This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer File: WYjwhVxEeNG5Srio1tnZxRHzFCY.cer (raw, json) Hash identifier: 589+ZxjewE+3mKtCK0EER9jzSZAPG5Zh+9b26sz+qXk= Subject key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA73171D5369DAD9ECEE10051AD1703 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49600 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:31:71:d5:36:9d:ad:9e:ce:e1:00:51:ad:17:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:b1:33:bb:b5:e0:59:20:02:d9:91:2b:f8: a8:dc:75:f3:d7:64:3e:49:4e:9d:ac:f2:13:1c:44: ce:3a:0e:fe:f5:7f:ed:dd:94:a7:8f:b6:13:9c:36: 9e:72:b1:b9:97:3b:dd:93:ce:1b:71:60:24:0c:a1: db:47:c9:d6:7d:77:f9:5c:84:39:29:00:fd:53:f6: 52:19:64:5c:30:4d:c0:1c:01:e7:f3:ef:bd:6d:0a: 12:49:02:03:e6:69:94:fa:af:c3:bd:d2:32:b8:9f: 1f:89:91:9a:3d:a0:e6:f6:5c:7c:c5:ae:fe:db:ce: 5e:64:bd:96:ef:b9:87:8c:d9:8a:13:b3:51:6e:bd: 95:9e:d9:e5:17:19:6b:f5:7e:a9:c8:c8:8b:8b:10: 18:c2:b5:cc:e6:b9:6d:14:ce:83:01:f2:61:ef:79: 39:2d:a8:67:e3:7c:06:02:87:e6:71:00:0d:6f:83: f2:9b:bd:10:23:8e:12:b8:8d:0c:42:5e:4e:60:fd: d9:d1:9d:90:69:3c:37:68:14:3c:e4:9b:3c:15:7f: 89:a1:53:b3:3a:5c:41:68:b2:25:ec:cc:6f:71:c7: 6a:21:af:67:63:3f:c9:97:b4:58:e5:81:73:d0:83: 6b:d2:19:cf:5e:e0:ec:59:de:d3:9d:6f:80:8d:71: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49600 Signature Algorithm: sha256WithRSAEncryption 40:7c:7b:6d:ba:3b:c9:25:98:08:33:0a:a7:ed:06:d1:e3:c4: e0:54:b7:1f:4f:e2:4e:da:f9:81:d6:7c:dc:fe:9e:22:86:16: 13:5a:40:e9:77:12:db:69:f0:b7:42:47:8e:2e:3e:7c:c4:31: 9a:fd:86:7a:c4:99:3d:da:ab:51:a9:3f:48:ee:01:64:f9:f3: 4f:bc:c5:19:88:17:64:4f:51:ae:0b:24:5b:d9:02:6c:52:85: 35:61:1d:bf:ba:22:a7:2f:04:31:85:be:0c:d8:4e:e7:56:2e: fe:4c:88:d0:26:2b:1e:35:14:a5:a3:5b:c9:da:17:bd:52:44: 0b:14:8a:9f:5f:c1:2d:f2:17:3f:0b:5c:9d:eb:32:2e:de:e8: 71:e5:65:ce:50:3a:33:28:f3:f8:75:f1:b9:b0:40:b9:85:5d: 1e:f2:f5:4a:1a:b2:33:d1:d5:6a:53:cc:2c:8f:04:70:a9:03: 79:a9:a5:91:ef:e2:eb:52:3e:06:61:3c:2c:e3:be:b0:48:84: 1a:a7:da:b3:7e:32:72:be:81:44:d1:7a:8f:fa:5f:90:9b:f5: 36:08:15:90:46:ef:91:3e:5c:1f:21:10:f4:46:87:0e:9e:3f: e6:fa:77:92:76:fb:63:e9:51:41:c7:8c:f1:a7:c6:94:c2:c8: 68:25:41:40 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+pzFx1TadrZ7O4QBRrRcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTg4ZjA4NTVjNDQ3OGQxYjk0YWI4YThkNmQ5ZDljNTExZjMxNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXaxM7u14FkgAtmRK/io3HXz12Q+ SU6drPITHETOOg7+9X/t3ZSnj7YTnDaecrG5lzvdk84bcWAkDKHbR8nWfXf5XIQ5 KQD9U/ZSGWRcME3AHAHn8++9bQoSSQID5mmU+q/DvdIyuJ8fiZGaPaDm9lx8xa7+ 285eZL2W77mHjNmKE7NRbr2VntnlFxlr9X6pyMiLixAYwrXM5rltFM6DAfJh73k5 Lahn43wGAofmcQANb4Pym70QI44SuI0MQl5OYP3Z0Z2QaTw3aBQ85Js8FX+JoVOz OlxBaLIl7MxvccdqIa9nYz/Jl7RY5YFz0INr0hnPXuDsWd7TnW+AjXHTmwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFmI8IVcRHjRuUq4qNbZ2cUR8xQmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2Q3MzRm YS02ZTgzLTQ2ODMtYmY0OS04NzEyMmI1MTRlNjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvZDczNGZh LTZlODMtNDY4My1iZjQ5LTg3MTIyYjUxNGU2OS8xL1dZandoVnhFZU5HNVNyaW8x dG5aeFJIekZDWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDBwDANBgkqhkiG9w0BAQsFAAOCAQEAQHx7bbo7ySWY CDMKp+0G0ePE4FS3H0/iTtr5gdZ83P6eIoYWE1pA6XcS22nwt0JHji4+fMQxmv2G esSZPdqrUak/SO4BZPnzT7zFGYgXZE9RrgskW9kCbFKFNWEdv7oipy8EMYW+DNhO 51Yu/kyI0CYrHjUUpaNbydoXvVJECxSKn1/BLfIXPwtcnesyLt7oceVlzlA6Myjz +HXxubBAuYVdHvL1ShqyM9HValPMLI8EcKkDeamlke/i61I+BmE8LOO+sEiEGqfa s34ycr6BRNF6j/pfkJv1NggVkEbvkT5cHyEQ9EaHDp4/5vp3knb7Y+lRQceM8afG lMLIaCVBQA== -----END CERTIFICATE-----Generated at Mon Jan 12 10:29:11 2026 by rpki-client