This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer (raw, json) Hash identifier: efPRRF/3jIc/YDsBWix1TbgDfc7ZFLsfhK7jpjjGkAo= Subject key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8358B5A2F47DF29CE9440DCCB9D6AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198454 IP: 5.154.187.0/24 IP: 31.211.184.0/21 IP: 94.24.38.0/23 IP: 128.0.52.0/24 IP: 185.33.132.0/22 IP: 188.208.100.0/24 IP: 2a00:fdc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:58:b5:a2:f4:7d:f2:9c:e9:44:0d:cc:b9:d6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:00:0b:c6:9f:83:c3:be:50:b8:52:75:e1: 36:f2:bb:58:b5:da:2d:a5:71:8b:b9:69:0d:5e:e6: 16:4b:a0:c9:82:60:03:08:eb:52:c4:ec:eb:a1:97: ca:0e:64:a2:88:99:36:fa:b6:ac:95:c3:e0:c7:d4: c5:02:95:63:18:be:dc:50:85:90:57:06:31:f8:26: 11:c3:20:00:46:68:45:9b:91:70:a0:82:c4:38:d9: ba:af:28:ce:ea:a0:37:2e:82:e2:be:e3:54:1a:49: 89:26:e9:59:b6:fd:c7:28:fb:d0:cd:81:08:87:f2: 7a:54:e3:4f:da:9a:21:6f:4a:35:ad:1a:47:61:57: ef:b5:f8:f3:4c:1d:e2:ca:26:fd:b3:00:2c:95:40: 13:cc:9e:ce:b4:c3:68:b1:f8:24:25:f1:83:29:ec: 8d:3b:38:04:6d:b6:3e:b2:e1:d5:e9:9a:ae:16:14: 55:5a:ea:1a:b7:5b:4e:ac:71:b4:e8:d8:e6:59:7b: 2a:a4:41:f3:62:12:2d:b4:0d:76:70:35:d4:51:8c: 0a:d7:3c:48:2b:d5:fd:98:d9:1a:06:9e:c0:e2:e5: 73:ee:35:08:d9:b1:15:0a:1d:27:af:4e:42:b7:29: b6:f4:b7:c7:d0:7b:74:84:fd:17:3a:ea:4b:dc:c8: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.187.0/24 31.211.184.0/21 94.24.38.0/23 128.0.52.0/24 185.33.132.0/22 188.208.100.0/24 IPv6: 2a00:fdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198454 Signature Algorithm: sha256WithRSAEncryption 4c:5e:38:2d:3d:a1:5e:c0:1f:b5:50:5d:51:30:df:ce:74:eb: 9f:51:e1:46:58:ae:a8:e2:37:99:eb:f4:7d:71:c5:05:a0:3f: 6b:56:3e:49:f5:fc:1c:6f:e5:e6:77:50:f0:25:15:ad:ba:cf: e5:ba:41:f1:4b:33:b2:0e:dc:f1:c4:b8:ef:f5:3d:73:13:1c: 49:56:11:a9:ef:8d:c5:ba:be:fa:65:80:88:31:0b:55:f7:68: a2:08:f2:08:19:6a:c0:8e:f4:b6:a6:0d:4a:3d:6d:1c:5c:0b: c1:a9:2a:63:54:4f:22:e3:08:93:e5:61:9e:56:a6:43:82:b1: 9e:1c:8b:48:4a:7d:8d:9d:a2:fc:2a:b6:e4:f1:6d:d5:80:16: 80:81:4b:d1:48:59:0b:67:8a:83:4f:34:14:f9:f0:8f:1c:ab: ea:44:2c:32:86:75:e0:95:f4:24:54:7d:04:22:84:3f:f2:9c: 25:ca:53:c0:37:e0:41:93:e0:ab:e4:35:86:e9:6a:d4:23:56: e9:d4:a8:59:f4:9f:72:27:fe:a6:79:a3:19:f2:70:e0:73:19: 9d:7e:b5:63:ba:4d:15:29:40:5a:30:1c:c0:c2:2f:34:24:7d: d1:d6:ff:f3:0b:bf:8a:fa:99:67:72:f8:a0:4c:ca:83:31:dc: 77:64:58:96 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt/g1i1ovR98pzpRA3MudarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDE0MmU1ZDVjZmFhNDUyMTY2YmM3YjU1YTY1NTU4ZjUyNGQ2NzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+IAC8afg8O+ULhSdeE28rtYtdot pXGLuWkNXuYWS6DJgmADCOtSxOzroZfKDmSiiJk2+raslcPgx9TFApVjGL7cUIWQ VwYx+CYRwyAARmhFm5FwoILEONm6ryjO6qA3LoLivuNUGkmJJulZtv3HKPvQzYEI h/J6VONP2pohb0o1rRpHYVfvtfjzTB3iyib9swAslUATzJ7OtMNosfgkJfGDKeyN OzgEbbY+suHV6ZquFhRVWuoat1tOrHG06NjmWXsqpEHzYhIttA12cDXUUYwK1zxI K9X9mNkaBp7A4uVz7jUI2bEVCh0nr05Ctym29LfH0Ht0hP0XOupL3MhR5QIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFMAULl1c+qRSFmvHtVplVY9STWdRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2I3ZjFk YS00NjdhLTQzNjItOGIyZS0xOTcwZGU4NGExZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvYjdmMWRh LTQ2N2EtNDM2Mi04YjJlLTE5NzBkZTg0YTFmMC8xL3dCUXVYVno2cEZJV2E4ZTFX bVZWajFKTloxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQABZq7AwQDH9O4AwQBXhgmAwQAgAA0AwQCuSGE AwQAvNBkMA0EAgACMAcDBQAqAP3AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMH NjANBgkqhkiG9w0BAQsFAAOCAQEATF44LT2hXsAftVBdUTDfznTrn1HhRliuqOI3 mev0fXHFBaA/a1Y+SfX8HG/l5ndQ8CUVrbrP5bpB8Uszsg7c8cS47/U9cxMcSVYR qe+Nxbq++mWAiDELVfdoogjyCBlqwI70tqYNSj1tHFwLwakqY1RPIuMIk+Vhnlam Q4KxnhyLSEp9jZ2i/Cq25PFt1YAWgIFL0UhZC2eKg080FPnwjxyr6kQsMoZ14JX0 JFR9BCKEP/KcJcpTwDfgQZPgq+Q1hulq1CNW6dSoWfSfcif+pnmjGfJw4HMZnX61 Y7pNFSlAWjAcwMIvNCR90db/8wu/ivqZZ3L4oEzKgzHcd2RYlg== -----END CERTIFICATE-----Generated at Fri Jan 9 07:49:12 2026 by rpki-client