This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer File: wvypREWGBrEBfibDyhdDD3_5JLM.cer (raw, json) Hash identifier: uxS1t81bKOv/JXX80czxYeczZ4GeYsg0iFjbdv1RWJ4= Subject key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C655A9AED77AAA4E46CB5A77F2AAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2107 AS: 51988 IP: 88.200.0.0/17 IP: 91.220.194.0/24 IP: 92.244.64.0/19 IP: 95.87.128.0/18 IP: 109.127.192.0/18 IP: 141.255.192.0/18 IP: 149.62.64.0/18 IP: 153.5.0.0/16 IP: 163.159.128.0/17 IP: 178.172.0.0/17 IP: 185.13.52.0/22 IP: 193.2.0.0/16 IP: 194.249.0.0/16 IP: 212.235.128.0/17 IP: 2001:7f8:46::/48 IP: 2001:1470::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:65:5a:9a:ed:77:aa:a4:e4:6c:b5:a7:7f:2a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2fca944458606b1017e26c3ca17430f7ff924b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:55:5f:8a:c7:c2:5f:c9:61:04:e5:ca:06: 71:5d:dc:1c:d3:18:00:ab:85:b3:20:19:77:b1:8e: 25:1f:62:6d:a6:12:5a:06:87:0b:5c:6d:c4:52:ba: 3b:5e:b7:a3:59:11:25:1f:51:bc:ec:4b:47:52:94: 40:fb:61:40:86:83:62:5f:04:62:e0:db:25:1d:12: 14:e6:68:2e:f8:bd:3e:de:4e:51:88:45:9b:79:c1: e4:90:eb:c7:c0:73:fe:54:d5:22:61:71:85:15:e9: b1:0b:b7:49:3a:0c:16:ca:da:93:c3:85:c7:7b:73: 17:a1:13:f2:d1:a5:50:90:a5:d9:56:1f:71:5f:23: e0:10:b9:c0:9a:c3:9c:2b:d8:d9:a5:3d:80:d3:26: 33:6b:03:4a:f6:28:df:bd:50:02:ee:81:f3:79:d9: f4:5c:6b:6e:3c:19:1a:e7:b2:1c:c6:86:f8:0f:8b: 1e:d0:e7:47:0d:3b:ae:10:54:24:b1:9a:8f:80:e8: 4e:db:12:37:82:27:a4:76:12:e4:83:de:f6:bd:26: 19:9a:f3:b8:de:f4:8d:0d:e4:84:3b:d5:64:49:cc: 79:fa:c3:e9:ce:75:b7:82:4a:d6:6f:fe:91:27:29: 0d:bd:31:c0:de:4a:7e:96:db:1c:c3:0b:00:78:e5: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.200.0.0/17 91.220.194.0/24 92.244.64.0/19 95.87.128.0/18 109.127.192.0/18 141.255.192.0/18 149.62.64.0/18 153.5.0.0/16 163.159.128.0/17 178.172.0.0/17 185.13.52.0/22 193.2.0.0/16 194.249.0.0/16 212.235.128.0/17 IPv6: 2001:7f8:46::/48 2001:1470::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2107 51988 Signature Algorithm: sha256WithRSAEncryption 9a:0f:41:4c:d2:19:db:39:c3:a7:26:6a:ed:52:54:f1:cb:80: a3:f5:8a:9b:32:82:cc:a3:e4:7b:ee:61:63:51:7d:d7:8d:0a: 9e:18:da:93:8c:66:86:a3:14:eb:42:9a:26:b7:68:31:32:df: 63:c3:99:bc:7c:e9:db:37:7d:37:07:2d:30:19:a5:c3:1e:2d: f0:36:8f:96:bb:26:73:00:2d:3f:db:bd:4d:07:7e:01:ee:4e: 08:6b:69:f2:af:33:47:73:6c:36:22:2e:ae:8a:ea:f6:ad:cf: 8d:99:9d:07:28:f1:89:7f:f2:bc:9a:2c:a4:40:a1:18:f5:ff: bc:c9:9f:87:71:da:c6:b8:6c:7a:a8:a6:d0:dd:42:c5:68:5d: 4a:74:24:ce:09:47:49:df:68:f0:c6:76:90:2e:ce:a8:46:f0: 9f:ce:98:94:ad:50:f7:ba:d3:73:fc:0f:77:21:82:dc:b0:5c: e6:f3:e8:68:a1:04:73:f4:e6:df:3c:b6:61:eb:c2:35:cd:bd: 02:20:07:ec:e2:39:59:59:d8:c3:73:aa:f6:29:68:16:44:63: c6:81:49:5b:a2:6e:ac:89:b9:c0:f6:36:95:06:ba:91:05:b4: a7:04:c9:82:e0:5b:5e:3d:55:e2:b1:30:c1:7f:b4:80:be:b9: 93:cc:30:4e -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZt9XGVamu13qqTkbLWnfyqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmZjYTk0NDQ1ODYwNmIxMDE3ZTI2YzNjYTE3NDMwZjdmZjkyNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy1VX4rHwl/JYQTlygZxXdwc0xgA q4WzIBl3sY4lH2JtphJaBocLXG3EUro7XrejWRElH1G87EtHUpRA+2FAhoNiXwRi 4NslHRIU5mgu+L0+3k5RiEWbecHkkOvHwHP+VNUiYXGFFemxC7dJOgwWytqTw4XH e3MXoRPy0aVQkKXZVh9xXyPgELnAmsOcK9jZpT2A0yYzawNK9ijfvVAC7oHzedn0 XGtuPBka57Icxob4D4se0OdHDTuuEFQksZqPgOhO2xI3giekdhLkg972vSYZmvO4 3vSNDeSEO9VkScx5+sPpznW3gkrWb/6RJykNvTHA3kp+ltscwwsAeOWXaQIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFML8qURFhgaxAX4mw8oXQw9/+SSzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzkwMDMz Yy01YjAzLTQ3MDktYjZkMy1hODY1ZTE4OWVkOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvOTAwMzNj LTViMDMtNDcwOS1iNmQzLWE4NjVlMTg5ZWQ4YS8xL3d2eXBSRVdHQnJFQmZpYkR5 aGRERDNfNUpMTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF BQcBBwEB/wRzMHEwVwQCAAEwUQMEB1jIAAMEAFvcwgMEBVz0QAMEBl9XgAMEBm1/ wAMEBo3/wAMEBpU+QAMDAJkFAwQHo5+AAwQHsqwAAwQCuQ00AwMAwQIDAwDC+QME B9TrgDAWBAIAAjAQAwcAIAEH+ABGAwUDIAEUcDAeBggrBgEFBQcBCAEB/wQPMA2g CzAJAgIIOwIDAMsUMA0GCSqGSIb3DQEBCwUAA4IBAQCaD0FM0hnbOcOnJmrtUlTx y4Cj9YqbMoLMo+R77mFjUX3XjQqeGNqTjGaGoxTrQpomt2gxMt9jw5m8fOnbN303 By0wGaXDHi3wNo+WuyZzAC0/271NB34B7k4Ia2nyrzNHc2w2Ii6uiur2rc+NmZ0H KPGJf/K8miykQKEY9f+8yZ+HcdrGuGx6qKbQ3ULFaF1KdCTOCUdJ32jwxnaQLs6o RvCfzpiUrVD3utNz/A93IYLcsFzm8+hooQRz9ObfPLZh68I1zb0CIAfs4jlZWdjD c6r2KWgWRGPGgUlbom6sibnA9jaVBrqRBbSnBMmC4FtePVXisTDBf7SAvrmTzDBO -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:54 2026 by rpki-client