This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer (raw, json) Hash identifier: gwTLnDb3vzUupX4rcKIBq3WwuNuWdj+PsXeZEMMKSFA= Subject key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F855791E3B3FC4AFDBDBE1A6480CEBF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51021 IP: 195.182.42.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:57:91:e3:b3:fc:4a:fd:bd:be:1a:64:80:ce:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aae19678aa37525512229a94e7890147183273c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:78:ba:c2:0a:6d:a9:37:ee:8f:d6:ae:d9:c9: a4:2b:ca:db:2e:57:0c:1f:96:ae:7e:99:ea:17:97: 78:fa:2d:67:e5:5c:76:35:77:82:81:f7:d3:05:92: f1:39:d5:40:1a:02:2e:54:4b:22:a4:f6:72:17:85: b7:bf:9b:69:d1:45:19:3d:33:aa:6f:fa:f6:91:2d: 1e:aa:02:38:cc:51:2e:5d:a3:3b:bf:7e:79:8a:a5: 87:16:fa:70:ca:d1:f1:bd:35:50:58:a1:b4:ed:e3: cf:42:d9:11:3e:e9:69:ef:41:03:37:4b:1e:c3:b9: 28:f2:42:e4:52:0a:7b:e1:02:ea:fa:11:81:23:52: 14:1d:6e:db:27:c6:6c:7f:69:52:70:f7:bf:2f:00: b7:87:83:d1:8d:3c:10:93:56:57:d5:c3:c5:c7:10: ec:76:ac:27:78:52:9d:da:9b:e7:45:00:a5:34:af: bb:68:20:7b:75:04:96:dc:dc:77:94:ad:07:64:44: 29:a1:df:0e:fb:5e:64:96:fa:1b:d1:29:97:85:fe: 7b:a4:87:37:ac:00:f5:91:39:a8:b6:ee:d4:db:9d: cb:43:20:70:55:0b:3a:f1:b1:f7:07:1f:52:8e:10: d0:ac:54:79:dd:b8:d9:56:ea:22:72:f1:47:d7:51: 52:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.42.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51021 Signature Algorithm: sha256WithRSAEncryption 56:0d:34:1a:2c:f8:04:4b:42:73:75:ef:27:e5:b0:b3:92:93: 41:4e:62:08:a3:33:6f:32:26:c6:52:f9:93:85:41:62:0b:73: 32:1f:91:28:be:6b:04:50:40:71:b2:33:44:9c:50:ef:78:72: 0f:f0:bf:e5:97:74:c7:5f:6e:38:00:ed:ce:ea:50:6e:15:fa: 2b:42:2e:be:b0:c2:69:ee:15:12:5a:fe:66:22:2d:6d:18:c4: 7e:22:e4:94:89:c2:66:43:48:36:bf:c0:ea:69:49:fb:c1:ae: de:96:34:bc:78:3b:1c:58:7b:ce:ae:1f:6b:27:26:f7:de:87: ad:02:47:7c:6b:d4:8c:08:5f:7c:0b:79:e8:0c:14:98:bc:aa: 45:ca:48:c1:9c:e1:3c:99:3f:07:e6:94:71:6e:eb:4f:06:a2: da:bb:75:db:cf:1c:40:0a:42:28:2c:f1:c9:38:7d:d4:14:e3: 84:42:a6:f5:78:c3:b9:23:21:8e:8c:38:61:83:0e:51:6b:12: a0:d4:8a:75:28:23:53:3c:4e:01:92:b3:74:94:ef:f1:3a:4a: 30:32:49:ea:11:56:86:08:7d:9d:c0:c4:11:3a:f2:47:a6:9d: 50:2b:d6:d6:c6:87:57:a0:6d:a1:16:51:83:16:ad:0a:5c:cf: ce:39:df:fc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hVeR47P8Sv29vhpkgM6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWFlMTk2NzhhYTM3NTI1NTEyMjI5YTk0ZTc4OTAxNDcxODMyNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjni6wgptqTfuj9au2cmkK8rbLlcM H5aufpnqF5d4+i1n5Vx2NXeCgffTBZLxOdVAGgIuVEsipPZyF4W3v5tp0UUZPTOq b/r2kS0eqgI4zFEuXaM7v355iqWHFvpwytHxvTVQWKG07ePPQtkRPulp70EDN0se w7ko8kLkUgp74QLq+hGBI1IUHW7bJ8Zsf2lScPe/LwC3h4PRjTwQk1ZX1cPFxxDs dqwneFKd2pvnRQClNK+7aCB7dQSW3Nx3lK0HZEQpod8O+15klvob0SmXhf57pIc3 rAD1kTmotu7U253LQyBwVQs68bH3Bx9SjhDQrFR53bjZVuoicvFH11FSsQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFquGWeKo3UlUSIpqU54kBRxgyc8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzhhOTBk OS05NDhhLTQ2YzItOTc3YS02NDNmMDJkYWViOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvOGE5MGQ5 LTk0OGEtNDZjMi05NzdhLTY0M2YwMmRhZWI5ZS8xL1dxNFpaNHFqZFNWUklpbXBU bmlRRkhHREp6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw7YqMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDHTTANBgkqhkiG9w0BAQsFAAOCAQEAVg00Giz4BEtCc3XvJ+Wws5KTQU5iCKMz bzImxlL5k4VBYgtzMh+RKL5rBFBAcbIzRJxQ73hyD/C/5Zd0x19uOADtzupQbhX6 K0IuvrDCae4VElr+ZiItbRjEfiLklInCZkNINr/A6mlJ+8Gu3pY0vHg7HFh7zq4f aycm996HrQJHfGvUjAhffAt56AwUmLyqRcpIwZzhPJk/B+aUcW7rTwai2rt1288c QApCKCzxyTh91BTjhEKm9XjDuSMhjow4YYMOUWsSoNSKdSgjUzxOAZKzdJTv8TpK MDJJ6hFWhgh9ncDEETryR6adUCvW1saHV6BtoRZRgxatClzPzjnf/A== -----END CERTIFICATE-----Generated at Mon Jan 12 14:26:16 2026 by rpki-client