This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer File: wXLnuWJS7qhzJjPTulGpsFWDp7M.cer (raw, json) Hash identifier: k6yJOoo5ZRI3vp+aiadCicIcpiM6yj9yOJJ5N5hybLA= Subject key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F138470D8F47EA5F7B88DB7399395FD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31420 IP: 193.151.80.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:84:70:d8:f4:7e:a5:f7:b8:8d:b7:39:93:95:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:3f:45:d8:8f:e2:db:b4:01:91:2a:ba:c5: 45:03:cd:94:c3:80:27:3b:cb:a0:24:7d:24:a2:f6: 64:b4:62:96:8b:ba:d5:bb:14:6b:4f:68:73:db:8d: 30:dd:7c:61:56:e9:ac:1d:78:42:17:06:f1:78:ba: 10:40:77:99:48:4e:87:21:6b:a6:2c:23:0d:71:30: 73:70:5b:c4:90:a1:6e:ae:a4:00:87:6d:cc:18:cd: ed:af:22:0d:f6:56:d3:f8:66:a1:03:48:25:65:db: 4c:38:a4:9c:8c:8f:58:a7:10:d9:aa:62:92:4d:44: a6:55:16:d3:0b:3c:85:c6:06:52:91:40:dc:c6:e7: 0a:68:ef:1a:0d:99:25:35:32:d4:cd:1e:20:5a:53: 51:f7:82:9b:98:2a:e6:bb:0d:35:94:5b:9e:5e:d3: 9f:99:f5:cc:3d:e7:25:56:ce:ff:58:c5:b4:89:7e: 25:cc:5b:55:da:52:dd:01:5c:a9:75:d7:ed:10:6a: 45:90:0f:bd:dd:f3:36:c2:ce:68:ff:3f:03:59:41: a6:e5:0a:9b:23:6f:22:4a:30:22:81:c2:df:82:84: 07:b4:d1:da:45:93:81:3c:3b:ef:af:48:11:15:33: 24:d2:98:92:ef:73:5b:e6:5a:75:24:64:0b:6f:14: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.151.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31420 Signature Algorithm: sha256WithRSAEncryption 87:82:02:48:c2:cf:e6:03:74:88:f4:a3:38:7f:40:77:60:0d: a8:8d:a6:36:d4:e4:53:dd:f5:39:76:ad:1c:1a:e2:d8:19:ef: 96:60:8c:a0:ee:c3:58:9f:59:03:45:7f:10:fd:f2:f1:d5:80: e1:9d:1a:94:95:44:bb:af:19:25:ac:e4:d9:e8:9d:cd:33:d3: 3a:08:33:db:db:6e:63:c3:c4:d8:15:a1:51:2a:c5:13:3d:a9: 5d:1d:49:05:d2:d6:42:eb:1a:1e:31:97:07:51:a5:42:7c:cf: 4f:b3:2c:1f:0a:f4:72:dc:ea:8d:5c:52:a0:36:22:f7:9a:b2: c9:1a:9f:de:32:4b:f1:16:8d:2a:1c:f2:65:c0:cd:40:63:ac: 9d:09:9d:bd:ee:25:4d:de:02:fe:2b:f7:09:e8:d0:16:e3:7f: 8f:ef:fd:f0:07:0b:15:74:f4:9f:71:d5:4b:03:b4:b8:c2:ff: d6:5f:89:55:b1:61:c5:6f:90:79:7f:f4:93:8b:8f:64:9c:fd: 16:b8:b6:a7:33:06:02:75:a3:c7:2d:5f:31:71:80:d4:84:09: 27:81:d2:21:ea:27:4b:f3:18:bc:a2:a3:30:73:9b:12:dd:70: 94:d5:b4:67:24:c1:d7:88:5f:76:7b:be:0f:88:8a:ae:16:b6: 0d:75:ec:6c -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/E4Rw2PR+pfe4jbc5k5X9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTcyZTdiOTYyNTJlZWE4NzMyNjMzZDNiYTUxYTliMDU1ODNhN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zU/RdiP4tu0AZEqusVFA82Uw4An O8ugJH0kovZktGKWi7rVuxRrT2hz240w3XxhVumsHXhCFwbxeLoQQHeZSE6HIWum LCMNcTBzcFvEkKFurqQAh23MGM3tryIN9lbT+GahA0glZdtMOKScjI9YpxDZqmKS TUSmVRbTCzyFxgZSkUDcxucKaO8aDZklNTLUzR4gWlNR94KbmCrmuw01lFueXtOf mfXMPeclVs7/WMW0iX4lzFtV2lLdAVypddftEGpFkA+93fM2ws5o/z8DWUGm5Qqb I28iSjAigcLfgoQHtNHaRZOBPDvvr0gRFTMk0piS73Nb5lp1JGQLbxS5/wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFMFy57liUu6ocyYz07pRqbBVg6ezMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2E2ZWM3 MS0xNmU1LTQxNjMtYTA0Mi0zMTdkYjQyMzJmM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYTZlYzcx LTE2ZTUtNDE2My1hMDQyLTMxN2RiNDIzMmYzYi8xL3dYTG51V0pTN3FoekpqUFR1 bEdwc0ZXRHA3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwZdQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Anq8MA0GCSqGSIb3DQEBCwUAA4IBAQCHggJIws/mA3SI9KM4f0B3YA2ojaY21ORT 3fU5dq0cGuLYGe+WYIyg7sNYn1kDRX8Q/fLx1YDhnRqUlUS7rxklrOTZ6J3NM9M6 CDPb225jw8TYFaFRKsUTPaldHUkF0tZC6xoeMZcHUaVCfM9PsywfCvRy3OqNXFKg NiL3mrLJGp/eMkvxFo0qHPJlwM1AY6ydCZ297iVN3gL+K/cJ6NAW43+P7/3wBwsV dPSfcdVLA7S4wv/WX4lVsWHFb5B5f/STi49knP0WuLanMwYCdaPHLV8xcYDUhAkn gdIh6idL8xi8oqMwc5sS3XCU1bRnJMHXiF92e74PiIquFrYNdexs -----END CERTIFICATE-----Generated at Mon Jan 26 01:18:07 2026 by rpki-client