This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer File: wKqzltZQgmAnwr2KBiByEJIQnik.cer (raw, json) Hash identifier: fKtJIexcdeEgntPg+mPhdQJXIqHx/TmN9hIHr++SIP8= Subject key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A26A096A273042D0BFE5B2E85F0A14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59782 IP: 81.163.200.0/21 IP: 2001:67c:d64::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6a:09:6a:27:30:42:d0:bf:e5:b2:e8:5f:0a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0aab396d650826027c2bd8a0620721092109e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:64:72:2b:22:23:28:41:64:76:57:dd:eb:2e: ef:5b:d5:e1:01:5c:33:22:ff:2c:94:ef:57:99:5e: ee:df:87:d0:c1:f1:ba:bc:55:a5:79:0c:24:71:17: 55:8b:8f:57:5e:4a:81:63:4c:9e:32:ce:a2:06:f4: d4:78:97:8a:8d:bb:25:1b:2b:70:e7:b0:76:ef:e5: f5:da:83:53:03:69:03:2f:ee:0b:9b:eb:27:37:e5: 62:a7:99:0e:b3:cc:57:1b:69:0e:07:92:cc:54:89: a9:21:c9:5c:0e:2f:9f:7f:c8:6b:37:57:f1:60:6b: 5d:74:ab:60:d0:f7:ed:2e:92:6a:b4:03:7b:52:0c: 9f:91:a0:44:18:0a:ac:a3:fe:ca:73:1c:ed:d6:b4: 12:3c:03:ca:22:86:ce:2e:78:66:fd:4b:0c:6d:96: 58:8b:eb:12:c9:17:f2:5d:4b:20:f3:b7:15:c4:5a: 1b:03:90:13:f5:ae:e4:96:1c:8d:6d:4a:85:af:aa: 7f:d2:1b:bb:a3:a8:c4:0a:2c:74:a1:54:aa:6c:38: cd:15:7b:9d:d7:a4:63:11:79:cb:32:25:6a:72:5f: e9:d0:c8:bb:30:2b:a9:cf:a0:9b:d2:69:ad:28:c9: 70:67:91:52:50:52:2f:d2:7f:92:4d:cc:d7:e9:3a: 4c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.163.200.0/21 IPv6: 2001:67c:d64::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59782 Signature Algorithm: sha256WithRSAEncryption 9e:15:f8:da:9d:5e:e4:49:66:fe:97:3a:e6:fe:dc:be:23:3a: 7b:f8:cf:44:b3:1b:68:86:8e:72:80:3c:6f:75:1f:61:33:72: 3e:07:fa:b7:24:cf:54:23:08:67:bf:25:0f:52:21:ce:2c:b6: d9:5a:26:65:a9:2b:f0:53:a5:fd:b3:cc:26:56:9f:3c:b2:49: fb:b4:e5:2b:6c:72:dd:6e:65:ab:a0:c8:e7:92:70:11:62:eb: f7:6d:d4:2f:4e:3e:bd:d9:44:fa:ae:44:7f:c1:be:e1:c2:13: 57:96:fc:65:7e:f9:a6:43:42:ff:df:03:3c:ba:9a:67:89:af: 0e:96:df:4c:fa:15:76:98:9b:53:58:f4:3b:31:66:3c:d2:66: 12:5c:24:40:cd:a6:7e:49:ff:51:8a:97:fb:75:6f:37:f0:dd: 69:2e:f1:3a:fc:d7:35:f1:c4:e7:34:39:cb:e1:83:b5:06:e7: 16:cc:42:c4:c6:cb:4e:7d:28:fb:5d:ef:27:c4:81:be:6d:ce: 74:a3:e8:a5:8f:eb:90:6b:a4:f7:50:b2:b0:bc:e8:9b:2b:c6: f7:13:1e:42:74:50:d3:88:a7:60:78:ed:9f:05:e6:c2:a0:51: 0f:f0:15:fe:51:ab:6a:2a:c7:b3:0f:77:84:ff:21:5d:7d:f7: d9:4c:59:aa -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt4omoJaicwQtC/5bLoXwoUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGFhYjM5NmQ2NTA4MjYwMjdjMmJkOGEwNjIwNzIxMDkyMTA5ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGRyKyIjKEFkdlfd6y7vW9XhAVwz Iv8slO9XmV7u34fQwfG6vFWleQwkcRdVi49XXkqBY0yeMs6iBvTUeJeKjbslGytw 57B27+X12oNTA2kDL+4Lm+snN+Vip5kOs8xXG2kOB5LMVImpIclcDi+ff8hrN1fx YGtddKtg0PftLpJqtAN7UgyfkaBEGAqso/7Kcxzt1rQSPAPKIobOLnhm/UsMbZZY i+sSyRfyXUsg87cVxFobA5AT9a7klhyNbUqFr6p/0hu7o6jECix0oVSqbDjNFXud 16RjEXnLMiVqcl/p0Mi7MCupz6Cb0mmtKMlwZ5FSUFIv0n+STczX6TpMGwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFMCqs5bWUIJgJ8K9igYgchCSEJ4pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzFkNGUw Ni00ZmFhLTQ5YTktODQ5Yi1lOTUwNjk5MTU3ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvMWQ0ZTA2 LTRmYWEtNDlhOS04NDliLWU5NTA2OTkxNTdlMS8xL3dLcXpsdFpRZ21BbndyMktC aUJ5RUpJUW5pay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQDUaPIMA8EAgACMAkDBwAgAQZ8DWQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAOmGMA0GCSqGSIb3DQEBCwUAA4IBAQCeFfjanV7k SWb+lzrm/ty+Izp7+M9Esxtoho5ygDxvdR9hM3I+B/q3JM9UIwhnvyUPUiHOLLbZ WiZlqSvwU6X9s8wmVp88skn7tOUrbHLdbmWroMjnknARYuv3bdQvTj692UT6rkR/ wb7hwhNXlvxlfvmmQ0L/3wM8uppnia8Olt9M+hV2mJtTWPQ7MWY80mYSXCRAzaZ+ Sf9Ripf7dW838N1pLvE6/Nc18cTnNDnL4YO1BucWzELExstOfSj7Xe8nxIG+bc50 o+ilj+uQa6T3ULKwvOibK8b3Ex5CdFDTiKdgeO2fBebCoFEP8BX+UatqKsezD3eE /yFdfffZTFmq -----END CERTIFICATE-----Generated at Thu Jan 1 12:29:11 2026 by rpki-client