This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer File: WSgL6bNNnGabgCDlTdakheMX1y8.cer (raw, json) Hash identifier: XYPnMa+VAOw4vePe1vrpGhIAvCqH5M8q+dwquTTNuqQ= Subject key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB5F7B2C6EB45321EE5F9EE61A3166 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214342 IP: 193.200.28.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5f:7b:2c:6e:b4:53:21:ee:5f:9e:e6:1a:31:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59280be9b34d9c669b8020e54dd6a485e317d72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:05:81:fc:7d:d7:1b:79:9e:65:57:6f:3c: 9b:b1:97:21:9b:7f:72:d4:89:40:d9:6b:fc:23:b3: e2:97:b8:c3:2e:7e:b8:5c:79:7c:5c:a3:3b:a4:5b: 48:50:e1:7e:74:5a:94:eb:a8:63:6e:f4:19:ae:8e: e4:52:c3:6d:e4:cd:8c:60:b2:1e:97:dc:b5:42:f0: 0c:11:0c:86:41:32:19:be:d2:d6:ab:fc:64:94:8d: d6:05:d4:f0:3f:82:41:9f:e0:06:a1:f1:0d:bb:91: 63:15:7f:38:a6:f7:de:60:ee:73:cb:dd:28:e2:2a: fe:f6:57:15:cd:7d:20:00:2e:e6:71:0e:c0:01:72: 0c:64:27:47:98:26:37:37:2b:cc:f8:e7:ea:95:0f: 52:c4:83:b9:0a:29:b8:9a:ef:c7:5b:fd:5e:9e:41: f5:9a:15:75:09:29:0d:e0:22:b8:d5:12:83:dc:ea: aa:3d:99:72:96:e5:b3:47:8f:1d:6c:33:49:fd:03: 13:7d:2e:2d:22:52:76:cc:30:d0:2e:3b:4e:95:25: 5c:fe:49:02:13:b6:4f:54:36:f7:52:09:16:ba:b8: db:34:fd:3e:40:dc:e8:55:db:c4:8b:bd:56:1a:ab: 8e:06:5e:56:11:6e:fe:de:7e:c6:fb:72:30:d6:b5: ad:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.28.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214342 Signature Algorithm: sha256WithRSAEncryption 91:cd:5a:0f:1c:6a:69:a8:27:04:c3:19:3e:78:b0:0a:32:fc: 7c:e2:02:5e:44:0f:0b:27:93:bd:95:83:c4:74:d6:e9:80:59: f0:5e:1b:27:f0:ca:71:ea:aa:5f:8d:3c:70:01:cf:80:7e:66: 64:5d:c6:e7:21:8b:b7:31:ec:3f:6f:72:4c:18:ab:88:02:36: 97:f4:eb:30:99:36:2e:39:42:65:81:af:27:c3:4d:1b:ab:e1: b1:9c:9e:50:6f:78:a8:ea:36:af:b9:51:d6:a7:af:19:17:5a: 2f:6a:62:04:54:3f:4d:0d:56:c8:87:d8:53:d0:a7:21:95:ad: 27:ce:a1:36:94:c6:7e:d4:e2:4d:96:39:79:26:a3:58:63:4e: 8a:49:26:f3:d4:1a:b4:8d:f9:0d:53:a3:ad:92:57:27:0b:9e: 66:a0:ed:be:07:f3:ee:73:f4:30:06:1d:ce:49:bc:a2:b4:6d: af:5f:c6:b3:40:76:d0:1b:3a:c7:e9:07:05:be:da:cf:ce:94: 4a:59:d3:89:5f:21:69:e0:97:8c:6f:ba:a6:eb:04:06:3e:a3: 80:58:cb:f9:e8:87:1b:c2:60:5f:49:47:46:33:22:1f:6d:00: 8b:0a:7e:c5:83:0e:5c:8a:39:bc:85:d0:15:62:1e:3f:e4:71: 86:4a:88:f5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9y197LG60UyHuX57mGjFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTI4MGJlOWIzNGQ5YzY2OWI4MDIwZTU0ZGQ2YTQ4NWUzMTdkNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikIFgfx91xt5nmVXbzybsZchm39y 1IlA2Wv8I7Pil7jDLn64XHl8XKM7pFtIUOF+dFqU66hjbvQZro7kUsNt5M2MYLIe l9y1QvAMEQyGQTIZvtLWq/xklI3WBdTwP4JBn+AGofENu5FjFX84pvfeYO5zy90o 4ir+9lcVzX0gAC7mcQ7AAXIMZCdHmCY3NyvM+OfqlQ9SxIO5Cim4mu/HW/1enkH1 mhV1CSkN4CK41RKD3OqqPZlyluWzR48dbDNJ/QMTfS4tIlJ2zDDQLjtOlSVc/kkC E7ZPVDb3UgkWurjbNP0+QNzoVdvEi71WGquOBl5WEW7+3n7G+3Iw1rWtYQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFkoC+mzTZxmm4Ag5U3WpIXjF9cvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2VjNTg0 Mi02NTU5LTQ4YWYtODBlMC1lMGEwNDUwNzU5ODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvZWM1ODQy LTY1NTktNDhhZi04MGUwLWUwYTA0NTA3NTk4NC8xL1dTZ0w2Yk5ObkdhYmdDRGxU ZGFraGVNWDF5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwcgcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNFRjANBgkqhkiG9w0BAQsFAAOCAQEAkc1aDxxqaagnBMMZPniwCjL8fOICXkQP CyeTvZWDxHTW6YBZ8F4bJ/DKceqqX408cAHPgH5mZF3G5yGLtzHsP29yTBiriAI2 l/TrMJk2LjlCZYGvJ8NNG6vhsZyeUG94qOo2r7lR1qevGRdaL2piBFQ/TQ1WyIfY U9CnIZWtJ86hNpTGftTiTZY5eSajWGNOikkm89QatI35DVOjrZJXJwueZqDtvgfz 7nP0MAYdzkm8orRtr1/Gs0B20Bs6x+kHBb7az86USlnTiV8haeCXjG+6pusEBj6j gFjL+eiHG8JgX0lHRjMiH20Aiwp+xYMOXIo5vIXQFWIeP+RxhkqI9Q== -----END CERTIFICATE-----Generated at Mon Jan 12 08:08:16 2026 by rpki-client