This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer File: wzExr3-gKXnG6h3eCdjHYtiupB0.cer (raw, json) Hash identifier: rsa5RpwVVHLifzj3G2rYRQz/XytCgxbidwsrF3gPjhI= Subject key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE69516BB05175F36AF02D6960A052266 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 22 Jan 2026 16:41:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207907 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:95:16:bb:05:17:5f:36:af:02:d6:96:0a:05:22:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 22 16:41:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:38:d7:42:21:8e:8a:e7:d6:54:66:b8:03: c3:bf:50:f2:03:a8:e6:67:da:05:65:47:0b:c1:74: e6:3a:30:89:11:4b:7f:82:f6:a3:b4:69:b9:a7:34: c8:48:0a:76:f8:6c:e5:f6:39:66:21:f6:be:6f:2b: 42:c2:41:27:9b:d9:e6:03:6e:16:aa:97:49:34:8f: 29:4f:a7:60:1f:a8:cf:c6:b9:17:b8:91:d0:70:9d: 8d:17:e1:ee:16:75:00:eb:25:e5:eb:66:5e:19:fb: 13:95:43:6d:74:14:9e:8a:45:bb:df:29:01:15:62: 30:cb:87:1c:c1:1a:85:12:7e:83:c7:5b:94:81:11: c4:55:69:42:6c:c5:26:04:ec:ef:0a:9f:22:04:9f: c1:10:b0:eb:01:8b:83:b1:49:33:e5:22:e9:77:6a: 56:43:e7:30:ea:2d:e9:7c:18:8f:4e:26:77:f7:d0: d7:22:50:cf:d1:e5:44:bb:f1:51:03:0b:14:1a:67: 24:2a:3c:11:fe:6f:63:4d:73:78:1b:b9:3e:82:1a: 74:ec:22:26:4d:6e:c8:dc:4c:3d:17:60:a9:10:3d: 9c:6c:1a:1d:82:f1:c5:47:a8:81:9e:cc:c0:a2:b3: 7a:cc:15:ad:06:60:98:71:87:bd:65:ad:28:d3:5e: 4a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207907 Signature Algorithm: sha256WithRSAEncryption ab:8f:69:e8:c8:ad:d5:28:02:09:98:d6:a2:6f:67:68:49:7c: ed:4f:eb:1d:d8:93:ba:9d:0b:f9:ef:2a:ab:18:44:d8:c6:c3: 8f:07:09:7c:49:73:50:23:57:e8:a0:58:00:60:6c:49:c5:ef: bd:d3:3e:db:7f:95:d1:6c:ca:d7:3a:89:f9:f1:2b:e3:0a:73: f0:53:aa:d6:56:e7:a2:c4:6f:fa:19:67:4b:78:10:8d:58:f4: 8f:d2:dc:22:96:93:4e:a1:0a:74:e2:36:5f:ce:a7:05:d1:63: c5:11:f7:d8:0f:2d:9e:38:fc:c2:fc:8c:91:46:8d:cf:a6:27: 8a:03:dd:dc:37:74:25:77:b0:10:2c:47:6d:b7:17:14:a1:e2: 40:97:5a:07:c5:7c:38:d2:d2:93:ae:46:ed:92:2b:0d:e3:c7: b6:50:95:19:ae:86:63:6a:f7:2b:51:56:df:a1:df:bf:f7:b6: db:2d:3b:2c:56:04:15:b7:e3:8c:2e:b7:6a:6a:ad:6a:26:1a: 60:e7:6c:15:0d:13:5c:10:84:89:d6:c8:17:46:fb:de:12:7c: c9:01:de:0e:82:71:9d:27:6b:dd:80:05:bd:b0:57:a8:d5:8c: ac:ab:79:7b:6c:21:00:f7:6c:c8:a7:02:9b:f8:d9:1f:9e:26: 68:ed:98:3e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvmlRa7BRdfNq8C1pYKBSJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIyMTY0MTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzMxMzFhZjdmYTAyOTc5YzZlYTFkZGUwOWQ4Yzc2MmQ4YWVhNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRc410Ihjorn1lRmuAPDv1DyA6jm Z9oFZUcLwXTmOjCJEUt/gvajtGm5pzTISAp2+Gzl9jlmIfa+bytCwkEnm9nmA24W qpdJNI8pT6dgH6jPxrkXuJHQcJ2NF+HuFnUA6yXl62ZeGfsTlUNtdBSeikW73ykB FWIwy4ccwRqFEn6Dx1uUgRHEVWlCbMUmBOzvCp8iBJ/BELDrAYuDsUkz5SLpd2pW Q+cw6i3pfBiPTiZ399DXIlDP0eVEu/FRAwsUGmckKjwR/m9jTXN4G7k+ghp07CIm TW7I3Ew9F2CpED2cbBodgvHFR6iBnszAorN6zBWtBmCYcYe9Za0o015KIQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMMxMa9/oCl5xuod3gnYx2LYrqQdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzFmOTQ2 Yy0zY2M3LTQxOWQtYjRiNy00OWI2NjUxZDkyZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvMWY5NDZj LTNjYzctNDE5ZC1iNGI3LTQ5YjY2NTFkOTJkYi8xL3d6RXhyMy1nS1huRzZoM2VD ZGpIWXRpdXBCMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMsIzANBgkqhkiG9w0BAQsFAAOCAQEAq49p6Mit1SgC CZjWom9naEl87U/rHdiTup0L+e8qqxhE2MbDjwcJfElzUCNX6KBYAGBsScXvvdM+ 23+V0WzK1zqJ+fEr4wpz8FOq1lbnosRv+hlnS3gQjVj0j9LcIpaTTqEKdOI2X86n BdFjxRH32A8tnjj8wvyMkUaNz6YnigPd3Dd0JXewECxHbbcXFKHiQJdaB8V8ONLS k65G7ZIrDePHtlCVGa6GY2r3K1FW36Hfv/e22y07LFYEFbfjjC63amqtaiYaYOds FQ0TXBCEidbIF0b73hJ8yQHeDoJxnSdr3YAFvbBXqNWMrKt5e2whAPdsyKcCm/jZ H54maO2YPg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:20 2026 by rpki-client