This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer File: wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer (raw, json) Hash identifier: xaTqLhrxoBuL8BgCzQrBuPShMBaEPYWKHwl0PwN6Gr8= Subject key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA38A04AE1B01A3889C63AA5B4152A0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208626 IP: 185.64.76.0/24 IP: 185.170.10.0/24 IP: 2a0c:dd80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:8a:04:ae:1b:01:a3:88:9c:63:aa:5b:41:52:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1db67b85104e4db598fea15678699c92473bda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:2a:cb:4b:a7:30:c7:57:fa:ef:cf:b0:05: 84:13:71:dc:46:d8:9b:7b:1f:8d:1a:b7:af:c9:9a: 94:25:35:19:a0:62:26:28:59:a0:b2:22:ac:f6:d9: 94:06:06:cd:7a:60:a4:b5:f2:5a:96:16:1b:34:ee: 86:38:36:3d:ad:2e:58:e8:7a:f5:14:9a:01:bd:46: 2c:2c:f1:54:62:83:a6:21:3c:a2:fb:27:01:d7:c0: d3:29:4f:2b:fa:50:12:d1:c1:93:13:37:b8:5a:75: b1:7e:08:77:60:76:28:be:68:82:2a:0d:c7:7d:89: 69:ec:b2:6a:ff:dd:48:a8:85:82:d0:9b:b0:cb:b8: cd:ac:6a:3c:3b:d3:8e:8f:88:44:ec:8c:d8:71:eb: 89:e2:d9:49:4a:35:c2:df:94:4f:75:1a:fb:6b:a2: f9:1e:aa:73:ba:9b:ef:7b:56:d1:9b:87:92:b2:48: 1e:09:3b:1a:49:bc:8e:22:c6:02:70:f2:a1:a0:6c: 7f:40:10:92:6a:0c:e1:6c:bf:ee:85:00:fd:79:eb: 83:55:bd:aa:e9:8a:20:cd:42:b9:0b:f2:9f:e4:c6: 17:ab:cf:b4:07:33:2d:f0:05:0a:1f:f8:da:7a:04: 54:68:af:62:4f:38:a4:bb:fa:ca:cd:4f:98:ad:cb: 8b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.76.0/24 185.170.10.0/24 IPv6: 2a0c:dd80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208626 Signature Algorithm: sha256WithRSAEncryption 62:02:23:e7:19:cf:1a:72:73:6a:06:9b:c0:d4:13:37:45:fe: 1c:9b:09:2f:0c:41:44:ec:00:8f:2d:dc:fb:8c:22:80:ba:0c: aa:83:48:42:5e:ad:6d:44:80:f9:c9:db:9c:7b:81:11:13:c4: db:f5:7a:a3:e4:0e:71:ef:da:d9:b5:c8:9a:27:83:b5:03:62: 69:88:f7:32:dc:48:4e:c7:28:83:02:bb:d0:e8:d9:63:25:68: b8:91:25:63:c4:d7:37:14:ca:aa:31:35:81:0d:65:65:45:5e: 61:2d:29:85:a4:3b:26:e0:e5:c4:da:0f:ae:18:ce:bf:46:e7: 63:85:93:a5:8d:1e:6e:69:33:a0:d3:2a:bf:41:b8:00:36:76: f2:bc:cc:6d:40:7a:c4:d8:3a:b6:f4:5a:28:b9:ae:b6:69:42: 25:c1:a6:f6:2d:e9:8f:68:ef:11:2a:57:86:1e:5a:18:d3:93: 07:8c:ab:e5:60:f0:cb:d3:31:c4:cb:ab:74:3d:31:c9:39:08: 78:4f:98:71:b3:c1:a6:6a:66:91:0f:5a:cf:a9:db:0d:f5:91: bc:ae:9f:12:df:9c:a4:ea:90:79:1c:d3:43:d9:c1:30:79:cc: c4:2c:3a:a5:a4:9c:82:19:08:92:a5:03:92:2d:3f:95:e1:74: 1b:ce:01:dd -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7o4oErhsBo4icY6pbQVKgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWRiNjdiODUxMDRlNGRiNTk4ZmVhMTU2Nzg2OTljOTI0NzNiZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcsqy0unMMdX+u/PsAWEE3HcRtib ex+NGrevyZqUJTUZoGImKFmgsiKs9tmUBgbNemCktfJalhYbNO6GODY9rS5Y6Hr1 FJoBvUYsLPFUYoOmITyi+ycB18DTKU8r+lAS0cGTEze4WnWxfgh3YHYovmiCKg3H fYlp7LJq/91IqIWC0Juwy7jNrGo8O9OOj4hE7IzYceuJ4tlJSjXC35RPdRr7a6L5 Hqpzupvve1bRm4eSskgeCTsaSbyOIsYCcPKhoGx/QBCSagzhbL/uhQD9eeuDVb2q 6YogzUK5C/Kf5MYXq8+0BzMt8AUKH/jaegRUaK9iTziku/rKzU+YrcuLtQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMHbZ7hRBOTbWY/qFWeGmckkc72gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzZhNjUz NS02ZjQyLTRmMmQtOWViOS03ZDRjOGYzN2Y1ZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvNmE2NTM1 LTZmNDItNGYyZC05ZWI5LTdkNGM4ZjM3ZjVmZC8xL3dkdG51RkVFNU50Wmotb1Za NGFaeVNSenZhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAuUBMAwQAuaoKMA0EAgACMAcDBQMqDN2AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMu8jANBgkqhkiG9w0BAQsFAAOCAQEAYgIj 5xnPGnJzagabwNQTN0X+HJsJLwxBROwAjy3c+4wigLoMqoNIQl6tbUSA+cnbnHuB ERPE2/V6o+QOce/a2bXImieDtQNiaYj3MtxITscogwK70OjZYyVouJElY8TXNxTK qjE1gQ1lZUVeYS0phaQ7JuDlxNoPrhjOv0bnY4WTpY0ebmkzoNMqv0G4ADZ28rzM bUB6xNg6tvRaKLmutmlCJcGm9i3pj2jvESpXhh5aGNOTB4yr5WDwy9MxxMurdD0x yTkIeE+YcbPBpmpmkQ9az6nbDfWRvK6fEt+cpOqQeRzTQ9nBMHnMxCw6paScghkI kqUDki0/leF0G84B3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:38 2026 by rpki-client