This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer File: wolzr_qpk205FGqhNvvLBRua-Z8.cer (raw, json) Hash identifier: IOWOzkJnyKQW4HB5C4etqWAHHJ6ubk+yuF9VNxApW3w= Subject key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C134E796F0DF6B407CC71C1AD2AE823 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 78.40.200.0/21 IP: 82.119.192.0/19 IP: 88.81.160.0/19 IP: 94.158.184.0/22 IP: 185.155.164.0/22 IP: 217.22.224.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4e:79:6f:0d:f6:b4:07:cc:71:c1:ad:2a:e8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c28973affaa9936d39146aa136fbcb051b9af99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:3e:9e:27:1f:f2:eb:bc:fd:ca:5f:b7:32: a2:88:14:fe:a5:c7:f1:ea:39:5a:d6:ff:8f:60:10: 3b:87:10:86:32:f2:f7:2b:c8:17:0e:b7:ef:ff:89: ac:5f:c1:83:7b:b2:46:e9:ae:05:ec:d5:ec:c5:dd: 01:5b:7f:01:9f:b4:13:ff:ac:ab:99:e2:0e:33:ea: 8f:fc:63:1f:5a:f2:ba:f1:48:9d:d6:49:fa:1c:a1: 82:4f:88:29:5b:e6:7e:dd:1e:f6:b5:be:32:af:91: d9:46:34:5d:0b:70:38:e5:62:70:5c:17:df:e7:2c: 45:66:9d:76:4b:18:1b:d7:95:42:c0:97:9a:be:9a: 6c:21:d3:32:e4:9c:0e:9f:c9:b3:b5:77:84:85:b6: c7:f4:7e:29:99:65:ca:0f:aa:88:24:e2:a1:85:9a: 6a:fd:23:fd:4a:12:3e:bf:37:80:6d:b8:3a:4e:9c: 4c:dc:c0:6d:d8:d3:0a:73:86:7c:f6:4f:7b:e2:94: a8:60:5c:cd:ea:8e:8a:32:1c:d8:9b:5e:cc:28:3a: 63:cb:01:fa:58:59:ef:35:79:ad:cf:5b:4c:b7:52: ad:69:e2:6c:94:1f:13:7d:cf:a5:a1:55:f5:26:e7: 99:be:0f:7b:6b:59:36:94:12:ba:e3:41:6d:09:d1: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.200.0/21 82.119.192.0/19 88.81.160.0/19 94.158.184.0/22 185.155.164.0/22 217.22.224.0/19 Signature Algorithm: sha256WithRSAEncryption 6f:54:42:1f:61:ab:75:3c:a3:2b:29:5f:d9:ee:93:c3:b7:ae: 62:3c:90:6b:0a:db:b6:d4:9c:5f:07:a7:16:09:a9:bb:9a:8a: 38:e7:1e:5e:d5:b5:79:f8:90:38:52:35:d5:0c:df:c9:c5:37: 10:0b:7b:1c:85:a4:da:47:ab:6a:db:c2:18:71:a4:4b:83:97: 75:8c:b7:89:ee:d9:9a:b1:4d:bb:4a:47:d4:f4:e3:80:66:62: f1:75:17:35:e9:94:3f:45:47:01:06:55:4d:b6:b4:ab:02:51: 33:00:22:23:9a:8f:40:02:b4:9c:c6:ec:f4:1d:12:0d:99:4e: d0:e8:22:30:33:de:51:b9:c1:d7:f6:7d:1a:4c:60:23:ce:b2: 7a:55:7f:50:e3:2d:ca:cb:b2:24:bb:14:b9:0a:35:98:26:60: a6:4e:28:ec:a5:b3:be:2d:05:77:ba:b1:1a:c5:54:0e:e7:01: 58:1a:35:19:da:a0:04:0e:3d:41:03:7f:43:aa:a8:4d:da:6a: 17:6e:5f:c9:93:33:0c:ee:20:c1:08:82:44:c9:2a:b9:a9:a4: 8e:96:6f:b3:06:87:cf:a8:fe:24:1c:d4:ff:24:46:1e:99:44: 9f:a7:6f:69:b1:c2:cd:82:6b:d1:96:23:0a:1f:9f:e2:4d:b3: e1:a3:98:1d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt8E055bw32tAfMccGtKugjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjg5NzNhZmZhYTk5MzZkMzkxNDZhYTEzNmZiY2IwNTFiOWFmOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCY+nicf8uu8/cpftzKiiBT+pcfx 6jla1v+PYBA7hxCGMvL3K8gXDrfv/4msX8GDe7JG6a4F7NXsxd0BW38Bn7QT/6yr meIOM+qP/GMfWvK68Uid1kn6HKGCT4gpW+Z+3R72tb4yr5HZRjRdC3A45WJwXBff 5yxFZp12Sxgb15VCwJeavppsIdMy5JwOn8mztXeEhbbH9H4pmWXKD6qIJOKhhZpq /SP9ShI+vzeAbbg6TpxM3MBt2NMKc4Z89k974pSoYFzN6o6KMhzYm17MKDpjywH6 WFnvNXmtz1tMt1KtaeJslB8Tfc+loVX1JueZvg97a1k2lBK640FtCdFTCQIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFMKJc6/6qZNtORRqoTb7ywUbmvmfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlL2E5NTRi ZC0xNTdmLTRkYmItYmJhNC0zNDYzYjU2ZTM3MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvYTk1NGJk LTE1N2YtNGRiYi1iYmE0LTM0NjNiNTZlMzcyYy8xL3dvbHpyX3FwazIwNUZHcWhO dnZMQlJ1YS1aOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAATAkAwQDTijIAwQFUnfAAwQFWFGgAwQCXp64AwQCuZuk AwQF2RbgMA0GCSqGSIb3DQEBCwUAA4IBAQBvVEIfYat1PKMrKV/Z7pPDt65iPJBr Ctu21JxfB6cWCam7moo45x5e1bV5+JA4UjXVDN/JxTcQC3schaTaR6tq28IYcaRL g5d1jLeJ7tmasU27SkfU9OOAZmLxdRc16ZQ/RUcBBlVNtrSrAlEzACIjmo9AArSc xuz0HRINmU7Q6CIwM95RucHX9n0aTGAjzrJ6VX9Q4y3Ky7IkuxS5CjWYJmCmTijs pbO+LQV3urEaxVQO5wFYGjUZ2qAEDj1BA39DqqhN2moXbl/JkzMM7iDBCIJEySq5 qaSOlm+zBofPqP4kHNT/JEYemUSfp29pscLNgmvRliMKH5/iTbPho5gd -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:45 2026 by rpki-client