This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer File: WIsQJOoFbl7UmPbp3cIGMr32ycU.cer (raw, json) Hash identifier: ip69s3xEyM9CG8dBYpIB3x9hjy67EA4mja6pcANifOk= Subject key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B4F7B292DE9CDDF8B9EF5C5C6AEA73536 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 24 Dec 2025 08:30:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208208 IP: 81.31.199.0/24 IP: 185.240.240.0/22 IP: 2a09:6300::/32 IP: 2a09:6302:: -- 2a09:6307:ffff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:7b:29:2d:e9:cd:df:8b:9e:f5:c5:c6:ae:a7:35:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 24 08:30:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:14:13:0b:fd:c3:2c:b6:1e:40:9a:09:d5: 7e:05:01:f9:a5:6b:e7:f0:61:7b:8e:ae:2f:ac:b1: d7:5a:9d:21:f1:ff:31:2a:4a:a6:57:c2:1e:6e:35: f7:f0:e5:38:8f:d5:5f:46:2b:21:aa:26:2b:ad:6e: 72:8a:43:0c:f2:c2:4a:5e:12:9b:3b:25:5c:ac:46: 4d:7f:e5:60:35:d4:f1:1a:c5:28:20:1a:8f:d4:2f: 9e:84:e7:94:aa:c5:86:a5:f7:53:92:5a:69:b0:cf: 67:49:42:6d:82:13:a4:5d:04:6f:82:4b:de:1e:38: 9c:bb:94:07:ea:d8:49:11:34:60:1b:c5:58:b5:e9: 1b:d8:8b:0d:cd:1e:8d:f4:5e:d0:e2:ef:ef:30:fe: 26:25:67:ef:a0:90:3a:13:43:7c:62:0d:e3:11:8b: 6c:e5:31:39:c8:2a:c8:5d:7f:85:9c:bf:70:69:d0: 1d:bb:f3:5b:8e:a8:12:5a:c2:6d:9b:c4:c4:c8:19: 26:7d:11:a2:23:f8:4b:86:44:28:42:39:d9:36:1b: 0d:78:f5:e2:9b:3f:80:ca:25:fa:7c:c8:62:40:44: ca:07:19:98:4e:7f:40:45:12:95:70:97:23:57:d6: 77:f6:09:39:16:94:e3:be:43:2b:c8:2b:93:3b:7b: bf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.31.199.0/24 185.240.240.0/22 IPv6: 2a09:6300::/32 2a09:6302::-2a09:6307:ffff:ffff:ffff:ffff:ffff:ffff sbgp-autonomousSysNum: critical Autonomous System Numbers: 208208 Signature Algorithm: sha256WithRSAEncryption 28:f8:54:6e:bc:11:1d:08:5c:ea:65:84:05:f2:b4:f7:bf:a3: 82:b1:6a:e8:d4:05:39:f2:c9:0e:d4:f6:a7:37:80:57:b4:e3: 64:51:93:6c:9f:2c:ea:8f:4a:59:ff:d7:5c:bf:c9:1e:4c:69: 04:fa:8d:a0:ad:58:41:13:e7:35:af:b2:34:95:3d:7f:25:19: fd:45:d8:ac:19:5c:77:8c:a5:0d:cb:ea:8e:93:eb:05:1a:a1: 01:2f:d0:8d:61:ca:dd:b5:54:42:d4:ab:cc:19:ae:18:68:5d: 63:0a:c7:6c:30:cc:ee:d2:79:04:74:67:45:de:fb:81:e8:ae: e0:de:a0:88:33:96:47:1b:ba:f6:a6:cf:8d:cb:0a:cc:17:f1: be:55:b5:52:20:44:27:02:59:9a:95:51:2a:3d:68:86:b8:be: 20:2b:9b:10:f7:0d:3b:1b:55:a9:5b:74:95:f7:c6:5a:49:74: 65:17:ad:22:15:27:cb:05:38:5d:4e:da:1e:15:85:4a:3e:5e: 54:cb:09:87:99:31:ec:fa:16:e9:aa:ce:d1:31:a5:bd:73:96: 73:2e:7d:4a:ed:8d:d6:97:ef:7f:07:d2:36:0c:c8:8e:fd:a6: 7a:02:67:86:44:aa:7d:e8:24:4b:8b:db:71:62:97:2c:9c:dc: 88:59:fc:6e -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZtPeykt6c3fi571xcaupzU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjI0MDgzMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODhiMTAyNGVhMDU2ZTVlZDQ5OGY2ZTlkZGMyMDYzMmJkZjZjOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSwUEwv9wyy2HkCaCdV+BQH5pWvn 8GF7jq4vrLHXWp0h8f8xKkqmV8IebjX38OU4j9VfRishqiYrrW5yikMM8sJKXhKb OyVcrEZNf+VgNdTxGsUoIBqP1C+ehOeUqsWGpfdTklppsM9nSUJtghOkXQRvgkve Hjicu5QH6thJETRgG8VYtekb2IsNzR6N9F7Q4u/vMP4mJWfvoJA6E0N8Yg3jEYts 5TE5yCrIXX+FnL9wadAdu/NbjqgSWsJtm8TEyBkmfRGiI/hLhkQoQjnZNhsNePXi mz+AyiX6fMhiQETKBxmYTn9ARRKVcJcjV9Z39gk5FpTjvkMryCuTO3u/QQIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFFiLECTqBW5e1Jj26d3CBjK99snFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2QzNGE3 NC1kN2NkLTRmOTktODRjZC01NjYyOGE0NmRmNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvZDM0YTc0 LWQ3Y2QtNGY5OS04NGNkLTU2NjI4YTQ2ZGY0MC8xL1dJc1FKT29GYmw3VW1QYnAz Y0lHTXIzMnljVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEQGCCsGAQUF BwEHAQH/BDUwMzASBAIAATAMAwQAUR/HAwQCufDwMB0EAgACMBcDBQAqCWMAMA4D BQEqCWMCAwUDKgljADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLVAwDQYJKoZI hvcNAQELBQADggEBACj4VG68ER0IXOplhAXytPe/o4KxaujUBTnyyQ7U9qc3gFe0 42RRk2yfLOqPSln/11y/yR5MaQT6jaCtWEET5zWvsjSVPX8lGf1F2KwZXHeMpQ3L 6o6T6wUaoQEv0I1hyt21VELUq8wZrhhoXWMKx2wwzO7SeQR0Z0Xe+4HoruDeoIgz lkcbuvamz43LCswX8b5VtVIgRCcCWZqVUSo9aIa4viArmxD3DTsbValbdJX3xlpJ dGUXrSIVJ8sFOF1O2h4VhUo+XlTLCYeZMez6FumqztExpb1zlnMufUrtjdaX738H 0jYMyI79pnoCZ4ZEqn3oJEuL23Filyyc3IhZ/G4= -----END CERTIFICATE-----Generated at Mon Dec 29 03:26:02 2025 by rpki-client