed:2c:00:25:02:5c:88:07:32:15:7c: 1c:4d:ff:5b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57VsOR7spNhBmYM55VHttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTRkNjNkMzk3MDdkNDVhOGM2ODNjYjUyZTQ3MTcxZDEzNmNlNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F7b0SxkfuiLQ+AmhTGUMuTXd43e 4+mk10oAZLkHqUjtjF2/6K3xLdTAZ/CubGcXMM3I2sKeHdF+ZllVlhpmc5yM8CjF uxSl/4+hgoCAaZO/3IfnLCz+cEs+QV9YEvOmxtZkLj9v2ORNx5Xbemg6X+ytDqs6 QFNiGC5F0kWxpMkdx9Fc7aNLUXzB4VlhCkKsQr5SWEIcc7EaFJ73rTKo5HM1ykyj GZc2Q9ygEfItEsn4FbLyG8Ma55Mlpmf7pXDliateWyQXtbzyGTNuIyCwHjZv3iUT MLNY4wXo8r/as+sC+/GbcHcgo6yBXG0yEUJtfDoyOj+HsAaBb15Y5iYkDwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMFNY9OXB9RajGg8tS5HFx0TbOUIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzE0OGM2 Yy1iYTEwLTQzYTMtODQ4Mi01YTFkYWE5NGRlNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvMTQ4YzZj LWJhMTAtNDNhMy04NDgyLTVhMWRhYTk0ZGU0Mi8xL3dVMWowNWNIMUZxTWFEeTFM a2NYSFJOczVRZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAPgMTMA0EAgACMAcDBQMqE8dAMA0GCSqGSIb3 DQEBCwUAA4IBAQAv2hveYxZt58qhhVrdk9iFLLI/lWa/a654FohE/HXHaC2NJ6j3 NC4kuVhh/g9rGHtjqqbEqbRVkyhF+DnWskyFDqVOqMSQpUrGDxhhzOaLQVdOk7/y S+9Ikl4MpCVXObJFqnOleYAKP6Qr2ClAOH/q94yzAwwSWKpHtryCJihmpJP17yT6 mYVeicLSLWn9UjnHhhjcIzPe/t+LZgVh117VXDZAS1o+gpXwXqLr8m/HiLi/JGsC t9hV6zdNOmO8Bq+kCDVWPTEqXW3L7g8cxwrcRKbnBCmgtGAYhu6c894l/IrNSuYg Bjk4ERUTasj69KK07SwAJQJciAcyFXwcTf9b -----END CERTIFICATE-----Generated at Mon Jan 26 02:21:34 2026 by rpki-client