This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer File: WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer (raw, json) Hash identifier: e4CAzgqFcbNxi2k9SINA+gmxOYTpN8wChA380QqCDKs= Subject key identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B369EFBF3186EFEC1FED08F0F4F9D2A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28 IP: 129.247.0.0/16 IP: 192.108.54.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9e:fb:f3:18:6e:fe:c1:fe:d0:8f:0f:4f:9d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:ab:14:be:04:e8:b2:0b:a5:13:5c:88:33: 9c:a1:20:27:10:7b:25:5d:0e:18:f2:ec:e7:ac:d9: ba:99:08:48:73:ef:5b:e5:23:6b:45:39:5e:5d:dd: c5:d1:a4:9e:0e:01:b4:4b:36:97:29:0d:e5:04:fc: 21:a3:2e:59:45:f9:83:e4:47:3d:1e:de:92:3d:7d: 0d:11:94:d1:e8:fc:62:ff:d5:76:e8:a4:0d:98:11: 29:c6:14:fd:43:bc:91:96:29:d4:9a:ed:4c:fb:d8: 4a:6d:5b:f9:0f:18:e5:10:1f:7c:68:5a:ce:e7:a5: 7c:e7:cc:75:8a:f9:eb:c3:82:8a:91:c8:08:06:ba: 79:e2:6f:c1:ec:25:71:b6:e9:46:ff:41:fd:9d:b4: 0d:16:08:ad:51:fd:3d:ff:2b:d0:22:c9:02:8d:a0: 5a:49:46:82:3a:28:96:f7:4e:66:e5:ce:9d:04:a6: fb:48:e3:56:5f:b9:7c:73:03:b7:98:2d:93:ac:c6: 41:50:bc:a2:f3:0f:12:f5:86:b9:7f:86:35:a5:5d: eb:ee:1d:23:ac:b9:6e:ca:8c:dc:1e:aa:6c:6b:a2: e2:17:d0:df:59:8b:47:57:19:95:25:00:1c:ee:49: ce:7d:7b:88:39:cd:ff:97:ac:32:20:61:9d:6a:40: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.247.0.0/16 192.108.54.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28 Signature Algorithm: sha256WithRSAEncryption 37:18:e7:54:50:d0:05:3c:28:9b:95:ed:c7:81:da:de:17:bb: d4:f3:17:fd:3b:d0:8f:53:8b:a7:b9:6f:b6:7d:76:f6:8d:83: c6:07:fa:ef:3e:82:3d:b3:d1:24:72:7f:85:47:76:b2:28:26: 33:36:f2:ad:17:0a:3d:ab:1a:4f:c3:66:fa:cc:0b:b7:b3:84: dd:b0:94:40:7d:3b:0e:3a:a9:5e:0c:33:18:36:8f:80:c4:c1: 0b:01:8b:f7:be:71:d6:c9:77:6b:14:6d:e0:a1:6d:4d:64:ab: b0:98:3f:7a:9e:4e:83:be:dd:7d:e1:25:bb:55:dc:1c:f3:4b: 5a:d1:e0:24:e6:3d:5a:7b:f8:81:7d:ad:38:6e:f7:31:26:4f: 82:b5:ba:8d:de:d1:f1:f9:0f:fd:25:b0:9f:12:0f:e8:37:ec: b6:bc:02:a3:d2:f8:c6:9b:7d:40:44:03:b6:8b:54:23:7b:91: 5e:dd:d3:e3:60:b9:1a:d5:9b:64:9c:c3:56:bc:ee:58:56:58: f3:db:cf:58:7e:70:37:be:97:72:7b:da:23:b5:b9:ad:81:4b: 1c:96:2f:f2:30:6a:bd:6a:77:a9:04:ba:ac:d3:45:d6:72:3a: 76:c4:01:3d:71:c0:84:99:8f:2c:e0:73:4f:a3:f4:bd:6d:21: 71:0b:5f:cd -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt7Np778xhu/sH+0I8PT50qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWVjOGE1YWZhM2VkOGViYjg1NmQ0ZDgyMWY2OTZkMTU3ZjhhNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16OrFL4E6LILpRNciDOcoSAnEHsl XQ4Y8uznrNm6mQhIc+9b5SNrRTleXd3F0aSeDgG0SzaXKQ3lBPwhoy5ZRfmD5Ec9 Ht6SPX0NEZTR6Pxi/9V26KQNmBEpxhT9Q7yRlinUmu1M+9hKbVv5DxjlEB98aFrO 56V858x1ivnrw4KKkcgIBrp54m/B7CVxtulG/0H9nbQNFgitUf09/yvQIskCjaBa SUaCOiiW905m5c6dBKb7SONWX7l8cwO3mC2TrMZBULyi8w8S9Ya5f4Y1pV3r7h0j rLluyozcHqpsa6LiF9DfWYtHVxmVJQAc7knOfXuIOc3/l6wyIGGdakD+fwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFFnsilr6PtjruFbU2CH2ltFX+KdXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzc0ODc0 MS04NzBkLTQ3NzAtODNlNS0xYWYzOTY1NzE3ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNzQ4NzQx LTg3MGQtNDc3MC04M2U1LTFhZjM5NjU3MTdmNy8xL1dleUtXdm8tMk91NFZ0VFlJ ZmFXMFZmNHAxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMAgfcDBADAbDYwGAYIKwYBBQUHAQgBAf8ECTAH oAUwAwIBHDANBgkqhkiG9w0BAQsFAAOCAQEANxjnVFDQBTwom5Xtx4Ha3he71PMX /TvQj1OLp7lvtn129o2Dxgf67z6CPbPRJHJ/hUd2sigmMzbyrRcKPasaT8Nm+swL t7OE3bCUQH07DjqpXgwzGDaPgMTBCwGL975x1sl3axRt4KFtTWSrsJg/ep5Og77d feElu1XcHPNLWtHgJOY9Wnv4gX2tOG73MSZPgrW6jd7R8fkP/SWwnxIP6DfstrwC o9L4xpt9QEQDtotUI3uRXt3T42C5GtWbZJzDVrzuWFZY89vPWH5wN76XcnvaI7W5 rYFLHJYv8jBqvWp3qQS6rNNF1nI6dsQBPXHAhJmPLOBzT6P0vW0hcQtfzQ== -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:47 2026 by rpki-client