This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer File: wUMgTpetea1qHwlA70GxbyB7SJ0.cer (raw, json) Hash identifier: eynk0bs3+AnkQIBVx9fJISLa1Ge+Er+9XsqXf2G0R9M= Subject key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11D2397FD7CFA9D581EE8FC4E368B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.84.104.0/21 IP: 91.203.80.0/22 IP: 91.224.76.0/23 IP: 185.15.116.0/22 IP: 185.48.36.0/22 IP: 193.201.88.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d2:39:7f:d7:cf:a9:d5:81:ee:8f:c4:e3:68:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:78:bb:56:b3:0f:15:50:7a:fc:d9:48:0c: d8:88:df:53:4b:04:94:7c:cb:7d:b2:cc:3f:54:e6: 2b:db:05:67:6e:43:6d:e4:8a:98:45:fc:d3:6f:20: 57:ac:6b:5c:b8:ba:d8:8e:6a:52:f7:27:62:2a:35: 8e:32:5e:c1:7e:68:80:a3:48:27:30:74:68:c7:32: aa:f7:c7:c3:52:48:93:7f:c7:11:9c:62:6e:e6:60: db:a3:71:7a:65:d5:46:b4:c0:e4:31:e2:e8:20:c3: 77:06:15:1b:4d:df:c7:4e:c0:6b:a5:65:4d:92:31: f3:62:81:63:74:0d:a0:5a:04:25:b4:86:bb:36:f3: 39:32:aa:5c:fe:15:18:01:48:be:32:77:13:ae:92: d9:25:57:26:36:9d:e8:72:4f:2e:7f:b6:e0:61:8e: 70:5e:71:ce:0f:e7:e1:71:86:a6:d6:1b:22:69:91: c5:61:09:dc:3e:60:ad:a1:2f:3a:09:6a:df:9a:30: 23:a1:3b:18:14:fc:e9:18:03:62:30:6b:25:83:04: e6:46:5d:79:28:45:23:c9:b6:79:c0:7b:d2:fa:74: e9:c9:52:df:ce:46:4f:4e:cc:af:a3:1f:27:4b:91: ff:d1:62:92:b0:5c:92:10:25:15:db:80:df:72:8c: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.84.104.0/21 91.203.80.0/22 91.224.76.0/23 185.15.116.0/22 185.48.36.0/22 193.201.88.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:76:bc:74:4b:9e:d4:c6:92:4a:f3:23:1b:f1:97:1e:50:6e: 63:95:1d:62:50:d8:a7:74:c0:b4:b6:7a:5a:ea:17:a1:b3:31: 9c:e0:53:1b:f3:38:0a:ce:0a:a6:83:ac:e1:60:f9:33:38:90: 1a:fd:bc:46:67:78:53:fb:a9:d1:6b:c8:b2:f3:51:eb:04:a1: 0e:c9:19:8b:f4:51:3e:74:06:ea:44:ff:a0:2f:61:2c:25:3d: 7f:20:73:70:1a:38:76:4b:e4:2d:0e:8e:d9:6c:3e:c4:fe:6c: 37:05:05:0e:67:01:67:42:47:b5:37:ed:3b:ed:10:42:57:5a: fa:dc:74:ef:6f:89:cc:b3:d9:34:e5:40:b6:85:50:b0:43:7a: 94:46:ef:01:98:1d:a3:4c:11:24:1a:2a:ea:b1:5f:47:3f:81: 82:5b:53:82:ad:f9:4b:f1:1b:bd:d9:fe:99:0a:1d:a8:48:d7: c0:70:3c:08:d4:7d:4b:c0:09:89:0d:ec:38:4d:71:40:8b:2c: d3:50:fd:8b:7b:d7:af:7e:6f:70:51:b0:b8:05:94:7d:24:d5: 4f:fc:0b:48:67:25:e5:db:d1:76:9d:7d:88:98:30:65:74:3f: a7:c5:19:2d:1d:99:9b:cd:db:91:57:82:fb:75:e3:1a:d2:62: e7:8d:4f:29 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt8EdI5f9fPqdWB7o/E42i4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTQzMjA0ZTk3YWQ3OWFkNmExZjA5NDBlZjQxYjE2ZjIwN2I0ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMp4u1azDxVQevzZSAzYiN9TSwSU fMt9ssw/VOYr2wVnbkNt5IqYRfzTbyBXrGtcuLrYjmpS9ydiKjWOMl7BfmiAo0gn MHRoxzKq98fDUkiTf8cRnGJu5mDbo3F6ZdVGtMDkMeLoIMN3BhUbTd/HTsBrpWVN kjHzYoFjdA2gWgQltIa7NvM5Mqpc/hUYAUi+MncTrpLZJVcmNp3ock8uf7bgYY5w XnHOD+fhcYam1hsiaZHFYQncPmCtoS86CWrfmjAjoTsYFPzpGANiMGslgwTmRl15 KEUjybZ5wHvS+nTpyVLfzkZPTsyvox8nS5H/0WKSsFySECUV24DfcoxrEwIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFMFDIE6XrXmtah8JQO9BsW8ge0idMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2IwMTQ0 ZS05ZjMwLTRmOWYtYTg3Zi1kMjlhNWQ5MThmZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvYjAxNDRl LTlmMzAtNGY5Zi1hODdmLWQyOWE1ZDkxOGZkOC8xL3dVTWdUcGV0ZWExcUh3bEE3 MEd4YnlCN1NKMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAATAkAwQDPlRoAwQCW8tQAwQBW+BMAwQCuQ90AwQCuTAk AwQCwclYMA0GCSqGSIb3DQEBCwUAA4IBAQCedrx0S57UxpJK8yMb8ZceUG5jlR1i UNindMC0tnpa6hehszGc4FMb8zgKzgqmg6zhYPkzOJAa/bxGZ3hT+6nRa8iy81Hr BKEOyRmL9FE+dAbqRP+gL2EsJT1/IHNwGjh2S+QtDo7ZbD7E/mw3BQUOZwFnQke1 N+077RBCV1r63HTvb4nMs9k05UC2hVCwQ3qURu8BmB2jTBEkGirqsV9HP4GCW1OC rflL8Ru92f6ZCh2oSNfAcDwI1H1LwAmJDew4TXFAiyzTUP2Le9evfm9wUbC4BZR9 JNVP/AtIZyXl29F2nX2ImDBldD+nxRktHZmbzduRV4L7deMa0mLnjU8p -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:54 2026 by rpki-client