This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer File: wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer (raw, json) Hash identifier: O5Qwki+Slk3K98/HOv7XM/zijqB8b4G86AclI/dr8hs= Subject key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C12497732DF8E4D2CB12CC9E03A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43259 IP: 89.145.168.0/21 IP: 185.177.64.0/22 IP: 2a00:a2c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c1:24:97:73:2d:f8:e4:d2:cb:12:cc:9e:03:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:86:5e:59:a1:16:60:58:ae:a8:b1:ef:98: c6:f9:7e:f7:33:e0:c7:a1:b3:64:46:5a:a8:94:c5: c4:bd:43:84:70:bc:16:cf:41:2e:a8:3b:5f:3b:ea: 92:ab:c8:37:6c:70:fc:c6:2e:01:7b:a8:e6:37:1b: a3:e3:5e:cc:3f:cf:b8:29:ee:d8:51:0e:06:55:33: cc:df:85:b2:9f:04:02:6a:a5:26:68:1e:59:5b:2a: 71:b8:b8:2d:c5:46:8f:0e:f6:f2:4e:e8:0d:6e:18: 33:bd:dc:fa:6a:c2:22:d4:dd:41:84:eb:03:06:8f: 46:b3:65:40:ad:ac:e4:93:cb:29:bc:c6:76:a0:55: fa:5c:e7:33:ca:67:ef:ce:d2:7d:29:d9:33:86:67: 70:57:fb:bd:f2:d7:52:52:f3:62:e6:82:10:42:74: d1:35:00:b9:ee:a9:29:7c:fb:dc:12:cc:49:46:7b: 82:d3:dc:37:85:93:d1:c8:02:a6:7f:c9:dd:b5:41: a6:d2:cf:a0:5d:d6:67:3e:97:c5:71:85:14:ef:06: da:a9:4b:d9:08:56:a0:12:2d:f5:89:97:d6:40:cc: 40:86:31:16:6e:e8:a6:f0:a7:b1:cf:e1:76:b7:3f: c3:c7:78:eb:e4:13:11:d5:09:cd:24:53:65:66:99: b1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.145.168.0/21 185.177.64.0/22 IPv6: 2a00:a2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43259 Signature Algorithm: sha256WithRSAEncryption 2a:b7:9f:85:48:54:5e:ab:20:a6:fd:20:2f:0a:1c:64:7d:cb: 12:40:44:49:58:f2:e5:06:78:c1:73:ed:6b:30:21:cb:3e:9f: 31:c8:a4:76:f2:ff:92:d5:83:5e:6b:d8:22:e0:e5:ae:91:1a: b7:ca:50:86:03:ea:54:f1:55:d4:3b:ed:f2:72:a7:d0:8a:e1: 53:bb:eb:17:40:18:b5:3b:94:d8:f6:2a:c1:0f:20:5d:bc:00: 3f:02:37:99:80:c6:d4:35:09:4c:da:ff:1a:34:43:80:90:71: c8:bc:7b:56:41:0a:66:78:68:46:c1:d5:c5:82:bb:eb:00:73: e9:00:9a:e2:32:94:60:1d:51:01:05:9e:ce:4c:24:08:3f:ed: cb:37:a5:75:9b:4b:fb:42:52:18:a2:6b:68:97:fa:90:c1:23: 3f:3d:65:8e:ad:74:54:0b:8d:38:21:87:5a:7b:a3:c8:45:19: 50:52:1e:3a:a4:79:fd:96:a6:32:3a:b3:28:89:40:c0:92:b1: f3:32:dc:62:5b:87:26:3f:de:bd:1f:71:aa:b7:ba:3c:0d:b1: e9:4c:d5:39:98:cf:37:c3:c2:bf:70:3e:84:9b:88:b6:e5:59: 74:c2:0d:8b:41:24:a1:cc:8d:8e:16:e7:43:d1:c8:40:ff:79: 46:fa:f6:49 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7pMEkl3Mt+OTSyxLMngOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzA0MmY1YzQ3ODljOTdjNGY5MmVmMjE3N2U3Yjg5MzhjOGRkNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMyGXlmhFmBYrqix75jG+X73M+DH obNkRlqolMXEvUOEcLwWz0EuqDtfO+qSq8g3bHD8xi4Be6jmNxuj417MP8+4Ke7Y UQ4GVTPM34WynwQCaqUmaB5ZWypxuLgtxUaPDvbyTugNbhgzvdz6asIi1N1BhOsD Bo9Gs2VArazkk8spvMZ2oFX6XOczymfvztJ9KdkzhmdwV/u98tdSUvNi5oIQQnTR NQC57qkpfPvcEsxJRnuC09w3hZPRyAKmf8ndtUGm0s+gXdZnPpfFcYUU7wbaqUvZ CFagEi31iZfWQMxAhjEWbuim8Kexz+F2tz/Dx3jr5BMR1QnNJFNlZpmxDwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMMEL1xHicl8T5LvIXfnuJOMjdXEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzllMWQ1 Yi1kZTYxLTRkOWEtODRiZC0wMjc5MmY5Y2YwN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvOWUxZDVi LWRlNjEtNGQ5YS04NGJkLTAyNzkyZjljZjA3Yi8xL3d3UXZYRWVKeVh4UGt1OGhk LWU0azR5TjFjUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDWZGoAwQCubFAMA0EAgACMAcDBQAqAKLAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCo+zANBgkqhkiG9w0BAQsFAAOCAQEAKref hUhUXqsgpv0gLwocZH3LEkBESVjy5QZ4wXPtazAhyz6fMcikdvL/ktWDXmvYIuDl rpEat8pQhgPqVPFV1Dvt8nKn0IrhU7vrF0AYtTuU2PYqwQ8gXbwAPwI3mYDG1DUJ TNr/GjRDgJBxyLx7VkEKZnhoRsHVxYK76wBz6QCa4jKUYB1RAQWezkwkCD/tyzel dZtL+0JSGKJraJf6kMEjPz1ljq10VAuNOCGHWnujyEUZUFIeOqR5/ZamMjqzKIlA wJKx8zLcYluHJj/evR9xqre6PA2x6UzVOZjPN8PCv3A+hJuItuVZdMINi0EkocyN jhbnQ9HIQP95Rvr2SQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:25 2026 by rpki-client