This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer File: wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer (raw, json) Hash identifier: ELGlC4jW6d7pK5iehdoEjgNm/Aes050b6kcYohfPNEI= Subject key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF273CCBDB4CAA3EEEDE3731CEA6DB9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.135.216.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:73:cc:bd:b4:ca:a3:ee:ed:e3:73:1c:ea:6d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f9:c7:de:2c:66:fd:bf:2a:37:c2:09:4d:b1: 14:d9:7d:f7:51:65:06:8b:5f:ad:f9:ae:8d:91:86: 18:cf:63:59:5f:3a:ab:64:75:bf:9d:8d:a4:bd:a8: 1e:e8:7c:16:37:b9:67:21:4c:e0:03:88:f4:59:5d: ad:82:ce:bc:58:89:6f:d1:57:fc:0b:f2:c0:ad:ad: 9c:05:7d:72:09:de:e6:92:b7:8b:d0:cf:5a:02:02: a3:4f:95:26:0a:3f:99:b4:ef:d2:dc:2e:9c:c8:54: b8:d6:66:54:58:a5:05:fc:df:d2:07:69:32:89:c5: ef:9d:83:0c:2d:5e:2e:c8:2b:c2:93:9d:5a:b7:ad: 12:2d:17:4a:7d:ee:58:20:41:55:d3:0c:ed:98:e2: 88:35:fe:ab:34:20:7d:df:6f:52:de:27:da:af:57: af:ed:2c:c7:c0:0e:40:5d:35:76:76:05:6d:50:ca: 00:a7:fe:db:2e:ae:a0:f0:72:31:54:e8:94:1c:85: 66:62:47:43:97:eb:aa:e3:76:09:a8:94:37:1f:eb: 13:48:86:9f:7b:6d:23:d2:3c:21:ca:20:31:ad:ec: f2:b7:ac:35:9c:c0:83:c2:01:6f:e4:43:70:4b:fb: 50:8a:48:ad:38:ac:de:40:fe:44:ba:57:86:e6:6c: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.216.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:d4:d4:34:36:0f:40:2f:e5:fa:bf:a4:7f:c5:e6:44:01:5d: 97:8f:65:97:e4:a0:9f:2e:df:41:8e:b3:00:90:5f:e1:e2:d2: b2:f1:e2:e9:f3:79:30:89:6d:df:c2:2f:5e:26:1f:b1:6a:c8: 6a:ef:71:f1:6f:ff:95:22:28:d7:69:95:78:d4:3c:81:c3:30: 6a:b7:d6:01:d4:0a:e9:e6:13:47:c6:48:d1:58:32:77:1c:b9: 31:66:3e:22:cb:d5:7e:b9:b7:89:5e:60:99:03:2c:73:ad:e3: 42:cb:f7:35:8d:92:e5:b2:13:cf:da:6b:0b:6c:44:ea:5f:78: d2:50:fe:45:cf:af:66:8a:36:91:cc:cb:5e:ef:07:cc:28:52: 67:64:a2:93:48:26:b6:e1:d7:0b:fe:88:86:2c:f9:93:da:6e: 70:79:68:60:89:45:4e:e7:c3:ef:6b:d2:c3:74:74:43:55:ed: 2b:fd:81:7c:3e:8e:67:65:94:e5:bf:d9:24:dd:46:85:ec:36: b4:01:e8:da:2e:a3:a8:46:50:95:fa:f0:66:d0:31:d2:f3:31: 9e:e4:f1:4f:29:bd:0e:56:64:06:62:d4:17:8d:ec:8f:66:69: db:88:61:1d:6b:66:9a:f9:30:d8:3a:59:52:84:38:fb:44:29: 2f:5a:45:0f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/8nPMvbTKo+7t43Mc6m25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTVlZTJkOTA5YzliNzVjNmQyMDg0ZTMzNzliZjAzMjc0Yjc3NmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/nH3ixm/b8qN8IJTbEU2X33UWUG i1+t+a6NkYYYz2NZXzqrZHW/nY2kvage6HwWN7lnIUzgA4j0WV2tgs68WIlv0Vf8 C/LAra2cBX1yCd7mkreL0M9aAgKjT5UmCj+ZtO/S3C6cyFS41mZUWKUF/N/SB2ky icXvnYMMLV4uyCvCk51at60SLRdKfe5YIEFV0wztmOKINf6rNCB9329S3ifar1ev 7SzHwA5AXTV2dgVtUMoAp/7bLq6g8HIxVOiUHIVmYkdDl+uq43YJqJQ3H+sTSIaf e20j0jwhyiAxrezyt6w1nMCDwgFv5ENwS/tQikitOKzeQP5EuleG5mzgVwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMFe4tkJybdcbSCE4zeb8DJ0t3b0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2E3NjVk YS00YWExLTQ3YTItOGI1ZC1lYmU0MzkwNWViODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvYTc2NWRh LTRhYTEtNDdhMi04YjVkLWViZTQzOTA1ZWI4MS8xL3dWN2kyUW5KdDF4dElJVGpO NXZ3TW5TM2R2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwYfYMA0GCSqGSIb3DQEBCwUAA4IBAQBP1NQ0 Ng9AL+X6v6R/xeZEAV2Xj2WX5KCfLt9BjrMAkF/h4tKy8eLp83kwiW3fwi9eJh+x ashq73Hxb/+VIijXaZV41DyBwzBqt9YB1Arp5hNHxkjRWDJ3HLkxZj4iy9V+ubeJ XmCZAyxzreNCy/c1jZLlshPP2msLbETqX3jSUP5Fz69mijaRzMte7wfMKFJnZKKT SCa24dcL/oiGLPmT2m5weWhgiUVO58Pva9LDdHRDVe0r/YF8Po5nZZTlv9kk3UaF 7Da0AejaLqOoRlCV+vBm0DHS8zGe5PFPKb0OVmQGYtQXjeyPZmnbiGEda2aa+TDY OllShDj7RCkvWkUP -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:20 2026 by rpki-client