This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer File: WNz7D_Tyi4_61usN0p6ytq9immg.cer (raw, json) Hash identifier: a3zz1RE2xkDKqIzt0iNBDcD9OaH69WlL2FkivEVeqjs= Subject key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB19474D8CD39E7E7B6C17C9175023 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 94.138.224.0/19 IP: 185.222.76.0/22 IP: 2001:1a70::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:19:47:4d:8c:d3:9e:7e:7b:6c:17:c9:17:50:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:e9:b6:db:0e:ae:a3:93:d6:84:58:5b:5f: 6e:db:e5:3a:e9:f4:ef:ad:1d:8c:43:70:76:f4:fa: 64:66:9b:de:1a:f0:78:c7:87:63:c7:57:21:86:70: 1f:37:e6:f7:af:6c:19:60:39:56:df:2b:25:54:db: 39:59:88:06:d3:c6:a4:fd:5e:66:d1:9b:ae:a4:c9: 1e:c9:86:db:ca:33:b6:fc:d0:20:4e:c1:80:6f:cf: 0e:b2:33:72:05:95:de:56:18:d1:a6:96:16:7e:9a: e6:44:88:04:af:97:a3:4f:12:55:3c:e9:ae:2f:71: e6:79:89:b0:85:eb:5e:9b:da:0a:49:ea:52:1a:ef: 54:9a:25:00:cb:ed:13:fd:34:ad:fe:a4:a8:b1:ee: f2:b9:8b:f0:01:51:f4:a3:61:aa:28:69:85:d9:e9: ad:9d:7e:07:0c:02:7b:c2:cb:52:ce:42:0d:e8:f3: 71:f5:55:6d:90:7f:ba:04:b0:2d:5d:51:cf:a2:be: c2:75:93:01:c6:06:e5:7b:2e:07:a5:9e:f9:2f:01: a7:f0:62:1a:fc:34:18:31:78:23:0b:5b:40:93:cf: 60:dd:df:2c:26:c6:70:a2:64:75:f9:10:e8:34:1a: 0a:ab:2e:3d:62:3a:ea:9d:e6:f4:44:ff:63:4b:cc: a7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.138.224.0/19 185.222.76.0/22 IPv6: 2001:1a70::/29 Signature Algorithm: sha256WithRSAEncryption 55:a2:94:f7:ef:7b:c1:c5:81:6c:de:63:8e:1d:20:0a:d1:33: 34:6b:17:74:88:d1:16:17:56:e8:35:7c:99:bb:6b:4a:9d:a2: 92:9b:b5:39:de:85:95:86:7e:63:2a:2d:3d:6a:10:56:74:e9: 58:a2:ba:73:ac:cd:08:dd:34:c4:8b:57:53:55:56:45:4d:b6: 99:8f:a8:99:b9:f0:9f:fc:03:66:b8:39:31:49:d5:e7:c5:fe: fa:bb:4b:33:d5:b4:7c:f7:cc:47:f6:50:4a:7a:9e:39:92:66: c4:bd:93:1d:27:ca:39:b2:1f:20:0c:75:ec:52:27:92:a6:a7: 25:89:7e:53:bb:54:2a:60:94:15:94:ae:fa:94:b4:f5:b3:97: c2:7c:3c:41:d3:cc:34:24:89:40:e7:c6:eb:78:6e:30:4e:3a: ea:8c:fb:b6:97:0f:5d:86:1e:6b:97:64:68:16:df:44:78:81: 38:86:71:cd:d7:77:c5:76:2b:76:22:0f:33:4c:96:14:91:63: 93:be:ef:38:4d:9f:b9:9b:39:39:f0:73:aa:fe:7e:99:ce:18: 69:a0:7f:a1:8d:65:93:f8:0f:71:05:15:b6:72:0e:d6:b6:18: 70:f5:f2:ea:1e:64:1a:1d:0b:1b:1c:d7:4b:7c:27:aa:d6:b7: 30:10:5f:6f -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt26xlHTYzTnn57bBfJF1AjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGRjZmIwZmY0ZjI4YjhmZmFkNmViMGRkMjllYjJiNmFmNjI5YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaPpttsOrqOT1oRYW19u2+U66fTv rR2MQ3B29PpkZpveGvB4x4djx1chhnAfN+b3r2wZYDlW3yslVNs5WYgG08ak/V5m 0ZuupMkeyYbbyjO2/NAgTsGAb88OsjNyBZXeVhjRppYWfprmRIgEr5ejTxJVPOmu L3HmeYmwhetem9oKSepSGu9UmiUAy+0T/TSt/qSose7yuYvwAVH0o2GqKGmF2emt nX4HDAJ7wstSzkIN6PNx9VVtkH+6BLAtXVHPor7CdZMBxgbley4HpZ75LwGn8GIa /DQYMXgjC1tAk89g3d8sJsZwomR1+RDoNBoKqy49Yjrqneb0RP9jS8ynkQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFFjc+w/08ouP+tbrDdKesravYppoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2I2NjNk Zi1hYzFjLTQ1MjktOGM4Yi03MTIxMzVhNmI3NTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvYjY2M2Rm LWFjMWMtNDUyOS04YzhiLTcxMjEzNWE2Yjc1MC8xL1dOejdEX1R5aTRfNjF1c04w cDZ5dHE5aW1tZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFXorgAwQCud5MMA0EAgACMAcDBQMgARpwMA0G CSqGSIb3DQEBCwUAA4IBAQBVopT373vBxYFs3mOOHSAK0TM0axd0iNEWF1boNXyZ u2tKnaKSm7U53oWVhn5jKi09ahBWdOlYorpzrM0I3TTEi1dTVVZFTbaZj6iZufCf /ANmuDkxSdXnxf76u0sz1bR898xH9lBKep45kmbEvZMdJ8o5sh8gDHXsUieSpqcl iX5Tu1QqYJQVlK76lLT1s5fCfDxB08w0JIlA58breG4wTjrqjPu2lw9dhh5rl2Ro Ft9EeIE4hnHN13fFdit2Ig8zTJYUkWOTvu84TZ+5mzk58HOq/n6ZzhhpoH+hjWWT +A9xBRW2cg7Wthhw9fLqHmQaHQsbHNdLfCeq1rcwEF9v -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:00 2026 by rpki-client