This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer File: wId8yeuEPodAqoAyjmU_hlwkYpU.cer (raw, json) Hash identifier: A1/k0pwLtLgd3vG57S+T+VyyT6LQD50q3zxh4l6vKR0= Subject key identifier: C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7931E83B06AB8F704D11C5018456E37B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/ Notify URL: https://rpki.as207960.net/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 10:54:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211026 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 15:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:31:e8:3b:06:ab:8f:70:4d:11:c5:01:84:56:e3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:54:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0877cc9eb843e8740aa80328e653f865c246295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:1e:f4:5d:85:61:a0:43:41:50:a6:ee:30: 42:47:33:77:90:b9:7c:51:35:f5:ab:99:dd:e3:e4: 7e:ae:54:ce:2b:c6:68:3b:44:ba:4e:6a:d9:da:ac: e9:e3:93:3d:bb:17:7c:64:21:71:41:36:5f:ff:6c: 3c:e0:ea:c9:5d:83:64:e8:45:00:aa:a6:5a:4b:fb: eb:bd:34:a3:8f:f3:3f:36:a4:0f:48:8b:b9:92:dc: 0a:fd:b7:cb:e6:af:3d:fb:16:06:4f:05:d8:2c:7f: 3b:ae:e5:d7:de:ff:11:4f:cf:d3:87:ee:57:2e:39: ca:f6:db:46:00:52:ec:01:6d:27:d1:c0:e7:47:a8: 97:ec:40:a2:d0:ff:f1:c3:c1:f3:3f:c6:e2:09:43: 70:15:19:e8:30:cd:88:04:6b:13:e0:4e:05:73:38: 56:5c:6d:9b:6b:1a:35:81:85:db:69:76:42:2e:15: 05:c8:cc:86:de:1d:9d:78:f9:7d:41:1e:29:55:59: c2:9f:b4:64:1a:50:f8:4d:56:68:65:3d:ff:94:b6: 1c:84:60:24:ff:ba:eb:2c:8a:13:30:ff:4a:93:1d: 3c:a8:c8:84:f6:7d:22:eb:60:ed:e5:db:0a:1c:0b: 04:e9:a5:bc:57:8e:b7:fd:0d:bc:e0:cc:24:06:4c: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/ RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211026 Signature Algorithm: sha256WithRSAEncryption 9c:5c:ae:f6:e8:12:0a:43:a1:70:5e:bb:1e:c6:24:4c:38:5a: 39:86:78:3c:62:d0:9b:cb:e4:19:d2:4d:fa:1a:0d:01:a9:f1: 38:6c:47:94:86:a5:26:d8:b6:e6:b4:91:15:c9:24:bc:de:b0: 7d:03:67:cb:44:d5:b7:72:9b:a3:a4:c8:84:3e:be:54:d1:87: 3d:99:a0:36:2c:28:2c:ea:5e:49:38:4d:b3:b4:86:57:79:2a: ed:d1:35:bf:b7:0f:69:9f:ee:6a:f6:8d:1e:e2:6c:03:9a:48: b3:cf:39:fc:7a:cd:99:6a:cf:9e:da:5f:69:e3:e7:5e:fb:4c: 69:4c:51:2f:b5:e2:b6:56:9a:87:83:18:24:50:c0:fb:d7:16: 4c:76:96:74:a5:2a:c4:99:ea:8c:84:f3:ce:a4:ee:db:9a:07: 1e:ee:1e:78:12:0e:0d:e0:59:fa:26:c9:47:28:ef:fe:7e:b6: 77:3e:a6:b0:0d:f6:6a:d5:4d:64:f2:b2:3d:c2:2a:8d:a8:54: 08:8b:08:e3:79:bc:f4:14:c3:a9:a2:08:5a:8d:f5:cc:9c:f6: a4:d6:40:be:96:40:5e:6a:dd:17:a0:26:55:53:71:fc:f8:92: af:25:04:bc:d8:11:ca:af:be:49:1c:bc:8a:29:1d:2f:e1:07: f8:b3:0d:ae -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt5Meg7BquPcE0RxQGEVuN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTA1NDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDg3N2NjOWViODQzZTg3NDBhYTgwMzI4ZTY1M2Y4NjVjMjQ2Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ce9F2FYaBDQVCm7jBCRzN3kLl8 UTX1q5nd4+R+rlTOK8ZoO0S6TmrZ2qzp45M9uxd8ZCFxQTZf/2w84OrJXYNk6EUA qqZaS/vrvTSjj/M/NqQPSIu5ktwK/bfL5q89+xYGTwXYLH87ruXX3v8RT8/Th+5X LjnK9ttGAFLsAW0n0cDnR6iX7ECi0P/xw8HzP8biCUNwFRnoMM2IBGsT4E4FczhW XG2baxo1gYXbaXZCLhUFyMyG3h2dePl9QR4pVVnCn7RkGlD4TVZoZT3/lLYchGAk /7rrLIoTMP9Kkx08qMiE9n0i62Dt5dsKHAsE6aW8V463/Q284MwkBkw4ZQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFMCHfMnrhD6HQKqAMo5lP4ZcJGKVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE2BggrBgEFBQcBCwSCASgwggEkMFsGCCsGAQUFBzAFhk9y c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2NlNjg4 MjljYzM1YTQzY2FiNzA0ZjIxNWNlNmM1MGUzLzAvMIGHBggrBgEFBQcwCoZ7cnN5 bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9jZTY4ODI5 Y2MzNWE0M2NhYjcwNGYyMTVjZTZjNTBlMy8wL0MwODc3Q0M5RUI4NDNFODc0MEFB ODAzMjhFNjUzRjg2NUMyNDYyOTUubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jw a2kuYXMyMDc5NjAubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDOFIwDQYJKoZIhvcN AQELBQADggEBAJxcrvboEgpDoXBeux7GJEw4WjmGeDxi0JvL5BnSTfoaDQGp8Ths R5SGpSbYtua0kRXJJLzesH0DZ8tE1bdym6OkyIQ+vlTRhz2ZoDYsKCzqXkk4TbO0 hld5Ku3RNb+3D2mf7mr2jR7ibAOaSLPPOfx6zZlqz57aX2nj5177TGlMUS+14rZW moeDGCRQwPvXFkx2lnSlKsSZ6oyE886k7tuaBx7uHngSDg3gWfomyUco7/5+tnc+ prAN9mrVTWTysj3CKo2oVAiLCON5vPQUw6miCFqN9cyc9qTWQL6WQF5q3RegJlVT cfz4kq8lBLzYEcqvvkkcvIopHS/hB/izDa4= -----END CERTIFICATE-----Generated at Mon Jan 12 17:49:38 2026 by rpki-client