This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer File: WMV8B555WnlrR6ftMvBysFipOm4.cer (raw, json) Hash identifier: OQVVAmC1Kn2U+TE4vrwysFxbrO8YTxGqKuJdjBXKBkw= Subject key identifier: 58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759018F1A7AD2C67886141A33A9A041 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50784 IP: 185.159.168.0/22 IP: 2a07:b640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:01:8f:1a:7a:d2:c6:78:86:14:1a:33:a9:a0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58c57c079e795a796b47a7ed32f072b058a93a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:bc:c8:ee:13:45:1d:53:f2:9c:13:b3:8e: 32:31:07:ad:55:1d:6f:ce:32:87:c4:5e:6e:63:a6: 53:c9:30:7c:21:2d:dd:56:5f:da:c3:a6:e4:61:98: 2e:fd:f0:93:62:bd:e1:2e:4f:93:c0:68:c5:87:ff: cb:45:c0:84:b5:89:32:c1:93:30:34:0d:f9:37:0c: 09:ee:a5:2a:ec:68:be:72:b1:66:70:3f:7d:9f:d7: 92:a8:4a:50:2b:e4:66:1f:ea:b7:90:1b:c8:f7:c6: 40:3f:bd:0d:aa:cf:9f:58:2e:5a:1d:f6:2c:3d:95: eb:99:09:67:b9:1e:65:38:b3:86:86:a1:ad:6d:6d: 66:08:8e:38:60:f8:7a:22:a9:c5:e5:9c:b5:f9:24: e3:9a:ea:f7:7d:40:b4:dc:3b:1d:a7:7c:d6:9b:03: 49:1b:8f:6b:20:28:48:58:2b:99:00:14:d4:8b:d1: 4d:4a:11:b9:12:5c:80:85:00:ab:72:c6:39:c9:78: 44:e9:a0:96:8f:cb:ad:df:57:8e:da:a1:8e:4b:89: 2e:87:16:3d:e8:35:ac:12:3b:53:e6:ba:3b:2e:16: 16:50:2e:36:a7:c5:b3:3f:81:27:19:b7:27:d5:7a: 9b:35:38:38:7c:28:dd:73:af:45:69:25:28:9d:fc: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.168.0/22 IPv6: 2a07:b640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50784 Signature Algorithm: sha256WithRSAEncryption 24:b2:0e:43:b7:e3:8f:a3:24:0d:79:5c:84:2c:0d:26:a0:b6: 3d:8c:7d:09:9e:0b:e7:b6:3c:c2:36:13:1f:e0:e4:92:9f:96: 19:40:e2:60:ff:f2:32:03:ef:82:f4:9b:4b:f6:08:11:91:06: 52:b7:f4:48:4a:60:02:4a:26:d0:04:c5:27:92:a6:b3:8a:5c: 84:b5:3d:87:95:3f:8a:2a:53:6a:59:11:f4:0a:61:93:4c:1a: 2e:ab:a1:40:df:84:ca:f6:87:3c:52:9c:20:a4:34:84:59:e6: 9f:bc:a2:8b:71:78:eb:2c:83:98:e4:32:7c:b8:2e:8f:e1:20: 84:2f:f3:fa:87:6b:51:51:24:b5:fa:d0:e6:91:8f:f7:12:12: 99:ba:3e:49:94:af:d4:6c:78:08:96:84:d2:c0:ba:47:23:99: 36:4d:6f:de:26:74:da:52:87:1d:4f:5f:f2:2b:b3:87:62:89: 81:05:11:43:7c:bc:55:86:41:18:f7:78:bf:c0:f2:f1:84:54: 92:97:4a:dd:9b:cb:21:72:43:ca:71:8b:08:1c:05:60:16:58: 85:35:9d:9c:d1:70:35:fb:05:a0:74:ca:75:44:cc:50:32:9e: c9:c4:4e:1b:e8:4a:57:ee:0f:57:7b:3f:06:d7:a9:74:d7:93: bf:1c:d9:ad -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WQGPGnrSxniGFBozqaBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGM1N2MwNzllNzk1YTc5NmI0N2E3ZWQzMmYwNzJiMDU4YTkzYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFW8yO4TRR1T8pwTs44yMQetVR1v zjKHxF5uY6ZTyTB8IS3dVl/aw6bkYZgu/fCTYr3hLk+TwGjFh//LRcCEtYkywZMw NA35NwwJ7qUq7Gi+crFmcD99n9eSqEpQK+RmH+q3kBvI98ZAP70Nqs+fWC5aHfYs PZXrmQlnuR5lOLOGhqGtbW1mCI44YPh6IqnF5Zy1+STjmur3fUC03Dsdp3zWmwNJ G49rIChIWCuZABTUi9FNShG5ElyAhQCrcsY5yXhE6aCWj8ut31eO2qGOS4kuhxY9 6DWsEjtT5ro7LhYWUC42p8WzP4EnGbcn1XqbNTg4fCjdc69FaSUonfyoJQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFjFfAeeeVp5a0en7TLwcrBYqTpuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2IzNTc0 Ni04ZTQyLTRkODAtYjc2ZC01NzUyOTJiYzM5NDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvYjM1NzQ2 LThlNDItNGQ4MC1iNzZkLTU3NTI5MmJjMzk0MS8xL1dNVjhCNTU1V25sclI2ZnRN dkJ5c0ZpcE9tNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ+oMA0EAgACMAcDBQMqB7ZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDGYDANBgkqhkiG9w0BAQsFAAOCAQEAJLIOQ7fjj6Mk DXlchCwNJqC2PYx9CZ4L57Y8wjYTH+Dkkp+WGUDiYP/yMgPvgvSbS/YIEZEGUrf0 SEpgAkom0ATFJ5Kms4pchLU9h5U/iipTalkR9Aphk0waLquhQN+EyvaHPFKcIKQ0 hFnmn7yii3F46yyDmOQyfLguj+EghC/z+odrUVEktfrQ5pGP9xISmbo+SZSv1Gx4 CJaE0sC6RyOZNk1v3iZ02lKHHU9f8iuzh2KJgQURQ3y8VYZBGPd4v8Dy8YRUkpdK 3ZvLIXJDynGLCBwFYBZYhTWdnNFwNfsFoHTKdUTMUDKeycROG+hKV+4PV3s/Btep dNeTvxzZrQ== -----END CERTIFICATE-----Generated at Fri Jan 2 18:35:44 2026 by rpki-client