This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer File: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer (raw, json) Hash identifier: B9OBwzoH3+xoPHNvDzwa2HSHSeBvUPWtcLvjGyj0BkQ= Subject key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C806FAA8E1A5D5C3539CCEA0BBDC185 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.191.64.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6f:aa:8e:1a:5d:5c:35:39:cc:ea:0b:bd:c1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:1c:8f:e8:89:c8:e9:1b:62:63:c7:3d:f3: e3:21:04:6d:a7:94:54:37:42:b4:78:f9:a2:37:dd: bd:83:c7:a2:aa:05:98:d4:63:f2:d1:ce:ac:5f:53: 02:5d:6d:0a:7c:5a:81:b2:b0:47:0f:d5:8e:95:61: 8a:a8:34:b9:3c:dd:d1:c1:3a:7b:40:67:f6:f3:b0: fa:98:e6:9f:27:30:04:a6:71:b3:66:86:55:46:79: d1:36:50:f7:78:f9:5f:fc:2c:e5:2b:67:b0:f9:d2: 07:77:1d:82:f2:65:b1:66:79:e1:71:4c:e6:92:8f: 49:f6:06:28:72:c7:4b:84:09:18:e9:7c:3f:e8:de: f1:8d:d3:5d:b8:69:3e:5f:60:60:22:8f:12:1b:db: 43:36:1b:b1:2d:29:36:35:2d:d9:48:56:fd:e9:ed: 5d:0f:0b:24:e8:3a:6a:cf:48:15:c4:7c:df:35:1e: 04:84:b7:cc:00:e2:23:e6:f4:c7:c1:53:91:30:70: 29:d9:73:c3:58:ae:1e:5f:b4:54:f7:35:03:c7:4d: 4f:c0:9b:f5:e0:17:05:ae:f1:a1:b7:ef:21:c2:30: 02:b9:9e:92:9f:56:de:4b:c2:01:1d:0c:1a:27:8c: 8b:69:60:73:8c:96:ff:f8:dd:24:13:2a:39:3b:6d: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.191.64.0/18 Signature Algorithm: sha256WithRSAEncryption 89:f5:66:f1:f4:2b:ef:b2:13:29:a6:82:39:a9:73:eb:7d:74: 41:f2:79:57:1b:e1:fc:f8:4c:6c:36:11:f8:a0:b9:94:fb:0d: 38:bb:b2:be:22:c5:78:7a:f6:25:d7:48:68:18:46:79:44:6c: d3:46:68:2a:1f:6c:fd:c8:ec:75:b4:52:a8:18:9f:dc:0a:e3: 2a:2f:1b:c2:0b:99:2f:1e:ac:f1:35:84:11:04:1a:70:bf:12: bf:42:ca:5f:81:35:69:ab:f5:13:2d:54:44:2f:ec:34:59:9f: 51:82:6b:21:c1:f4:c1:f2:3a:93:5b:8a:7c:a5:c6:23:70:16: 44:0a:6e:57:9e:a1:6b:d2:76:76:4a:99:d5:b4:50:ea:32:27: c0:a4:40:09:4f:de:60:e6:90:85:b4:9b:8d:b7:77:76:03:a1: cb:c4:f6:23:1b:be:c7:09:20:c5:2c:71:04:f8:8a:bd:1f:a5: 77:f9:ff:b8:f2:23:69:ee:d3:86:f3:39:9d:3c:40:ba:6d:d8: 8b:0b:d9:a7:cf:ec:8d:34:5f:3c:f2:6d:99:2f:f1:66:41:42: 92:7b:bf:92:d9:8e:28:26:2c:30:b9:01:2a:7e:e1:99:06:9a: 9c:ba:35:2b:7f:69:99:fd:10:da:fc:9e:b5:88:45:ec:78:4a: 72:71:6c:a9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8gG+qjhpdXDU5zOoLvcGFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODJhYzM1ODlmYzUzOWFiODUyNjkwZjg1ZDlmM2Y3ZjIzNGVjMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ccj+iJyOkbYmPHPfPjIQRtp5RU N0K0ePmiN929g8eiqgWY1GPy0c6sX1MCXW0KfFqBsrBHD9WOlWGKqDS5PN3RwTp7 QGf287D6mOafJzAEpnGzZoZVRnnRNlD3ePlf/CzlK2ew+dIHdx2C8mWxZnnhcUzm ko9J9gYocsdLhAkY6Xw/6N7xjdNduGk+X2BgIo8SG9tDNhuxLSk2NS3ZSFb96e1d Dwsk6Dpqz0gVxHzfNR4EhLfMAOIj5vTHwVORMHAp2XPDWK4eX7RU9zUDx01PwJv1 4BcFrvGht+8hwjACuZ6Sn1beS8IBHQwaJ4yLaWBzjJb/+N0kEyo5O21H5wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFgqw1ifxTmrhSaQ+F2fP38jTsObMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzAwMTVk My0xYjIxLTRlNTUtODUwYi02NzQzMjhkNTJiZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvMDAxNWQz LTFiMjEtNGU1NS04NTBiLTY3NDMyOGQ1MmJkNy8xL1dDckRXSl9GT2F1RkpwRDRY WjhfZnlOT3c1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQGW79AMA0GCSqGSIb3DQEBCwUAA4IBAQCJ9Wbx 9CvvshMppoI5qXPrfXRB8nlXG+H8+ExsNhH4oLmU+w04u7K+IsV4evYl10hoGEZ5 RGzTRmgqH2z9yOx1tFKoGJ/cCuMqLxvCC5kvHqzxNYQRBBpwvxK/QspfgTVpq/UT LVREL+w0WZ9RgmshwfTB8jqTW4p8pcYjcBZECm5XnqFr0nZ2SpnVtFDqMifApEAJ T95g5pCFtJuNt3d2A6HLxPYjG77HCSDFLHEE+Iq9H6V3+f+48iNp7tOG8zmdPEC6 bdiLC9mnz+yNNF888m2ZL/FmQUKSe7+S2Y4oJiwwuQEqfuGZBpqcujUrf2mZ/RDa /J61iEXseEpycWyp -----END CERTIFICATE-----Generated at Sun Jan 11 23:39:36 2026 by rpki-client