This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer File: wg5lyt2-zUjS-HeHmTEThCvfzl0.cer (raw, json) Hash identifier: F7T46ykMqixD30uq8z1X2S9WD7tgAGdbz9+kU3j4Gao= Subject key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2FD4458D7ED82D5315AAC1BE19315 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49227 AS: 197726 IP: 91.231.84.0/22 IP: 195.64.154.0/23 IP: 195.88.242.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fd:44:58:d7:ed:82:d5:31:5a:ac:1b:e1:93:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20e65caddbecd48d2f87787993113842bdfce5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:e6:24:31:a9:48:dd:bf:fc:6c:db:56:a7: cd:2c:83:25:24:5c:6c:b8:d0:fa:88:36:20:80:e7: b9:c4:13:23:d4:85:b8:b8:49:ed:84:d1:b4:cc:d7: ba:74:0a:c1:f0:5f:c2:63:8d:6d:e8:41:d1:c6:72: e5:17:46:56:15:3b:fe:13:57:9f:ed:5b:61:da:bc: 6c:1e:88:ff:a2:a6:16:37:34:c8:2e:9c:a0:c9:55: 5c:fc:fe:65:a2:f3:bf:07:b0:d8:02:05:de:c6:54: bb:31:4a:4f:27:12:a3:19:48:39:a0:36:3a:19:ea: 6c:cc:50:40:d3:38:18:44:15:4b:c5:a5:c3:cf:7c: d4:95:08:39:59:e2:bf:ea:9a:31:57:11:98:bf:fe: 4b:c1:1e:66:23:54:35:67:79:f9:06:1a:3f:3a:b2: 9e:6a:c9:43:cb:c7:55:c6:a3:87:f7:87:f2:0a:d8: e1:07:ad:03:ff:7f:d1:1a:ba:cc:6c:40:46:82:b0: da:4e:5e:c7:3a:e4:4e:04:97:6e:3d:d1:39:0d:79: e1:3a:17:3c:dd:4c:c8:68:83:ea:81:d7:20:0a:8c: b8:09:89:9f:de:28:0f:61:0f:82:41:2d:ca:24:ad: 77:fe:c7:3f:f5:8c:7c:21:f4:d2:fb:e9:5c:a3:26: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.84.0/22 195.64.154.0/23 195.88.242.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49227 197726 Signature Algorithm: sha256WithRSAEncryption 0e:8c:d2:e4:46:6e:3e:0d:26:6c:f5:29:1d:5d:cd:5f:a9:99: 44:59:c8:e6:a5:70:ed:e6:72:5d:9f:0e:b5:5f:32:d8:24:fe: ca:b6:62:eb:d0:76:e1:f7:fb:da:8c:14:1a:d0:db:e4:29:40: b3:cb:f1:6b:85:45:03:f9:6d:df:2b:34:fe:6f:05:a5:8a:bf: f7:1a:4d:35:20:8d:2a:d7:ce:0c:d6:22:c3:6b:bb:57:e4:f9: 95:70:1a:d3:28:e7:00:83:96:7f:3d:e1:3a:76:61:50:3a:d8: 03:c0:7f:12:e2:71:a0:41:75:1a:9c:80:21:c5:cc:c9:07:3c: e0:2a:93:a3:f8:6d:f4:f8:32:8d:ac:2f:15:fe:eb:ed:ea:37: 7d:8b:7c:57:f7:9b:1c:69:80:30:85:a4:19:6d:99:61:7f:27: 3b:ce:8e:aa:ff:13:a0:a3:28:bd:06:25:57:4d:e0:29:e8:43: 86:dc:06:6a:1b:3f:50:40:87:32:58:1f:fb:ea:fc:85:d5:d5: a5:fc:63:5b:1f:fc:38:7c:3c:35:ce:57:04:fe:46:ce:55:5c: 7e:71:58:7a:21:cb:4d:53:9f:98:f9:20:a1:87:3f:d7:af:87: 77:7a:c3:08:7d:38:7f:5b:ff:34:dc:ed:bb:a8:5c:5b:14:24: e5:cc:70:2e -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt4ov1EWNftgtUxWqwb4ZMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjBlNjVjYWRkYmVjZDQ4ZDJmODc3ODc5OTMxMTM4NDJiZGZjZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJjmJDGpSN2//GzbVqfNLIMlJFxs uND6iDYggOe5xBMj1IW4uEnthNG0zNe6dArB8F/CY41t6EHRxnLlF0ZWFTv+E1ef 7Vth2rxsHoj/oqYWNzTILpygyVVc/P5lovO/B7DYAgXexlS7MUpPJxKjGUg5oDY6 GepszFBA0zgYRBVLxaXDz3zUlQg5WeK/6poxVxGYv/5LwR5mI1Q1Z3n5Bho/OrKe aslDy8dVxqOH94fyCtjhB60D/3/RGrrMbEBGgrDaTl7HOuROBJduPdE5DXnhOhc8 3UzIaIPqgdcgCoy4CYmf3igPYQ+CQS3KJK13/sc/9Yx8IfTS++lcoyZX+wIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFMIOZcrdvs1I0vh3h5kxE4Qr385dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzM1ZWFk Mi00YWE0LTRmZjAtYjVjYi03ZWZhYTRhNzRmOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMzVlYWQy LTRhYTQtNGZmMC1iNWNiLTdlZmFhNGE3NGY5Ny8xL3dnNWx5dDItelVqUy1IZUht VEVUaEN2ZnpsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCW+dUAwQBw0CaAwQBw1jyMB8GCCsGAQUFBwEI AQH/BBAwDqAMMAoCAwDASwIDAwReMA0GCSqGSIb3DQEBCwUAA4IBAQAOjNLkRm4+ DSZs9SkdXc1fqZlEWcjmpXDt5nJdnw61XzLYJP7KtmLr0Hbh9/vajBQa0NvkKUCz y/FrhUUD+W3fKzT+bwWlir/3Gk01II0q184M1iLDa7tX5PmVcBrTKOcAg5Z/PeE6 dmFQOtgDwH8S4nGgQXUanIAhxczJBzzgKpOj+G30+DKNrC8V/uvt6jd9i3xX95sc aYAwhaQZbZlhfyc7zo6q/xOgoyi9BiVXTeAp6EOG3AZqGz9QQIcyWB/76vyF1dWl /GNbH/w4fDw1zlcE/kbOVVx+cVh6IctNU5+Y+SChhz/Xr4d3esMIfTh/W/803O27 qFxbFCTlzHAu -----END CERTIFICATE-----Generated at Thu Jan 8 17:06:08 2026 by rpki-client