This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer File: wxgakj6aw8AF60xz7ceh6DJaWx4.cer (raw, json) Hash identifier: n9Q37EavbBO8VjxyZ1K4y6SqVF/y1JT9ziZl5bu+fn8= Subject key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3883C32349495BE3222312DCBE1BCF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216371 IP: 94.101.106.0/24 IP: 2a14:7cc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:83:c3:23:49:49:5b:e3:22:23:12:dc:be:1b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:9d:59:01:cf:f4:18:e5:51:6d:97:8a:cf: c4:16:46:c4:9c:01:fd:37:8d:2c:6a:ba:e7:fc:33: ea:5b:65:a6:a6:09:b8:47:de:cd:00:ec:32:66:69: b9:64:f9:ad:6a:ae:78:a8:ed:28:85:e6:62:20:7f: 08:5b:72:9a:ff:3d:d4:a9:b0:39:0a:09:dc:82:1a: e3:33:50:1f:36:8c:97:04:7d:4a:9f:99:d3:84:a4: 07:88:60:ce:f9:d8:13:f6:d1:22:5a:11:8e:af:ea: 33:04:6d:57:30:4b:b0:cb:11:7c:9e:6d:5e:40:7b: 51:ea:bd:1b:5a:fa:55:06:79:65:a6:90:d3:7c:0d: e7:89:60:cb:93:64:7c:29:ed:61:6b:b0:16:25:71: 70:de:32:8d:ba:b2:02:64:d7:f9:ec:1a:11:64:bb: 29:d1:e8:ed:79:b1:53:8f:cf:80:60:7a:1a:9b:b6: 91:95:08:e6:d8:bd:dc:d6:c9:92:12:1a:a7:b3:1b: 35:2e:a4:c2:f4:82:62:8d:3f:f2:38:81:a9:77:ba: f6:19:e5:bd:a9:0a:cc:3f:62:d8:2a:96:d7:48:31: 9f:c0:03:c9:bf:ad:2f:0d:42:f6:36:b8:f2:e5:c4: e7:59:a0:72:ca:2b:26:a4:c4:13:4a:d7:10:db:b4: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.106.0/24 IPv6: 2a14:7cc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216371 Signature Algorithm: sha256WithRSAEncryption 68:0c:ce:69:e6:c6:e3:d8:29:42:22:98:a8:9e:5d:65:8b:2c: 24:28:48:d7:35:b1:ac:8f:dd:b0:17:8a:05:76:3f:ff:6e:0b: b8:11:2b:39:a7:52:ab:48:9c:18:56:67:29:81:88:f8:a0:f3: 97:61:85:62:b5:ac:6e:2b:07:9f:c5:53:3f:16:07:05:b8:d4: d6:f7:5a:f1:a8:59:70:a9:cd:9d:a3:cd:15:e4:71:86:81:aa: 7f:49:ba:2a:7d:c8:93:0e:97:15:96:79:ca:1c:ee:e0:50:3a: ef:3f:58:aa:96:85:80:b4:b4:8a:69:d8:75:22:52:fe:ac:86: 28:e2:e7:5a:cd:af:c1:a7:bf:d4:96:24:a9:7d:55:2f:c6:3c: 2b:a9:31:d8:32:65:cf:94:cc:9b:7f:a1:f9:0d:4b:4e:26:a2: 71:35:13:94:6d:d9:ae:13:f5:fc:61:9c:ec:58:b9:c6:a3:6d: 41:1c:87:36:ad:6b:18:52:5d:50:74:79:fd:ef:77:3d:23:1e: 36:b0:f8:23:9f:94:34:73:84:e3:7c:ca:98:6d:bd:ca:38:fb: 82:bc:de:e6:3b:50:66:d9:bb:b3:f5:f1:bf:10:b6:db:49:ee: 3a:13:fb:ec:fc:57:b0:a6:b5:f7:02:77:ee:63:30:a5:28:de: d0:bf:be:2f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OIPDI0lJW+MiIxLcvhvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzE4MWE5MjNlOWFjM2MwMDVlYjRjNzNlZGM3YTFlODMyNWE1YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUOdWQHP9BjlUW2Xis/EFkbEnAH9 N40sarrn/DPqW2Wmpgm4R97NAOwyZmm5ZPmtaq54qO0oheZiIH8IW3Ka/z3UqbA5 CgncghrjM1AfNoyXBH1Kn5nThKQHiGDO+dgT9tEiWhGOr+ozBG1XMEuwyxF8nm1e QHtR6r0bWvpVBnllppDTfA3niWDLk2R8Ke1ha7AWJXFw3jKNurICZNf57BoRZLsp 0ejtebFTj8+AYHoam7aRlQjm2L3c1smSEhqnsxs1LqTC9IJijT/yOIGpd7r2GeW9 qQrMP2LYKpbXSDGfwAPJv60vDUL2Nrjy5cTnWaByyismpMQTStcQ27TKzwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMMYGpI+msPABetMc+3HoegyWlseMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1LzliY2Fk YS1kOTU1LTRmMmEtOTI1NC1mOWVjNTY2Njg2YjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvOWJjYWRh LWQ5NTUtNGYyYS05MjU0LWY5ZWM1NjY2ODZiOS8xL3d4Z2FrajZhdzhBRjYweHo3 Y2VoNkRKYVd4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXmVqMA0EAgACMAcDBQMqFHzAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNNMzANBgkqhkiG9w0BAQsFAAOCAQEAaAzOaebG49gp QiKYqJ5dZYssJChI1zWxrI/dsBeKBXY//24LuBErOadSq0icGFZnKYGI+KDzl2GF YrWsbisHn8VTPxYHBbjU1vda8ahZcKnNnaPNFeRxhoGqf0m6Kn3Ikw6XFZZ5yhzu 4FA67z9YqpaFgLS0imnYdSJS/qyGKOLnWs2vwae/1JYkqX1VL8Y8K6kx2DJlz5TM m3+h+Q1LTiaicTUTlG3ZrhP1/GGc7Fi5xqNtQRyHNq1rGFJdUHR5/e93PSMeNrD4 I5+UNHOE43zKmG29yjj7grze5jtQZtm7s/XxvxC220nuOhP77PxXsKa19wJ37mMw pSje0L++Lw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:11 2026 by rpki-client