This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer File: wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer (raw, json) Hash identifier: XzvzHNADkbGtwlTN1ttk/PeYTvezlm099kqnYnRy9CQ= Subject key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910771CA5756B719102E864B72AF934 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21371 AS: 25307 AS: 48562 AS: 60013 AS: 60640 IP: 37.46.0.0/21 IP: 80.69.0.0/19 IP: 89.187.96.0/19 IP: 185.1.101.0/24 IP: 185.1.104.0/24 IP: 185.2.164.0/22 IP: 193.201.92.0/22 IP: 195.234.244.0/22 IP: 2001:7f8:bc::/48 IP: 2001:7f8:be::/48 IP: 2001:1a08::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:77:1c:a5:75:6b:71:91:02:e8:64:b7:2a:f9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c334a35abfa82d549e490704d68bbe658005d63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:2a:82:9c:01:00:a6:69:76:da:47:1c:03: ad:6d:cf:61:04:70:a9:8b:64:ab:59:04:4d:2e:de: 2b:fc:96:3d:68:84:b7:4f:b2:c1:d8:09:47:da:6e: 7e:d6:b1:16:08:3c:83:eb:e1:f1:e5:a0:6c:0c:fa: 64:6c:62:d0:96:39:c9:37:6b:5e:02:51:41:de:36: 16:2f:d4:39:95:78:87:23:a6:26:ad:e4:c6:d3:1f: 16:2a:dc:86:1d:ff:2f:ea:22:4e:03:7f:53:9b:1a: 4d:3d:02:e5:d1:39:4a:4b:38:fc:3d:36:50:47:8b: a9:63:f0:01:9b:87:5b:0d:2f:29:3f:60:fb:18:30: 20:3f:8a:f7:92:ae:47:5c:bf:9f:19:e7:80:58:b3: 73:44:32:f1:79:e1:0e:60:9d:67:2d:16:11:74:25: 0e:22:92:72:f8:01:01:5e:64:0f:75:4d:7f:c1:e0: 59:c9:4f:d3:93:84:33:3f:e8:75:ee:51:fa:6f:f3: a5:28:e7:f2:0f:86:60:19:cd:6b:1b:39:86:ab:c3: 81:0b:41:f2:14:8d:8c:31:b7:48:b5:10:70:cb:c5: 91:c3:75:34:88:7b:19:75:98:0b:dd:ae:24:f4:19: db:44:9f:d6:67:a4:83:85:ef:79:4d:dc:80:f4:80: 61:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.0.0/21 80.69.0.0/19 89.187.96.0/19 185.1.101.0/24 185.1.104.0/24 185.2.164.0/22 193.201.92.0/22 195.234.244.0/22 IPv6: 2001:7f8:bc::/48 2001:7f8:be::/48 2001:1a08::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21371 25307 48562 60013 60640 Signature Algorithm: sha256WithRSAEncryption 62:e7:31:9a:d7:f8:6c:ab:9f:9e:14:5c:fa:eb:ea:22:31:d8: b7:69:75:02:6f:e5:07:02:bf:c4:7c:5e:a6:5a:42:7a:ee:e2: a5:0a:9b:bb:51:37:9c:d9:a2:3a:0f:49:9e:e8:27:2c:d4:d2: e4:0e:c4:08:9b:6f:90:82:c2:5b:24:de:56:fd:41:19:36:33: ac:8f:84:65:1e:86:9a:e3:25:6b:03:12:66:72:45:e4:90:82: 99:76:a4:91:82:b9:60:cc:4a:4e:a9:41:d6:14:d3:8f:f1:a1: fb:26:e8:5e:75:0e:a3:9b:2b:32:0f:d6:3b:0c:d6:e5:7e:39: 6d:87:d4:02:72:f8:fd:f2:b6:15:e3:fc:af:99:62:47:12:fa: ac:b2:22:82:a6:8f:f8:50:bb:9b:fd:2d:d3:74:79:5c:b3:e3: 2a:99:52:1b:02:07:ee:3e:d3:6d:41:a8:81:cf:54:e5:a2:22: 8f:ff:3a:7a:f1:ad:7d:7c:8f:e6:0b:67:4b:d9:3b:ec:0e:14: cc:af:04:98:70:9b:20:cc:a8:0c:41:b4:57:63:f2:24:57:f5: 8a:bc:8f:23:61:4b:49:20:e7:6f:2b:3d:d5:24:cc:6e:2c:32: 82:02:31:b4:11:74:bd:74:dd:2e:a7:b2:1c:86:79:db:5e:27: de:bd:48:07 -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISAZt5EHccpXVrcZEC6GS3Kvk0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzM0YTM1YWJmYTgyZDU0OWU0OTA3MDRkNjhiYmU2NTgwMDVkNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukcqgpwBAKZpdtpHHAOtbc9hBHCp i2SrWQRNLt4r/JY9aIS3T7LB2AlH2m5+1rEWCDyD6+Hx5aBsDPpkbGLQljnJN2te AlFB3jYWL9Q5lXiHI6YmreTG0x8WKtyGHf8v6iJOA39TmxpNPQLl0TlKSzj8PTZQ R4upY/ABm4dbDS8pP2D7GDAgP4r3kq5HXL+fGeeAWLNzRDLxeeEOYJ1nLRYRdCUO IpJy+AEBXmQPdU1/weBZyU/Tk4QzP+h17lH6b/OlKOfyD4ZgGc1rGzmGq8OBC0Hy FI2MMbdItRBwy8WRw3U0iHsZdZgL3a4k9BnbRJ/WZ6SDhe95TdyA9IBh8wIDAQAB o4IC/TCCAvkwHQYDVR0OBBYEFMM0o1q/qC1UnkkHBNaLvmWABdY8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0LzM5YjA4 ZC1lYjAxLTQzYjAtYjU2Yy0yNzM4ODRiNTNjNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvMzliMDhk LWViMDEtNDNiMC1iNTZjLTI3Mzg4NGI1M2M2ZS8xL3d6U2pXci1vTFZTZVNRY0Ux b3UtWllBRjFqdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTA2BAIAATAwAwQDJS4AAwQFUEUAAwQFWbtgAwQAuQFlAwQAuQFo AwQCuQKkAwQCwclcAwQCw+r0MB8EAgACMBkDBwAgAQf4ALwDBwAgAQf4AL4DBQMg ARoIMCwGCCsGAQUFBwEIAQH/BB0wG6AZMBcCAlN7AgJi2wIDAL2yAgMA6m0CAwDs 4DANBgkqhkiG9w0BAQsFAAOCAQEAYucxmtf4bKufnhRc+uvqIjHYt2l1Am/lBwK/ xHxeplpCeu7ipQqbu1E3nNmiOg9JnugnLNTS5A7ECJtvkILCWyTeVv1BGTYzrI+E ZR6GmuMlawMSZnJF5JCCmXakkYK5YMxKTqlB1hTTj/Gh+yboXnUOo5srMg/WOwzW 5X45bYfUAnL4/fK2FeP8r5liRxL6rLIigqaP+FC7m/0t03R5XLPjKplSGwIH7j7T bUGogc9U5aIij/86evGtfXyP5gtnS9k77A4UzK8EmHCbIMyoDEG0V2PyJFf1iryP I2FLSSDnbys91STMbiwyggIxtBF0vXTdLqeyHIZ5214n3r1IBw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:42 2026 by rpki-client