This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer File: 0WLUzQwan_4krVFT0Zzpwx3LTH0.cer (raw, json) Hash identifier: Q4kw5gr06VkBv1+SiEJubeKcjgHZrzbu1u4glghQ9Zc= Subject key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED0CFABFC4F700BABC1FBA5FA53BC8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.179.240.0/22 IP: 2a0a:9480::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0c:fa:bf:c4:f7:00:ba:bc:1f:ba:5f:a5:3b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:08:44:96:b3:28:79:b7:2d:57:40:b1:38: 43:66:78:c2:ab:8a:1b:87:aa:d4:1e:9d:2f:39:d7: 39:31:53:05:e7:3e:16:42:4e:44:1e:01:b5:8d:31: 5f:ee:f8:e7:67:45:45:99:8d:68:82:60:91:c8:b7: ab:17:ef:7a:73:41:5a:78:00:42:b7:a0:36:80:cc: aa:56:0e:5f:95:3b:46:20:50:e4:6d:c7:e1:81:d9: df:4f:15:1c:74:a9:fe:23:3c:49:ce:78:e5:9a:78: 44:30:64:4e:a9:75:e0:8f:38:cd:43:32:a9:7f:e6: 47:44:8d:54:4e:08:18:ed:a8:b9:fe:c8:4d:5b:8a: 51:23:5e:3e:02:f7:9f:16:5d:c3:63:a2:e3:2a:74: 03:a5:e4:4c:42:ab:b8:59:85:1e:72:6d:8e:05:3a: 6e:e5:4a:ce:57:2b:60:6c:1f:d6:47:6f:4a:29:7c: 0c:00:d1:e6:67:16:2a:a4:c3:9f:0f:a1:28:b2:08: d9:00:44:60:13:b9:d7:1e:81:e3:9a:1e:67:bd:d2: 02:cf:72:7d:be:e9:ea:9c:fd:14:56:ce:07:13:d3: 56:46:05:07:1b:88:2d:5c:41:16:a7:db:62:95:ef: 45:a0:01:9c:26:f8:2b:f8:b1:ba:95:03:ab:9d:7a: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.240.0/22 IPv6: 2a0a:9480::/32 Signature Algorithm: sha256WithRSAEncryption 20:a2:0d:09:2f:0a:fe:bf:13:74:69:9c:f6:d0:38:41:15:24: bd:a0:eb:74:7b:b9:1c:10:3d:8e:39:98:f7:1b:d0:7c:59:f8: 21:a9:a8:19:e8:6b:10:c2:0a:7e:22:73:8e:ad:f8:2d:9f:2c: 12:8a:3b:7d:48:76:64:e4:32:29:bf:aa:0f:e1:1a:8b:18:35: 18:c4:bb:19:b8:ef:64:5c:c5:41:eb:f0:98:6c:6c:d5:4d:ea: ad:36:7c:2f:d5:56:03:ba:32:d6:8a:16:64:d5:c6:08:4c:db: cf:13:2f:23:21:b0:1f:32:d2:6e:78:6f:0e:1f:e8:59:20:1e: e6:84:2f:be:77:fb:81:71:2c:73:a7:ca:48:cf:7c:5c:40:f6: b8:15:bc:54:b5:ae:cc:13:75:26:2c:a0:74:67:0e:2d:59:8c: 8a:2d:e2:f2:e3:55:d1:ba:cb:72:f0:55:c1:f6:c0:9f:2f:21: e1:29:dc:d0:0b:ec:b7:a1:a3:6e:3f:4c:79:02:9a:7c:f2:70: 2b:dc:f5:51:b3:49:7e:56:bf:a9:67:db:6e:4c:72:51:6c:0f: 4a:35:c8:92:57:b5:0c:a8:13:52:94:4b:92:28:b0:bf:92:b8: b0:f4:6d:3f:49:7d:08:d3:83:cb:c3:f6:b1:d8:f6:23:05:29: b2:0c:9e:4c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57Qz6v8T3ALq8H7pfpTvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTYyZDRjZDBjMWE5ZmZlMjRhZDUxNTNkMTljZTljMzFkY2I0YzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAQIRJazKHm3LVdAsThDZnjCq4ob h6rUHp0vOdc5MVMF5z4WQk5EHgG1jTFf7vjnZ0VFmY1ogmCRyLerF+96c0FaeABC t6A2gMyqVg5flTtGIFDkbcfhgdnfTxUcdKn+IzxJznjlmnhEMGROqXXgjzjNQzKp f+ZHRI1UTggY7ai5/shNW4pRI14+AvefFl3DY6LjKnQDpeRMQqu4WYUecm2OBTpu 5UrOVytgbB/WR29KKXwMANHmZxYqpMOfD6EosgjZAERgE7nXHoHjmh5nvdICz3J9 vunqnP0UVs4HE9NWRgUHG4gtXEEWp9tile9FoAGcJvgr+LG6lQOrnXqzrQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNFi1M0MGp/+JK1RU9Gc6cMdy0x9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzVmODRh MS1lOGRjLTQxMTUtYTY0NS1lODE3MjBhMzk3OGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvNWY4NGEx LWU4ZGMtNDExNS1hNjQ1LWU4MTcyMGEzOTc4ZC8xLzBXTFV6UXdhbl80a3JWRlQw Wnpwd3gzTFRIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubPwMA0EAgACMAcDBQAqCpSAMA0GCSqGSIb3 DQEBCwUAA4IBAQAgog0JLwr+vxN0aZz20DhBFSS9oOt0e7kcED2OOZj3G9B8Wfgh qagZ6GsQwgp+InOOrfgtnywSijt9SHZk5DIpv6oP4RqLGDUYxLsZuO9kXMVB6/CY bGzVTeqtNnwv1VYDujLWihZk1cYITNvPEy8jIbAfMtJueG8OH+hZIB7mhC++d/uB cSxzp8pIz3xcQPa4FbxUta7ME3UmLKB0Zw4tWYyKLeLy41XRusty8FXB9sCfLyHh KdzQC+y3oaNuP0x5App88nAr3PVRs0l+Vr+pZ9tuTHJRbA9KNciSV7UMqBNSlEuS KLC/kriw9G0/SX0I04PLw/ax2PYjBSmyDJ5M -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:49 2026 by rpki-client