This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer File: wnRsy35zqcww7wTt188WzB2UaJQ.cer (raw, json) Hash identifier: TUROZD6ew75c89zQsWvTLPlk5jkTH2VvfFkgxOXYqC0= Subject key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA7FD9A865F5CECAD26895AAC61ED4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209371 IP: 178.255.218.0/24 IP: 185.203.67.0/24 IP: 185.204.187.0/24 IP: 193.163.88.0/24 IP: 194.69.162.0/24 IP: 2a0c:ae80::/29 IP: 2a10:7cc0::/29 IP: 2a11:940::/29 IP: 2a11:1ec0::/29 IP: 2a12:e440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7f:d9:a8:65:f5:ce:ca:d2:68:95:aa:c6:1e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:05:ef:0d:d9:80:cd:6c:65:78:47:f7:bd: 11:82:d8:48:28:7b:b5:6f:ab:be:85:32:df:37:fd: a3:da:b2:b6:fd:61:22:3f:92:62:99:ff:94:d3:8a: e6:00:3e:01:a8:fb:61:99:db:19:7a:f8:31:05:9c: 91:47:cd:86:3c:e2:f4:d2:8c:aa:13:ce:86:6f:31: 4f:59:3d:16:ff:90:74:a8:12:a5:aa:b1:e0:e4:73: 7f:c8:9a:e9:83:e6:d5:2d:18:a3:80:cf:d9:c1:7a: 8a:14:53:e4:d0:d9:4f:a9:2b:e9:58:e8:2c:01:ee: af:92:3d:be:a7:82:cd:b1:69:4c:bd:e0:3f:f4:94: 0a:22:e9:5c:6d:c8:d9:ad:3a:ae:c3:a8:fb:1b:2b: 8b:12:3e:e5:95:ab:56:77:0f:99:28:47:17:15:73: f9:64:9b:3b:a9:47:97:f6:6c:29:db:b8:5e:09:bb: a7:a0:96:8c:b8:08:2d:2a:48:78:e6:96:78:4b:e7: 6f:e3:a6:56:af:ee:3b:fe:6e:ef:cc:02:6b:3c:24: 50:96:ac:45:f5:f7:19:ca:49:40:ed:8d:40:94:c1: d1:01:d6:e5:a1:3b:7b:22:18:d2:b6:a0:76:f2:57: 33:37:7a:12:2c:e7:8c:4b:fb:ac:4d:5c:8d:a5:04: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.218.0/24 185.203.67.0/24 185.204.187.0/24 193.163.88.0/24 194.69.162.0/24 IPv6: 2a0c:ae80::/29 2a10:7cc0::/29 2a11:940::/29 2a11:1ec0::/29 2a12:e440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209371 Signature Algorithm: sha256WithRSAEncryption 08:e8:b4:11:e6:d9:18:6b:68:36:c8:b1:a0:3b:a5:38:39:d9: ed:7e:d4:8f:5c:43:c2:fa:09:af:dc:60:01:fe:31:6d:25:bb: 17:26:f1:7d:2e:4a:34:99:ca:5f:17:3f:60:c4:68:4f:cf:c9: 1f:49:24:2a:5d:c5:91:16:83:ab:db:a6:51:57:01:02:c3:1d: a4:99:1b:f9:06:e6:67:b0:ba:a1:17:c8:0e:a3:2e:73:10:c5: 3c:27:93:2c:10:87:8a:76:f1:45:b1:74:19:a6:b5:14:bc:36: 4a:34:02:3e:95:56:51:ea:a0:1e:68:73:9b:b9:b6:e5:fe:38: 20:ec:18:42:74:73:6a:f9:c9:d7:b6:f4:ec:f4:13:ed:56:78: 9c:ea:a8:c8:33:01:d8:73:dd:48:e5:b4:44:ce:31:4e:df:91: 9d:b9:4c:9f:f3:d8:92:5a:7c:75:24:bb:46:7a:08:2d:36:d7: 3c:42:12:df:f6:0e:ac:43:ef:39:ef:dd:3b:1d:13:f4:cb:38: 89:33:34:3a:00:06:ff:ad:7e:2c:ea:46:cc:61:fe:ea:44:30: 00:97:3b:dd:d6:c4:54:e1:da:9b:94:e9:7b:5e:84:65:1b:71: 15:69:50:99:f2:59:0b:50:02:9f:ed:f8:8b:46:65:34:45:5f: 1f:5f:6c:2a -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt9yn/ZqGX1zsrSaJWqxh7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjc0NmNjYjdlNzNhOWNjMzBlZjA0ZWRkN2NmMTZjYzFkOTQ2ODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMwF7w3ZgM1sZXhH970RgthIKHu1 b6u+hTLfN/2j2rK2/WEiP5Jimf+U04rmAD4BqPthmdsZevgxBZyRR82GPOL00oyq E86GbzFPWT0W/5B0qBKlqrHg5HN/yJrpg+bVLRijgM/ZwXqKFFPk0NlPqSvpWOgs Ae6vkj2+p4LNsWlMveA/9JQKIulcbcjZrTquw6j7GyuLEj7llatWdw+ZKEcXFXP5 ZJs7qUeX9mwp27heCbunoJaMuAgtKkh45pZ4S+dv46ZWr+47/m7vzAJrPCRQlqxF 9fcZyklA7Y1AlMHRAdbloTt7IhjStqB28lczN3oSLOeMS/usTVyNpQTwIQIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFMJ0bMt+c6nMMO8E7dfPFswdlGiUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzU5NzAz Zi1mMDAzLTQ4NDUtOTgzYS05M2U5MThkMTBlYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvNTk3MDNm LWYwMDMtNDg0NS05ODNhLTkzZTkxOGQxMGVjNS8xL3duUnN5MzV6cWN3dzd3VHQx ODhXekIyVWFKUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF BwEHAQH/BFMwUTAkBAIAATAeAwQAsv/aAwQAuctDAwQAucy7AwQAwaNYAwQAwkWi MCkEAgACMCMDBQMqDK6AAwUDKhB8wAMFAyoRCUADBQMqER7AAwUDKhLkQDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMDMdswDQYJKoZIhvcNAQELBQADggEBAAjotBHm 2RhraDbIsaA7pTg52e1+1I9cQ8L6Ca/cYAH+MW0luxcm8X0uSjSZyl8XP2DEaE/P yR9JJCpdxZEWg6vbplFXAQLDHaSZG/kG5mewuqEXyA6jLnMQxTwnkywQh4p28UWx dBmmtRS8Nko0Aj6VVlHqoB5oc5u5tuX+OCDsGEJ0c2r5yde29Oz0E+1WeJzqqMgz Adhz3UjltETOMU7fkZ25TJ/z2JJafHUku0Z6CC021zxCEt/2DqxD7znv3TsdE/TL OIkzNDoABv+tfizqRsxh/upEMACXO93WxFTh2puU6XtehGUbcRVpUJnyWQtQAp/t +ItGZTRFXx9fbCo= -----END CERTIFICATE-----Generated at Mon Jan 12 15:12:53 2026 by rpki-client