This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer File: wN3S1PAw-jY4wEvmNu-T0oknFlI.cer (raw, json) Hash identifier: KxRcYA8BG3k6ciu+ZgLaJtxOosrx7hZl340iM08NkNs= Subject key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC884697240498D70D295504DB6568E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214232 IP: 193.93.40.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:84:69:72:40:49:8d:70:d2:95:50:4d:b6:56:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0ddd2d4f030fa3638c04be636ef93d289271652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:6c:65:99:5f:82:33:23:c2:ff:80:82:d6: 0a:de:e4:f3:be:02:11:e0:61:0e:d2:8f:9f:df:ff: e1:81:7e:c8:8c:3a:ea:f4:3a:90:9f:64:db:fd:f8: 1b:60:0d:27:a3:19:f1:dc:84:c4:06:eb:48:7c:ae: 7a:33:0e:e3:1c:ec:c3:52:cf:87:f2:cc:9a:07:ba: 36:af:d0:19:e0:20:b6:07:87:41:be:ec:ce:f7:6b: 9d:b5:36:18:ff:d7:f8:f9:90:91:eb:0d:70:0a:31: 61:34:a7:89:26:7d:e8:43:d6:7d:d0:97:2a:86:75: 17:43:a3:79:04:a1:df:41:1c:00:a4:c7:44:b0:7d: e2:ab:e2:54:e1:20:38:ce:e2:60:05:6f:4a:c6:07: 51:b3:38:2a:2c:bd:7a:82:e0:82:49:8e:91:73:43: 60:28:aa:ba:b8:fc:76:07:fd:c5:9e:b2:39:16:aa: 95:c3:ec:fa:a2:89:19:09:58:d5:7c:61:0b:2c:c7: 8a:77:d0:2a:2c:76:1b:5b:e8:1f:cb:e6:b9:2b:2f: 8d:7a:f8:c8:12:2b:03:56:8c:35:d0:a6:67:8a:89: 12:2e:ac:06:69:9d:16:a1:1c:25:98:d1:55:b8:6c: 6e:1c:c6:b4:51:70:08:13:03:38:36:da:6b:c8:40: 35:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.40.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214232 Signature Algorithm: sha256WithRSAEncryption 05:4b:fa:d4:2f:c3:bc:ef:ad:ba:02:2e:3d:11:47:a7:1d:eb: 1f:b9:28:48:9e:60:bd:c2:7d:47:a6:9d:c2:1b:51:c2:94:7e: 54:04:58:f9:d2:08:73:0a:88:3b:03:1f:aa:75:d7:3b:82:89: 5d:21:d7:06:b7:9a:0e:99:3e:b6:e4:47:6a:d0:71:7d:ee:97: ce:ba:4b:0c:e5:5a:e4:08:af:26:1b:96:18:13:4a:6e:1d:bc: f1:9f:60:c8:4e:33:10:d4:61:6b:90:2c:8f:32:2b:8b:f0:07: 4a:5d:f1:d3:87:bb:e5:80:90:91:22:c9:90:63:1f:91:e2:9f: 7e:62:c7:9a:83:fb:07:40:a1:0e:e1:61:41:59:8c:cd:b1:e7: 62:6d:ae:95:cc:c7:df:3c:eb:35:ca:73:61:20:31:01:eb:d0: 56:73:e1:64:83:2a:0a:40:64:f1:d2:f1:5f:20:f0:3f:c3:75: db:5b:f4:24:12:13:86:0d:7a:0f:2a:f7:cc:07:4c:7d:42:73: 45:ef:88:79:9f:7e:ee:7a:8a:47:81:28:d0:f1:87:1a:d4:4b: 92:28:96:a4:bb:84:75:ea:b1:80:a6:46:43:8d:a7:c8:b6:b6: a6:da:73:86:bb:22:93:d8:34:fb:f4:fc:c9:7d:1a:a8:55:4f: 85:ac:b5:ff -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yIRpckBJjXDSlVBNtlaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGRkZDJkNGYwMzBmYTM2MzhjMDRiZTYzNmVmOTNkMjg5MjcxNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7hsZZlfgjMjwv+AgtYK3uTzvgIR 4GEO0o+f3//hgX7IjDrq9DqQn2Tb/fgbYA0noxnx3ITEButIfK56Mw7jHOzDUs+H 8syaB7o2r9AZ4CC2B4dBvuzO92udtTYY/9f4+ZCR6w1wCjFhNKeJJn3oQ9Z90Jcq hnUXQ6N5BKHfQRwApMdEsH3iq+JU4SA4zuJgBW9KxgdRszgqLL16guCCSY6Rc0Ng KKq6uPx2B/3FnrI5FqqVw+z6ookZCVjVfGELLMeKd9AqLHYbW+gfy+a5Ky+NevjI EisDVow10KZniokSLqwGaZ0WoRwlmNFVuGxuHMa0UXAIEwM4NtpryEA1MQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMDd0tTwMPo2OMBL5jbvk9KJJxZSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzg2ODAy ZS0zZjQzLTRiY2EtOWNjMi00ZmI0MDQ4NWZmN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvODY4MDJl LTNmNDMtNGJjYS05Y2MyLTRmYjQwNDg1ZmY3Yi8xL3dOM1MxUEF3LWpZNHdFdm1O dS1UMG9rbkZsSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwV0oMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNE2DANBgkqhkiG9w0BAQsFAAOCAQEABUv61C/DvO+tugIuPRFHpx3rH7koSJ5g vcJ9R6adwhtRwpR+VARY+dIIcwqIOwMfqnXXO4KJXSHXBreaDpk+tuRHatBxfe6X zrpLDOVa5AivJhuWGBNKbh288Z9gyE4zENRha5AsjzIri/AHSl3x04e75YCQkSLJ kGMfkeKffmLHmoP7B0ChDuFhQVmMzbHnYm2ulczH3zzrNcpzYSAxAevQVnPhZIMq CkBk8dLxXyDwP8N121v0JBIThg16Dyr3zAdMfUJzRe+IeZ9+7nqKR4Eo0PGHGtRL kiiWpLuEdeqxgKZGQ42nyLa2ptpzhrsik9g0+/T8yX0aqFVPhay1/w== -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:36 2026 by rpki-client