This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer File: Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer (raw, json) Hash identifier: 3GDLGhEA+z5z94sPLwkocgqc2lSkrtJ98nZrg8CyeIE= Subject key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78346D2F4D6E880CEB7A6E695F54570B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200915 IP: 185.91.152.0/22 IP: 2a05:eb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:6d:2f:4d:6e:88:0c:eb:7a:6e:69:5f:54:57:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a3b1dddab33e45506ad977040924720417d5688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e7:35:13:db:14:39:2c:59:8f:59:01:bf:16: 85:99:2e:ea:14:e3:7c:10:96:21:b4:bd:6e:e9:a4: ae:44:52:a0:d7:71:37:ed:84:5a:16:69:11:29:f0: 4f:12:bf:01:a8:c8:24:9a:78:d9:30:7d:91:8f:21: d6:5e:4d:ba:b9:fe:ed:d0:fa:12:a2:55:d5:6f:97: 39:a9:aa:ff:5c:77:37:9b:28:8b:21:6d:4b:d4:64: 31:fa:da:54:0c:bd:88:12:41:fb:8b:d3:74:9e:8f: 61:81:e9:00:89:b6:7b:a7:86:4a:c1:c2:68:15:d8: 3b:66:bf:5b:50:1c:87:a8:3e:db:f0:ca:2d:04:4e: 59:63:60:a8:1d:e0:37:c1:35:b6:8a:3f:46:a1:4c: d9:be:e2:d1:2e:0a:02:da:3c:a0:5a:be:2f:75:2b: 55:1a:e2:ee:d7:60:79:f7:ec:23:4e:2c:8b:5b:ed: fa:36:86:ab:c5:37:98:26:37:9b:4c:d8:22:49:8f: 19:e4:12:f7:14:99:34:d5:72:cb:75:98:ef:b0:7e: dc:30:cd:44:3f:4b:0b:a0:7d:0b:8b:a8:82:b2:96: d0:ec:96:68:0d:38:69:7c:3b:97:a1:9e:a3:e0:9c: 61:d4:1d:a6:f9:f2:3c:16:1f:82:1c:f6:8d:df:e8: 22:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.152.0/22 IPv6: 2a05:eb40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200915 Signature Algorithm: sha256WithRSAEncryption 6c:f3:c1:2b:3b:22:00:55:43:cd:87:ab:55:92:44:01:3d:ee: cd:c8:31:c1:af:bd:2c:32:fd:97:67:44:59:33:b4:e7:9c:77: bc:2f:41:82:ce:ec:da:1f:3a:c9:8e:e6:10:20:22:40:5f:65: dc:63:0a:c8:c5:dc:f2:b1:f2:c1:c1:9f:de:ff:a6:3d:ac:17: 48:ad:ee:56:19:22:12:93:85:3b:b9:18:f4:b7:74:9f:19:92: c4:9e:07:31:8d:91:70:fb:4c:83:21:10:bd:87:3c:72:ce:5d: 6b:9e:3d:3f:b9:af:f8:8a:23:5e:ff:83:bc:c5:d4:c6:41:9c: 78:b3:a1:29:4b:74:e8:7a:80:8d:dc:63:7a:1e:ee:58:6c:d3: 3c:40:ae:ba:91:f3:3f:4c:85:92:f2:a5:1c:2f:59:5f:56:c2: f0:3f:8d:c0:53:4e:57:29:b8:24:c5:5d:9a:6c:5f:06:bd:96: 0e:24:14:1f:db:4a:30:4b:d5:76:15:44:ad:0b:74:58:5e:ad: 66:1c:1d:a9:b0:0e:8b:ba:c5:34:48:40:4f:92:ad:c6:f4:bb: 73:e2:7f:b0:f6:34:d1:50:cb:df:16:48:5e:af:5d:3a:67:e9: 76:3f:97:a5:a4:0a:bf:4a:f4:f9:50:c5:dc:34:7e:fe:10:67: 5a:6f:1b:bd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NG0vTW6IDOt6bmlfVFcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTNiMWRkZGFiMzNlNDU1MDZhZDk3NzA0MDkyNDcyMDQxN2Q1Njg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ec1E9sUOSxZj1kBvxaFmS7qFON8 EJYhtL1u6aSuRFKg13E37YRaFmkRKfBPEr8BqMgkmnjZMH2RjyHWXk26uf7t0PoS olXVb5c5qar/XHc3myiLIW1L1GQx+tpUDL2IEkH7i9N0no9hgekAibZ7p4ZKwcJo Fdg7Zr9bUByHqD7b8MotBE5ZY2CoHeA3wTW2ij9GoUzZvuLRLgoC2jygWr4vdStV GuLu12B59+wjTiyLW+36NoarxTeYJjebTNgiSY8Z5BL3FJk01XLLdZjvsH7cMM1E P0sLoH0Li6iCspbQ7JZoDThpfDuXoZ6j4Jxh1B2m+fI8Fh+CHPaN3+giYQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFo7Hd2rM+RVBq2XcECSRyBBfVaIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzE3OWJk OC1mYzY4LTRmNzYtODZmZi02OGYzMTY2MDczNzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvMTc5YmQ4 LWZjNjgtNGY3Ni04NmZmLTY4ZjMxNjYwNzM3Ni8xL1dqc2QzYXN6NUZVR3JaZHdR SkpISUVGOVZvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVuYMA0EAgACMAcDBQMqBetAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMQ0zANBgkqhkiG9w0BAQsFAAOCAQEAbPPBKzsiAFVD zYerVZJEAT3uzcgxwa+9LDL9l2dEWTO055x3vC9Bgs7s2h86yY7mECAiQF9l3GMK yMXc8rHywcGf3v+mPawXSK3uVhkiEpOFO7kY9Ld0nxmSxJ4HMY2RcPtMgyEQvYc8 cs5da549P7mv+IojXv+DvMXUxkGceLOhKUt06HqAjdxjeh7uWGzTPECuupHzP0yF kvKlHC9ZX1bC8D+NwFNOVym4JMVdmmxfBr2WDiQUH9tKMEvVdhVErQt0WF6tZhwd qbAOi7rFNEhAT5KtxvS7c+J/sPY00VDL3xZIXq9dOmfpdj+XpaQKv0r0+VDF3DR+ /hBnWm8bvQ== -----END CERTIFICATE-----Generated at Mon Jan 12 17:18:40 2026 by rpki-client