This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer File: WLtuKTiiJR3EOE2vZe-lINwaWII.cer (raw, json) Hash identifier: iDYIt2Oa354hIf8S0sG8/1Lw2pOsdTRoM1w5rMMvQmw= Subject key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78345DDB0ADA50F27C2C66D737CB39DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 130.136.0.0/16 IP: 137.204.0.0/16 IP: 192.12.47.0/24 IP: 192.12.77.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5d:db:0a:da:50:f2:7c:2c:66:d7:37:cb:39:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:dc:9f:77:cc:00:de:af:2a:45:4a:11:4f: ce:04:ac:29:0b:d9:ab:7e:39:c4:b6:37:7a:b2:73: 7e:d9:56:50:44:58:55:43:b5:01:a7:4f:1c:82:fc: d4:c8:f8:59:a6:7e:70:95:a3:38:07:7c:cc:fe:1e: be:e9:51:5d:72:49:53:8f:e0:16:1a:85:3f:82:7e: 6b:26:49:ed:7b:e4:7c:0f:e0:c2:11:53:e4:54:0b: 04:46:05:a7:3f:1b:e5:bd:aa:e9:4f:11:4e:fc:32: 0b:3f:03:ee:94:58:5c:e0:1a:7f:3c:52:d9:5f:14: 26:cb:49:e1:64:3b:de:7f:3f:ef:4a:6a:cd:be:ed: b4:c6:38:62:31:98:71:4d:5c:dc:7c:bb:ff:82:c4: 42:1d:cc:eb:30:a4:69:a7:ea:dd:6a:f5:c9:58:35: ce:a5:aa:1c:01:48:01:5f:30:4e:e5:e2:9e:50:38: 8d:93:90:b2:d5:71:69:d2:d6:9e:18:66:ca:09:5f: c5:0c:d4:5e:0b:3f:79:1c:e7:ed:98:57:d4:ee:4f: ed:53:f8:2f:8d:73:0d:9c:8d:89:de:7e:d3:22:5d: cc:0c:4d:11:18:6d:08:02:e7:00:36:8b:34:22:33: d5:1c:46:8a:68:83:74:e9:70:71:0b:3b:af:d9:d3: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.136.0.0/16 137.204.0.0/16 192.12.47.0/24 192.12.77.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:0c:4b:38:f7:b8:38:61:58:b2:06:b4:0f:cc:8e:e9:9e:de: 93:ac:ad:8d:9e:2f:bd:07:06:42:be:f1:aa:c0:33:89:d5:fe: 31:59:ae:f6:58:c6:d7:10:f0:59:f7:53:46:10:99:b2:73:72: 42:f3:a6:df:11:1a:09:ed:94:3e:ef:ea:a5:19:86:fc:80:de: 36:bc:ae:94:76:30:07:69:53:01:df:86:a1:1d:1d:24:ca:fc: a5:eb:c2:bc:c2:7e:21:6a:47:30:7b:bb:76:5e:64:fe:1b:9c: 09:9e:45:9b:d9:dc:dd:15:ac:7f:5e:86:d9:fb:38:8d:df:bf: 3d:9e:40:93:1f:c5:00:c6:7d:31:72:87:c2:43:be:e9:8d:88: 1e:6e:be:48:cc:fd:2d:92:88:41:cb:e1:24:fe:f3:c6:b6:8e: 8e:7d:db:89:a8:ad:f2:1d:27:2a:22:74:46:ce:a9:d9:5e:a8: f8:e4:8e:f4:80:0b:86:f3:e3:75:e3:48:e5:d4:a1:22:f5:7d: 64:e2:2b:59:a5:3f:3e:9a:df:1e:4a:65:b8:74:6d:72:c0:48: 4f:2d:77:d5:d0:d1:82:cb:30:11:2f:5d:2f:6d:a0:13:75:08: c9:2b:fa:22:03:e6:80:05:af:ec:40:fb:6c:80:75:13:57:cb: 82:39:57:78 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZt4NF3bCtpQ8nwsZtc3yzncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGJiNmUyOTM4YTIyNTFkYzQzODRkYWY2NWVmYTUyMGRjMWE1ODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5zcn3fMAN6vKkVKEU/OBKwpC9mr fjnEtjd6snN+2VZQRFhVQ7UBp08cgvzUyPhZpn5wlaM4B3zM/h6+6VFdcklTj+AW GoU/gn5rJknte+R8D+DCEVPkVAsERgWnPxvlvarpTxFO/DILPwPulFhc4Bp/PFLZ XxQmy0nhZDvefz/vSmrNvu20xjhiMZhxTVzcfLv/gsRCHczrMKRpp+rdavXJWDXO paocAUgBXzBO5eKeUDiNk5Cy1XFp0taeGGbKCV/FDNReCz95HOftmFfU7k/tU/gv jXMNnI2J3n7TIl3MDE0RGG0IAucANos0IjPVHEaKaIN06XBxCzuv2dOd9wIDAQAB o4IClDCCApAwHQYDVR0OBBYEFFi7bik4oiUdxDhNr2XvpSDcGliCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1LzIwZGQw NC1hYmVjLTQ0YzMtOTVlYi01ZTM3ZDU1ODdiZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMjBkZDA0 LWFiZWMtNDRjMy05NWViLTVlMzdkNTU4N2JlNS8xL1dMdHVLVGlpSlIzRU9FMnZa ZS1sSU53YVdJSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC8GCCsGAQUF BwEHAQH/BCAwHjAcBAIAATAWAwMAgogDAwCJzAMEAMAMLwMEAMAMTTANBgkqhkiG 9w0BAQsFAAOCAQEAGwxLOPe4OGFYsga0D8yO6Z7ek6ytjZ4vvQcGQr7xqsAzidX+ MVmu9ljG1xDwWfdTRhCZsnNyQvOm3xEaCe2UPu/qpRmG/IDeNryulHYwB2lTAd+G oR0dJMr8pevCvMJ+IWpHMHu7dl5k/hucCZ5Fm9nc3RWsf16G2fs4jd+/PZ5Akx/F AMZ9MXKHwkO+6Y2IHm6+SMz9LZKIQcvhJP7zxraOjn3biait8h0nKiJ0Rs6p2V6o +OSO9IALhvPjdeNI5dShIvV9ZOIrWaU/PprfHkpluHRtcsBITy131dDRgsswES9d L22gE3UIySv6IgPmgAWv7ED7bIB1E1fLgjlXeA== -----END CERTIFICATE-----Generated at Thu Jan 1 09:05:33 2026 by rpki-client