This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer File: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer (raw, json) Hash identifier: IgOKBMXanHme7pCzIwEi6LvUYY/745JvTs5LwDfDLCE= Subject key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596E8F580F0AD9E6F8D86C934983F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206602 IP: 185.181.236.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 21:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6e:8f:58:0f:0a:d9:e6:f8:d8:6c:93:49:83:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:6f:1e:f9:e2:31:6b:40:0f:f4:b0:f0:40: 46:14:49:b7:9e:cd:a7:7b:75:11:d3:cc:4a:5d:67: 77:e6:4a:a1:1b:d5:a6:9f:e0:99:5c:67:4b:bc:a0: 8f:5e:13:a3:58:38:17:6e:f5:de:72:2a:c2:df:97: 3a:4f:93:c3:82:90:0b:32:5a:8c:e9:64:fe:a7:cb: 28:7f:84:d0:2d:23:01:54:b1:1b:19:8c:76:51:1b: df:87:d9:e1:68:12:2e:a2:d3:30:20:3d:8a:c5:3d: ad:08:a7:e7:a1:ad:41:d5:7b:e3:59:82:98:3b:ae: c6:44:dd:5a:aa:0d:14:22:c3:00:90:37:b2:af:ce: 58:b1:4d:88:8b:9b:0a:da:16:50:d2:01:0a:c0:c1: c0:23:a5:0e:11:6c:60:2f:ff:f6:02:b4:c6:82:03: 81:2f:46:47:e6:09:4c:6a:da:3d:05:0f:d0:ca:22: 4c:46:40:b9:3a:7d:34:5e:fe:ac:a5:17:c4:43:89: 58:98:96:c5:9f:12:c3:24:7e:c9:9c:bf:e4:4f:7f: ad:c8:7b:03:43:aa:60:3b:29:d7:86:86:84:28:ed: b3:87:22:3a:c0:82:38:73:dc:bb:84:5a:9d:1c:52: f4:47:db:fc:5c:b8:08:1b:62:84:a3:ee:f7:fc:c1: 4a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206602 Signature Algorithm: sha256WithRSAEncryption 26:44:97:35:77:b9:a2:6e:4a:71:3c:c5:09:4d:fd:cd:d5:f6: a4:dc:76:c7:b8:6c:34:61:7b:11:aa:a6:31:26:50:28:0b:53: 72:ff:df:39:94:cd:13:c4:8c:28:dd:6d:1a:f7:5f:c7:6f:be: 24:36:c2:65:d0:93:87:2c:f0:06:89:4a:7a:14:a3:2a:81:dd: eb:7c:bb:b9:ba:30:3d:25:7b:50:e8:dd:74:bb:13:28:00:0b: a5:ad:10:3a:b1:c3:5a:f5:a1:c6:87:1d:93:2b:8c:19:86:a4: c7:bf:40:4d:eb:d2:0d:d0:3f:e3:5c:96:8a:f2:eb:98:9e:0f: b1:f2:4c:11:b6:b5:b2:3c:d8:f0:a5:17:1b:79:3a:b2:41:d0: 44:8f:d2:fc:dd:7e:28:ae:08:bd:ec:21:de:a3:92:d7:42:da: a4:7c:0c:8d:50:5c:80:8a:d3:40:1f:a0:c8:75:d0:21:94:bc: 2d:36:8b:29:b0:7f:17:81:e1:17:09:bd:b9:5e:c1:11:59:73: 44:73:40:13:6e:c6:3f:34:76:7e:8d:00:49:21:e2:49:87:82: e9:20:d1:ca:56:dc:2c:c1:cc:ce:8e:81:4e:73:a2:f1:3c:f2: 87:fe:c9:08:32:cc:ea:70:c2:bc:88:54:31:a5:ba:85:c5:ef: 37:8e:35:ed -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WW6PWA8K2eb42GyTSYP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzg1MjAxYTMzYjUyN2M2NDRhYWQ1YWVjZDM3ODJjNmE4YzJmNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjFvHvniMWtAD/Sw8EBGFEm3ns2n e3UR08xKXWd35kqhG9Wmn+CZXGdLvKCPXhOjWDgXbvXecirC35c6T5PDgpALMlqM 6WT+p8sof4TQLSMBVLEbGYx2URvfh9nhaBIuotMwID2KxT2tCKfnoa1B1XvjWYKY O67GRN1aqg0UIsMAkDeyr85YsU2Ii5sK2hZQ0gEKwMHAI6UOEWxgL//2ArTGggOB L0ZH5glMato9BQ/QyiJMRkC5On00Xv6spRfEQ4lYmJbFnxLDJH7JnL/kT3+tyHsD Q6pgOynXhoaEKO2zhyI6wII4c9y7hFqdHFL0R9v8XLgIG2KEo+73/MFKPQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMOFIBoztSfGRKrVrs03gsaowvUfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzZkNjYz YS00NTM4LTRjYmYtYWQxZi04NTc1ODBmYzYxNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvNmQ2NjNh LTQ1MzgtNGNiZi1hZDFmLTg1NzU4MGZjNjE2Ny8xL3c0VWdHak8xSjhaRXF0V3V6 VGVDeHFqQzlSOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCubXsMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMnCjANBgkqhkiG9w0BAQsFAAOCAQEAJkSXNXe5om5KcTzFCU39zdX2pNx2x7hs NGF7EaqmMSZQKAtTcv/fOZTNE8SMKN1tGvdfx2++JDbCZdCThyzwBolKehSjKoHd 63y7ubowPSV7UOjddLsTKAALpa0QOrHDWvWhxocdkyuMGYakx79ATevSDdA/41yW ivLrmJ4PsfJMEba1sjzY8KUXG3k6skHQRI/S/N1+KK4Ivewh3qOS10LapHwMjVBc gIrTQB+gyHXQIZS8LTaLKbB/F4HhFwm9uV7BEVlzRHNAE27GPzR2fo0ASSHiSYeC 6SDRylbcLMHMzo6BTnOi8Tzyh/7JCDLM6nDCvIhUMaW6hcXvN4417Q== -----END CERTIFICATE-----Generated at Tue Jan 13 03:18:15 2026 by rpki-client