This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer File: Wc4cxXrNTYGB7TBThd7njbF14iE.cer (raw, json) Hash identifier: v6gzaP1lhx01deXh8xPTIDiJ+PaLh06j/D+1U9MCJI4= Subject key identifier: 59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB2E0C9AEB3E1D5B53DE8F03BF7DFA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205254 IP: 46.161.192.0/21 IP: 185.255.44.0/22 IP: 2a0c:58c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2e:0c:9a:eb:3e:1d:5b:53:de:8f:03:bf:7d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59ce1cc57acd4d8181ed305385dee78db175e221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:86:ad:fd:d7:a3:72:ae:79:ba:a2:c9:85: a8:c6:17:ee:1d:30:4b:2e:4f:d3:6b:0f:a1:1c:e6: ed:13:4f:d4:1a:cf:d5:e6:e5:49:61:5e:ca:1b:b3: 6b:19:47:39:20:15:6f:c0:63:fd:68:fe:65:c9:6b: 94:5b:cf:19:26:78:56:d9:4c:f8:d1:70:ab:b9:a1: 29:6d:36:bf:56:e0:da:14:8f:33:1b:56:11:fe:d0: 40:6e:5d:10:26:44:79:4c:a3:ff:5a:49:15:b8:db: f1:86:8b:fd:bf:d4:23:62:35:fb:52:fb:67:8c:de: af:1e:a4:9f:7e:03:bf:d4:a8:08:f7:9d:8d:2a:b3: 70:36:ee:f0:79:cc:21:b9:a1:fa:d3:5e:ae:cf:1d: 66:8b:de:93:68:4b:5e:4d:37:68:da:2d:1e:d7:c6: 41:96:d7:94:90:a7:c6:e9:3e:e0:ca:c1:f5:28:9a: d5:73:31:18:22:58:ad:56:d5:96:85:93:c4:ac:5d: d4:d5:ac:8e:9c:d4:32:b0:61:03:61:8d:1e:04:d5: 6e:5c:18:da:16:7e:22:66:3d:6e:6b:3d:d5:fd:ce: 91:95:17:b9:37:3d:cf:69:ab:58:d5:ef:21:97:21: 1f:d8:00:23:cc:c4:74:3d:55:db:63:70:d2:ad:66: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.161.192.0/21 185.255.44.0/22 IPv6: 2a0c:58c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205254 Signature Algorithm: sha256WithRSAEncryption 1f:07:95:ee:cb:53:90:a8:e2:ce:c6:9c:77:27:05:06:f1:12: 66:56:da:23:e1:aa:36:45:14:c8:30:9d:4a:b0:ed:b3:94:02: f1:fb:1e:5d:ca:8b:9c:ea:cd:b8:af:64:a4:66:a8:94:61:86: 78:3c:68:df:e0:5e:fa:41:a8:68:7f:e2:5c:6a:e9:1d:3d:25: de:3f:93:1a:83:2e:84:c5:93:ed:29:19:c2:e8:6b:5d:81:79: f2:d2:cc:0c:56:7a:c8:3d:bc:2a:f3:d1:36:f6:14:be:c2:bb: d2:f6:66:77:44:37:b9:a3:f7:95:da:cd:db:98:55:b8:2e:a1: bc:1f:80:ca:e7:07:22:dc:b6:e7:b3:60:00:6b:df:4d:9b:2e: 87:10:ed:ac:2e:dc:65:34:a5:7d:d8:16:d4:17:0a:9b:3b:1e: b8:4f:f6:3b:b7:0a:e6:38:6c:60:85:30:7a:35:bb:a2:21:1a: 36:ae:75:5c:03:d6:92:cb:bb:b0:9a:41:04:f3:4b:3e:a3:08: 42:b1:6f:fc:4c:7f:18:82:93:5a:2f:0d:a6:8b:93:11:98:fa: 8b:1d:70:2f:32:ae:97:77:84:43:e1:26:dc:ad:ec:b8:b6:88: e2:e8:96:bc:0c:ef:ba:3c:05:1b:6d:a9:0e:64:fd:6f:d6:02: e3:7b:a0:17 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yy4Mmus+HVtT3o8Dv336MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWNlMWNjNTdhY2Q0ZDgxODFlZDMwNTM4NWRlZTc4ZGIxNzVlMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UeGrf3Xo3KuebqiyYWoxhfuHTBL Lk/Taw+hHObtE0/UGs/V5uVJYV7KG7NrGUc5IBVvwGP9aP5lyWuUW88ZJnhW2Uz4 0XCruaEpbTa/VuDaFI8zG1YR/tBAbl0QJkR5TKP/WkkVuNvxhov9v9QjYjX7Uvtn jN6vHqSffgO/1KgI952NKrNwNu7wecwhuaH6016uzx1mi96TaEteTTdo2i0e18ZB lteUkKfG6T7gysH1KJrVczEYIlitVtWWhZPErF3U1ayOnNQysGEDYY0eBNVuXBja Fn4iZj1uaz3V/c6RlRe5Nz3PaatY1e8hlyEf2AAjzMR0PVXbY3DSrWZ5SQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFnOHMV6zU2Bge0wU4Xe542xdeIhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxL2MxNDRk Yy1mNTYyLTRhM2UtYjZjYS1jMTYyZGRmZGVlNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvYzE0NGRj LWY1NjItNGEzZS1iNmNhLWMxNjJkZGZkZWU3My8xL1djNGN4WHJOVFlHQjdUQlRo ZDduamJGMTRpRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLqHAAwQCuf8sMA0EAgACMAcDBQMqDFjAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMhxjANBgkqhkiG9w0BAQsFAAOCAQEAHweV 7stTkKjizsacdycFBvESZlbaI+GqNkUUyDCdSrDts5QC8fseXcqLnOrNuK9kpGao lGGGeDxo3+Be+kGoaH/iXGrpHT0l3j+TGoMuhMWT7SkZwuhrXYF58tLMDFZ6yD28 KvPRNvYUvsK70vZmd0Q3uaP3ldrN25hVuC6hvB+AyucHIty257NgAGvfTZsuhxDt rC7cZTSlfdgW1BcKmzseuE/2O7cK5jhsYIUwejW7oiEaNq51XAPWksu7sJpBBPNL PqMIQrFv/Ex/GIKTWi8NpouTEZj6ix1wLzKul3eEQ+Em3K3suLaI4uiWvAzvujwF G22pDmT9b9YC43ugFw== -----END CERTIFICATE-----Generated at Wed Jan 7 06:57:22 2026 by rpki-client