This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer File: wc2HDWChpsQgZxWK7rzA4_1t2B8.cer (raw, json) Hash identifier: jN/Ru7keCuFpxPhVH1fCE55aK5frswDWq/hRikVDub0= Subject key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1255728F8D0E340EABEEB227CD8226 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.161.16.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:55:72:8f:8d:0e:34:0e:ab:ee:b2:27:cd:82:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:47:50:3e:97:c7:99:23:08:2d:06:cf:83: 61:0e:0c:88:d7:77:92:37:72:3c:29:91:28:d5:40: 8e:de:19:46:05:fe:97:7e:6c:4d:ee:82:2a:ce:22: 90:62:6b:a1:d5:48:22:b3:04:69:ac:27:37:c0:5a: 20:e1:a8:cb:58:7f:4c:48:28:78:29:b6:97:59:18: f6:2c:a9:9b:83:f5:da:ac:37:8a:60:08:a1:fe:47: dd:10:45:cb:d1:9d:d6:46:6e:cb:bc:b0:7e:f7:97: ca:b7:4c:0b:b6:0f:67:72:e6:6a:d7:5d:45:c7:04: 90:0b:4e:14:d3:03:d6:01:34:3f:31:3d:6f:a3:7f: 9d:46:ee:0a:f7:27:59:5c:6b:f0:44:62:d3:bc:3e: 67:5b:b7:97:be:da:b5:aa:41:5f:9a:7b:96:d0:9f: 90:20:2c:1f:92:1e:e8:82:e4:82:26:55:82:d8:9d: a2:65:5b:ca:dc:0a:8f:6b:ed:a9:43:44:15:31:30: 7b:39:f5:84:b1:12:24:90:ef:bb:c7:62:43:8d:6e: e1:99:8c:22:ad:97:8c:12:e8:ca:e7:b2:4d:23:e9: cf:ae:6d:3f:68:26:ff:c6:0d:81:81:8c:95:4e:b1: 29:56:70:3f:7b:64:35:d7:01:fe:32:ad:05:7f:76: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.16.0/21 Signature Algorithm: sha256WithRSAEncryption a4:5e:f3:f7:04:07:c8:65:04:0e:6b:cc:a8:32:04:02:bc:da: fb:cc:ba:87:b9:ea:5a:af:da:78:63:ee:40:26:18:be:2b:44: ae:ea:1a:17:11:a3:47:09:5a:89:e3:8a:ad:ad:e8:c4:f4:c8: 79:2e:97:09:b1:ca:33:27:7c:f9:d6:53:65:3c:c4:9b:29:b9: 55:dd:ab:8f:ee:ef:dc:4a:56:51:ee:c2:ec:96:fb:07:23:ad: 33:5b:c1:66:79:5b:eb:61:d2:60:92:04:f7:1f:bf:11:42:47: be:f9:4b:2b:f2:72:87:13:ca:a6:72:9a:80:52:24:78:98:18: 07:e7:9b:36:0e:ca:e6:ed:ac:21:ff:72:0f:3e:bd:c1:12:61: 14:77:d5:7a:e6:03:8a:eb:38:dc:94:5c:2b:2d:d5:38:3d:38: 5f:dc:c3:60:9c:3f:99:48:07:a7:4f:3e:a1:cc:ed:6d:1a:80: ca:4b:d4:a8:9b:d4:cd:5a:8e:4f:80:55:74:91:52:4c:fc:10: b3:7d:64:da:e7:66:37:fd:08:50:a3:a3:3f:68:70:ea:1f:a2: c3:53:f2:ac:6c:1b:83:80:1f:d8:a9:06:ec:d9:37:70:3e:bb: 96:f8:95:c7:ee:3d:02:5b:8b:d5:1c:9e:ba:6b:93:54:8e:5b: fc:bb:da:23 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8ElVyj40ONA6r7rInzYImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWNkODcwZDYwYTFhNmM0MjA2NzE1OGFlZWJjYzBlM2ZkNmRkODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXNHUD6Xx5kjCC0Gz4NhDgyI13eS N3I8KZEo1UCO3hlGBf6XfmxN7oIqziKQYmuh1UgiswRprCc3wFog4ajLWH9MSCh4 KbaXWRj2LKmbg/XarDeKYAih/kfdEEXL0Z3WRm7LvLB+95fKt0wLtg9ncuZq111F xwSQC04U0wPWATQ/MT1vo3+dRu4K9ydZXGvwRGLTvD5nW7eXvtq1qkFfmnuW0J+Q ICwfkh7oguSCJlWC2J2iZVvK3AqPa+2pQ0QVMTB7OfWEsRIkkO+7x2JDjW7hmYwi rZeMEujK57JNI+nPrm0/aCb/xg2BgYyVTrEpVnA/e2Q11wH+Mq0Ff3bP8QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMHNhw1goabEIGcViu68wOP9bdgfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzgzNWE4 Mi04YmJlLTQwYjItYjJkNC0wNDgxYzY2YzJiNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvODM1YTgy LThiYmUtNDBiMi1iMmQ0LTA0ODFjNjZjMmI1YS8xL3djMkhEV0NocHNRZ1p4V0s3 cnpBNF8xdDJCOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwaEQMA0GCSqGSIb3DQEBCwUAA4IBAQCkXvP3 BAfIZQQOa8yoMgQCvNr7zLqHuepar9p4Y+5AJhi+K0Su6hoXEaNHCVqJ44qtrejE 9Mh5LpcJscozJ3z51lNlPMSbKblV3auP7u/cSlZR7sLslvsHI60zW8FmeVvrYdJg kgT3H78RQke++Usr8nKHE8qmcpqAUiR4mBgH55s2Dsrm7awh/3IPPr3BEmEUd9V6 5gOK6zjclFwrLdU4PThf3MNgnD+ZSAenTz6hzO1tGoDKS9Som9TNWo5PgFV0kVJM /BCzfWTa52Y3/QhQo6M/aHDqH6LDU/KsbBuDgB/YqQbs2TdwPruW+JXH7j0CW4vV HJ66a5NUjlv8u9oj -----END CERTIFICATE-----Generated at Mon Jan 26 07:17:13 2026 by rpki-client