This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer (raw, json) Hash identifier: v2PNZtH0jAkaKu71SCk0xUwDODbRSLfBZJ2Uh9zHMp8= Subject key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77597090564F0505FAE8DBDC1899876B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35328 IP: 46.18.144.0/21 IP: 77.234.224.0/19 IP: 80.87.208.0/20 IP: 145.255.144.0/20 IP: 185.42.4.0/22 IP: 217.31.32.0/20 IP: 2a00:e380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:70:90:56:4f:05:05:fa:e8:db:dc:18:99:87:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:10:7c:91:86:4f:66:f1:09:9a:2d:bf:47:06: 15:bf:d1:6e:f9:f5:f1:bc:b5:74:85:56:7f:97:f8: f4:05:68:cc:9b:78:62:97:7b:0f:35:55:04:3b:2e: e3:23:36:c7:90:a7:ba:a7:5e:d8:65:d5:c6:26:bc: db:86:06:4d:8b:f2:3f:47:0f:a2:a9:57:1e:32:e8: 40:64:f0:bc:b3:01:33:10:5b:73:d6:55:a8:09:70: db:ce:a5:62:3d:4c:9b:67:3e:0e:f6:2f:58:b3:e0: 6c:91:32:87:e2:ca:e1:58:09:53:c3:30:e4:f1:68: 2c:1b:4c:ca:af:bf:5a:c9:48:f1:70:38:e5:58:8b: ad:f8:5c:9a:be:28:6e:ec:ad:27:4d:08:6a:4e:d6: 62:be:1f:1f:b9:f0:23:c9:2f:88:36:86:c8:de:7d: 8f:1d:b0:5f:4f:40:4d:af:a3:88:22:31:15:30:e7: 5c:21:76:fc:d3:13:f0:ee:d9:cd:6a:6b:5f:15:47: fc:d7:25:f5:7e:c2:10:b9:79:6c:51:34:1b:cd:5c: 5e:36:c4:75:3e:6b:dd:21:b8:65:ee:56:60:07:82: 4f:24:49:6d:a5:cb:96:eb:8f:e1:32:91:f9:8e:b7: 79:28:74:7b:d1:f9:d2:9e:cc:5c:c8:99:c7:e6:9b: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.144.0/21 77.234.224.0/19 80.87.208.0/20 145.255.144.0/20 185.42.4.0/22 217.31.32.0/20 IPv6: 2a00:e380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35328 Signature Algorithm: sha256WithRSAEncryption 82:77:91:37:3b:c4:83:c5:a1:b0:ce:68:17:1a:5c:9f:40:fd: 55:19:f3:39:31:86:38:21:5c:45:5c:d1:92:92:06:38:4c:a1: 8e:53:6b:c3:ae:b3:71:cd:c0:86:c3:16:03:ce:1b:0b:3f:00: 67:83:64:dc:4d:39:a4:fa:2f:c6:5a:33:48:34:ed:2d:6c:15: e8:30:a6:dd:ed:be:20:bd:7e:65:24:8b:34:4b:eb:ef:22:f5: 57:2e:74:e4:88:2f:e3:1d:1b:37:df:19:b7:e4:03:ee:e9:f7: a4:70:2e:5e:67:ca:15:8f:73:62:e3:ee:15:51:73:f5:02:c6: 7d:de:b8:e3:fe:04:a8:c8:87:ed:16:10:3c:11:cb:1a:fa:cf: f2:65:01:ca:9b:77:1e:e1:2a:53:05:8a:b3:b0:d8:e4:25:8a: 53:9f:4f:61:cf:ff:ff:3d:20:36:e7:4f:53:6a:de:07:72:30: 5d:e3:c9:2b:74:0a:93:a7:aa:ce:4b:9e:58:47:5e:8d:84:55: a8:b6:c3:fc:78:df:b9:b8:bd:0e:93:d4:91:ca:4d:c5:1f:ff: 4b:ca:8e:a9:5f:51:45:96:e6:6d:6f:58:9c:5e:42:ac:08:67: 2b:08:26:57:f2:f7:4a:1c:f0:0f:a3:bf:88:9c:54:db:3a:35: 3b:8d:c5:7d -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt3WXCQVk8FBfro29wYmYdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWFkYmRmZTAxZTlhM2Y5NmQ1MDAyMmMzY2RhZmRjM2UxYThkOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hB8kYZPZvEJmi2/RwYVv9Fu+fXx vLV0hVZ/l/j0BWjMm3hil3sPNVUEOy7jIzbHkKe6p17YZdXGJrzbhgZNi/I/Rw+i qVceMuhAZPC8swEzEFtz1lWoCXDbzqViPUybZz4O9i9Ys+BskTKH4srhWAlTwzDk 8WgsG0zKr79ayUjxcDjlWIut+Fyavihu7K0nTQhqTtZivh8fufAjyS+INobI3n2P HbBfT0BNr6OIIjEVMOdcIXb80xPw7tnNamtfFUf81yX1fsIQuXlsUTQbzVxeNsR1 PmvdIbhl7lZgB4JPJEltpcuW64/hMpH5jrd5KHR70fnSnsxcyJnH5pt6fwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFMGtvf4B6aP5bVACLDza/cPhqNmIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2E0YzZm MS03YzkzLTQ1ZWUtOGVhZi00Mzk0MDUyY2Q2NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvYTRjNmYx LTdjOTMtNDVlZS04ZWFmLTQzOTQwNTJjZDY1ZS8xL3dhMjlfZ0hwb19sdFVBSXNQ TnI5dy1HbzJZZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDLhKQAwQFTergAwQEUFfQAwQEkf+QAwQCuSoE AwQE2R8gMA0EAgACMAcDBQMqAOOAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCK ADANBgkqhkiG9w0BAQsFAAOCAQEAgneRNzvEg8WhsM5oFxpcn0D9VRnzOTGGOCFc RVzRkpIGOEyhjlNrw66zcc3AhsMWA84bCz8AZ4Nk3E05pPovxlozSDTtLWwV6DCm 3e2+IL1+ZSSLNEvr7yL1Vy505Igv4x0bN98Zt+QD7un3pHAuXmfKFY9zYuPuFVFz 9QLGfd644/4EqMiH7RYQPBHLGvrP8mUBypt3HuEqUwWKs7DY5CWKU59PYc///z0g NudPU2reB3IwXePJK3QKk6eqzkueWEdejYRVqLbD/Hjfubi9DpPUkcpNxR//S8qO qV9RRZbmbW9YnF5CrAhnKwgmV/L3ShzwD6O/iJxU2zo1O43FfQ== -----END CERTIFICATE-----Generated at Sun Jan 11 14:34:01 2026 by rpki-client