This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer File: W0ShsaCcqepQ5aW9W3d737XzVls.cer (raw, json) Hash identifier: 81hGq7Z9CeiW4e+DKlsDOpx1eozkQ01jFix1CHawXz8= Subject key identifier: 5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB9827888C0AE30B36E945CEED4B7700A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 13 Jan 2026 22:38:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212634 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b9:82:78:88:c0:ae:30:b3:6e:94:5c:ee:d4:b7:70:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 13 22:38:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:2a:af:46:25:9d:cb:86:fc:02:3a:b0:f9: 93:8b:85:a3:c1:43:ae:8b:19:0e:02:ff:03:f2:24: 43:64:bd:04:eb:18:0a:fa:77:50:39:07:dc:6f:0a: bb:cb:73:59:8e:cc:c0:e2:71:9a:37:92:79:d4:15: 77:ce:3e:58:f6:6e:ab:34:d0:e9:32:9b:9c:77:dc: 84:17:f4:8b:6b:0f:6e:39:25:20:2a:ae:49:32:03: f6:76:61:ee:52:16:20:4d:69:bb:52:a2:7e:62:49: ba:92:ae:2c:dc:0e:92:ab:68:f5:54:ab:c8:3e:ae: 74:da:fd:d2:91:84:0c:dc:52:4f:62:13:62:da:14: cc:53:39:69:39:5c:08:93:27:ef:74:59:29:47:dd: aa:fb:16:d0:7f:c6:87:30:51:8d:7f:09:67:09:57: c9:67:bc:d1:38:06:81:0f:7c:d2:84:a7:20:d4:f5: 8a:c7:e6:8a:f6:07:ae:b5:36:8e:c0:54:25:2a:ad: 0e:77:6a:f5:a7:31:14:65:08:8d:f8:fb:88:31:ce: 9d:f4:a1:a6:a3:61:0d:25:d3:89:7c:df:46:86:34: b3:d3:fb:ef:f6:8c:e1:e0:92:df:ed:1f:78:e3:62: c5:b3:7d:02:c7:8e:cb:8c:ba:a7:85:86:06:2f:28: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212634 Signature Algorithm: sha256WithRSAEncryption 62:f3:c7:86:ab:95:3c:68:c3:78:e4:6e:15:ba:d1:ca:cd:51: 48:a0:81:eb:45:a5:43:99:6d:13:53:27:28:71:9e:22:d2:89: 99:a6:2d:24:0b:65:9a:25:5e:5e:a8:d0:87:56:7b:c3:ae:43: 9d:dd:32:18:86:fa:7c:35:bc:d3:e1:14:a7:91:e6:12:2d:ff: b1:4a:cb:11:94:07:79:4b:e9:c5:12:fd:2c:5f:57:9e:44:4c: 3d:f7:c9:1c:9d:fc:b9:04:80:28:3e:1f:65:a4:4d:c8:03:8c: f6:e9:f7:20:a1:bc:7f:a2:e6:c7:4f:17:80:6b:92:7d:83:62: aa:e7:84:d6:f8:d2:54:6f:bd:97:4a:6a:8c:0f:88:54:62:15: 21:eb:d2:d0:98:49:84:0c:02:03:28:7d:17:29:89:76:77:6d: 0e:14:cd:02:af:60:4e:40:e5:1d:56:a8:cc:7c:50:8b:ed:bb: ad:59:7a:c2:6e:fd:b3:ef:8a:63:c9:eb:ee:48:54:f9:ce:8a: 85:47:63:d4:c7:bf:0c:bc:2b:26:eb:9a:f9:88:7d:c3:dc:c7: 4b:f8:12:cc:1a:29:4b:6c:d9:1c:fa:33:0e:9c:52:dd:39:37: 51:35:56:b6:5e:eb:e8:78:e1:79:7a:85:e8:72:fa:b0:9d:e7: 0a:24:74:70 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZu5gniIwK4ws26UXO7Ut3AKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEzMjIzODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjQ0YTFiMWEwOWNhOWVhNTBlNWE1YmQ1Yjc3N2JkZmI1ZjM1NjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsokqr0YlncuG/AI6sPmTi4WjwUOu ixkOAv8D8iRDZL0E6xgK+ndQOQfcbwq7y3NZjszA4nGaN5J51BV3zj5Y9m6rNNDp Mpucd9yEF/SLaw9uOSUgKq5JMgP2dmHuUhYgTWm7UqJ+Ykm6kq4s3A6Sq2j1VKvI Pq502v3SkYQM3FJPYhNi2hTMUzlpOVwIkyfvdFkpR92q+xbQf8aHMFGNfwlnCVfJ Z7zROAaBD3zShKcg1PWKx+aK9geutTaOwFQlKq0Od2r1pzEUZQiN+PuIMc6d9KGm o2ENJdOJfN9GhjSz0/vv9ozh4JLf7R9442LFs30Cx47LjLqnhYYGLyhYewIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFtEobGgnKnqUOWlvVt3e9+181ZbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2I2M2Ew MS03ZTdiLTRhNWYtOTY4My0xY2Q5OTI2YzU0OTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvYjYzYTAx LTdlN2ItNGE1Zi05NjgzLTFjZDk5MjZjNTQ5NS8xL1cwU2hzYUNjcWVwUTVhVzlX M2Q3MzdYelZscy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM+mjANBgkqhkiG9w0BAQsFAAOCAQEAYvPHhquVPGjD eORuFbrRys1RSKCB60WlQ5ltE1MnKHGeItKJmaYtJAtlmiVeXqjQh1Z7w65Dnd0y GIb6fDW80+EUp5HmEi3/sUrLEZQHeUvpxRL9LF9XnkRMPffJHJ38uQSAKD4fZaRN yAOM9un3IKG8f6Lmx08XgGuSfYNiqueE1vjSVG+9l0pqjA+IVGIVIevS0JhJhAwC Ayh9FymJdndtDhTNAq9gTkDlHVaozHxQi+27rVl6wm79s++KY8nr7khU+c6KhUdj 1Me/DLwrJuua+Yh9w9zHS/gSzBopS2zZHPozDpxS3Tk3UTVWtl7r6HjheXqF6HL6 sJ3nCiR0cA== -----END CERTIFICATE-----Generated at Fri Jan 23 18:51:42 2026 by rpki-client