This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer (raw, json) Hash identifier: n0u2uUGZEc6BLWhR4AVEsytW6wJo4Lg5wc8/Gy4rhaw= Subject key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C112F14351C82CE3143F9D081517D93 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47883 IP: 5.104.0.0/20 IP: 37.34.0.0/19 IP: 94.79.64.0/18 IP: 2a02:7d80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:2f:14:35:1c:82:ce:31:43:f9:d0:81:51:7d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1dc2f85026158cbd9ff49da15db225f053074ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:50:f1:3a:c9:fa:46:ae:3e:4a:c7:5b:86: e9:5f:3a:a2:b8:a9:b8:61:75:95:bb:d4:89:a0:32: 1c:30:01:c2:04:50:7a:05:f1:50:ac:14:67:6f:76: 10:11:45:32:2a:c1:94:3e:13:ce:20:d0:02:81:31: 8b:57:e4:5a:6f:81:a3:c3:fd:16:3d:fc:29:41:dd: 04:39:41:86:6a:8f:ec:6c:c7:d3:9b:03:50:1c:33: cc:48:57:ad:b6:58:d3:f5:c9:0b:fd:81:d8:93:d7: f2:f3:3e:87:34:c2:93:8e:44:d4:81:11:0b:67:2b: 3b:75:05:d1:a2:b3:7d:42:c8:ef:9b:34:ba:0a:f1: af:a0:c0:cc:6b:45:84:e8:b9:5b:a1:4d:1b:64:a4: 21:dc:1a:2c:cf:38:ba:56:78:e4:79:1d:24:3d:9e: 4a:0d:fc:0a:a2:89:28:09:12:24:3e:15:fd:a7:3b: a7:63:4b:d0:af:91:6d:50:2a:f6:3b:66:df:cd:0e: 1a:ec:e3:4f:3d:0d:e0:ba:fc:5c:95:cb:ce:2b:12: d2:37:12:66:c9:eb:23:ac:5c:12:34:8d:76:99:cb: 6a:7c:9e:f0:49:43:55:b9:02:b1:c6:06:d0:e9:a7: 57:02:3c:2a:6c:b4:95:fd:f2:77:9c:18:69:69:ec: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.0.0/20 37.34.0.0/19 94.79.64.0/18 IPv6: 2a02:7d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47883 Signature Algorithm: sha256WithRSAEncryption 4d:a1:ba:12:d6:ff:38:72:ae:3f:95:ef:34:c9:be:ec:fc:45: a5:64:df:5e:e8:c2:87:e7:a5:32:02:36:86:91:eb:6f:e3:ef: ea:a6:b4:72:64:71:c6:45:ca:0e:95:9f:21:3d:79:33:18:6a: bf:08:af:66:9c:e2:59:69:98:8c:8f:2c:ea:b2:37:38:85:dc: 12:62:61:bc:73:14:a0:65:04:b3:b6:6a:c5:85:82:f7:e9:bc: 7a:56:88:42:2c:92:ca:28:0c:32:05:65:46:61:79:36:0e:a8: fc:81:07:38:4c:62:33:01:a6:b3:97:4b:90:d6:7a:0e:cd:7d: 1e:56:d2:fb:33:8d:5f:97:ce:c4:9e:45:06:f6:d3:71:af:fa: 96:cc:16:46:ef:8e:ef:54:c0:2d:cd:e2:60:88:73:a6:61:6b: 08:94:ac:8e:15:85:c1:34:a7:b1:43:cd:8c:9b:dc:83:be:86: 78:c2:f7:c0:e4:f8:24:c6:37:03:ed:04:1c:34:96:69:5e:39: 44:f3:28:9d:21:f2:6f:ee:63:1d:40:9d:45:b3:b3:71:0b:99: 54:50:7a:0f:65:3a:9d:b7:e7:20:11:72:f7:12:35:8c:cb:cf: 6f:d0:4c:43:74:b9:9a:15:80:a6:45:33:b9:e7:31:00:d9:52: 1a:fc:7a:4e -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt8ES8UNRyCzjFD+dCBUX2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWRjMmY4NTAyNjE1OGNiZDlmZjQ5ZGExNWRiMjI1ZjA1MzA3NGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JlQ8TrJ+kauPkrHW4bpXzqiuKm4 YXWVu9SJoDIcMAHCBFB6BfFQrBRnb3YQEUUyKsGUPhPOINACgTGLV+Rab4Gjw/0W PfwpQd0EOUGGao/sbMfTmwNQHDPMSFettljT9ckL/YHYk9fy8z6HNMKTjkTUgREL Zys7dQXRorN9QsjvmzS6CvGvoMDMa0WE6LlboU0bZKQh3Boszzi6VnjkeR0kPZ5K DfwKookoCRIkPhX9pzunY0vQr5FtUCr2O2bfzQ4a7ONPPQ3guvxclcvOKxLSNxJm yesjrFwSNI12mctqfJ7wSUNVuQKxxgbQ6adXAjwqbLSV/fJ3nBhpaexrLwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMHcL4UCYVjL2f9J2hXbIl8FMHSsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzZmM2U4 OS0wMDE4LTRkYzktYTk1YS0yODRlYzgxNjAyZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNmYzZTg5 LTAwMTgtNGRjOS1hOTVhLTI4NGVjODE2MDJlNy8xL3dkd3ZoUUpoV012Wl8wbmFG ZHNpWHdVd2RLdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEBWgAAwQFJSIAAwQGXk9AMA0EAgACMAcDBQAq An2AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC7CzANBgkqhkiG9w0BAQsFAAOC AQEATaG6Etb/OHKuP5XvNMm+7PxFpWTfXujCh+elMgI2hpHrb+Pv6qa0cmRxxkXK DpWfIT15MxhqvwivZpziWWmYjI8s6rI3OIXcEmJhvHMUoGUEs7ZqxYWC9+m8elaI QiySyigMMgVlRmF5Ng6o/IEHOExiMwGms5dLkNZ6Ds19HlbS+zONX5fOxJ5FBvbT ca/6lswWRu+O71TALc3iYIhzpmFrCJSsjhWFwTSnsUPNjJvcg76GeML3wOT4JMY3 A+0EHDSWaV45RPMonSHyb+5jHUCdRbOzcQuZVFB6D2U6nbfnIBFy9xI1jMvPb9BM Q3S5mhWApkUzuecxANlSGvx6Tg== -----END CERTIFICATE-----Generated at Sun Jan 11 14:37:59 2026 by rpki-client