This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer File: wXPRwALuqv2ht1iN1WIcTm_Jn64.cer (raw, json) Hash identifier: LMixZRxw14AlBpy1bMGycKwD1wce/cBW4B3ZjZkzUGI= Subject key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835216A3A4FD1F822D2359DF3F09B20 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211524 IP: 45.136.111.0/24 IP: 2a10:ca40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:21:6a:3a:4f:d1:f8:22:d2:35:9d:f3:f0:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:97:97:49:3f:c2:e1:ae:0a:43:57:ff:f0: fa:a6:b3:4e:2e:80:78:76:75:de:b8:c3:9f:a7:46: 64:40:45:86:ca:8b:aa:0d:a2:96:e3:81:92:b0:d3: b6:52:6c:b5:53:83:36:11:6c:fd:0f:97:81:89:35: 9a:9d:8a:29:3e:95:c3:d3:c6:ef:c6:55:9c:14:ce: a9:f3:46:4f:8b:05:27:cc:0a:54:a8:94:98:43:c3: 85:db:17:e0:7f:d9:1f:e5:5d:2c:18:b8:5c:50:a2: c6:25:04:ce:cc:df:83:a4:3b:81:28:40:41:5a:aa: 79:60:61:80:6e:15:aa:c7:f6:de:cd:8b:78:e7:d5: e2:48:34:df:ab:e1:d4:7c:a6:0c:de:40:ea:b9:8b: 2e:bf:42:b0:8f:66:90:ad:a0:e7:74:18:b8:52:5b: f5:4d:11:ce:06:e8:a7:b0:20:ee:1b:3b:80:c8:71: f5:bb:d7:cc:5d:88:5b:c0:69:6a:5d:b8:1b:72:85: ca:ea:1e:72:7f:fa:64:a6:1c:6a:8b:41:0c:84:0c: 00:97:b3:04:08:58:40:a7:00:11:67:2f:d0:4c:6f: e7:e4:7b:83:64:de:07:69:40:73:bd:ed:ab:25:7c: e1:a8:2e:f3:0d:98:33:43:7d:b0:9f:f8:8c:1c:47: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.111.0/24 IPv6: 2a10:ca40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211524 Signature Algorithm: sha256WithRSAEncryption 2d:1e:74:f5:17:21:f1:dd:9d:1c:02:73:ee:7b:9a:a8:a2:06: 15:fc:96:9d:96:8d:5d:fc:e1:56:af:38:80:13:8e:4e:2f:cf: 96:40:0d:fc:0b:e4:75:18:aa:36:be:c8:d8:f9:ea:ec:82:51: 4a:b1:49:52:13:36:07:f3:9d:7f:99:9e:b8:7f:bd:72:22:da: 80:dd:d7:39:4c:bf:bc:bf:51:6a:7a:63:5f:61:b9:c7:6d:fe: 90:8c:68:ef:4f:68:49:4a:fb:a9:71:e9:fc:1a:e7:bf:c6:94: 15:f1:e9:95:c2:d3:c7:ee:7c:67:9d:31:96:1b:89:f9:f3:d3: 5b:8a:02:27:b0:9f:50:46:ad:87:1a:53:da:a3:23:19:33:32: f7:f3:66:3c:e1:2a:ce:7f:aa:0c:d4:10:b7:b7:dc:6f:8d:d0: 5e:5c:b8:9c:a7:c7:46:2b:87:fd:81:94:b1:02:cd:10:c8:ba: 4d:4e:c6:1d:02:ed:59:a4:d6:db:fe:0d:b6:20:5c:93:00:25: d0:7c:0c:b4:ff:51:38:cc:ea:74:9e:4c:82:e3:e6:88:f9:53: 59:e4:79:26:1d:29:9f:e7:70:3d:ab:8f:4c:52:94:3a:1e:0b: ae:1e:56:e4:fc:92:66:ce:f6:27:c6:2d:98:fd:9c:a3:ad:e7: a4:74:77:b7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NSFqOk/R+CLSNZ3z8JsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTczZDFjMDAyZWVhYWZkYTFiNzU4OGRkNTYyMWM0ZTZmYzk5ZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KXl0k/wuGuCkNX//D6prNOLoB4 dnXeuMOfp0ZkQEWGyouqDaKW44GSsNO2Umy1U4M2EWz9D5eBiTWanYopPpXD08bv xlWcFM6p80ZPiwUnzApUqJSYQ8OF2xfgf9kf5V0sGLhcUKLGJQTOzN+DpDuBKEBB Wqp5YGGAbhWqx/bezYt459XiSDTfq+HUfKYM3kDquYsuv0Kwj2aQraDndBi4Ulv1 TRHOBuinsCDuGzuAyHH1u9fMXYhbwGlqXbgbcoXK6h5yf/pkphxqi0EMhAwAl7ME CFhApwARZy/QTG/n5HuDZN4HaUBzve2rJXzhqC7zDZgzQ32wn/iMHEeUyQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMFz0cAC7qr9obdYjdViHE5vyZ+uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2M0ZmUw NC0wNjNiLTQ3YjctYmViYi1iMmMwYTRlN2FmYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvYzRmZTA0 LTA2M2ItNDdiNy1iZWJiLWIyYzBhNGU3YWZjMy8xL3dYUFJ3QUx1cXYyaHQxaU4x V0ljVG1fSm42NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALYhvMA0EAgACMAcDBQAqEMpAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6RDANBgkqhkiG9w0BAQsFAAOCAQEALR509Rch8d2d HAJz7nuaqKIGFfyWnZaNXfzhVq84gBOOTi/PlkAN/AvkdRiqNr7I2Pnq7IJRSrFJ UhM2B/Odf5meuH+9ciLagN3XOUy/vL9RanpjX2G5x23+kIxo709oSUr7qXHp/Brn v8aUFfHplcLTx+58Z50xlhuJ+fPTW4oCJ7CfUEathxpT2qMjGTMy9/NmPOEqzn+q DNQQt7fcb43QXly4nKfHRiuH/YGUsQLNEMi6TU7GHQLtWaTW2/4NtiBckwAl0HwM tP9ROMzqdJ5MguPmiPlTWeR5Jh0pn+dwPauPTFKUOh4Lrh5W5PySZs72J8YtmP2c o63npHR3tw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:05 2026 by rpki-client