This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer File: CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer (raw, json) Hash identifier: TZ1QlRZF/JRdhVDte/GoiD4KpvJ/m4HM5oAqUqL45/M= Subject key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A356004A662114B42F40FC3E9786A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31275 AS: 205773 IP: 83.220.64.0/19 IP: 93.93.172.0/22 IP: 2a04:e380::/29 IP: 2a06:68c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:56:00:4a:66:21:14:b4:2f:40:fc:3e:97:86:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:aa:e8:bd:86:38:cb:96:ee:16:b5:b5:6f:8a: 06:41:5b:80:aa:be:65:ab:41:2f:24:c0:02:c9:91: f1:d3:2b:76:10:75:a3:7a:87:b0:54:6a:5b:c7:77: d0:02:79:28:09:62:86:03:d6:9e:e6:fc:9b:af:88: 8f:c1:15:eb:8e:8e:7e:99:21:52:27:33:7f:67:09: 67:1a:e8:b4:93:dd:f1:41:f3:ae:cb:12:74:65:b8: 4b:cc:99:9b:f4:13:b5:21:0a:4a:83:3c:2e:97:ac: 98:77:5a:04:24:9d:51:44:7a:22:a6:18:14:36:5a: 47:9a:b2:05:e5:0f:68:0f:1a:40:65:3c:f7:41:90: c3:3b:bc:e3:52:5a:20:00:4f:ea:24:16:bd:60:12: 63:d5:51:50:4d:ca:93:34:33:56:5d:cf:db:99:8a: 89:fe:d0:6e:35:b7:95:9d:8f:d0:8f:a1:d3:d2:81: 4c:74:4f:77:6b:e1:7a:4c:74:27:0f:61:55:bb:cc: 47:59:f3:3a:19:76:cc:2e:00:bd:c3:48:80:4c:08: 0d:c0:be:51:e7:70:37:fd:81:0a:44:02:01:11:30: 09:1a:57:20:36:7a:9f:30:3c:21:66:56:fc:47:47: 59:ab:a0:79:7c:5b:25:e7:5f:75:ec:fe:e8:13:0a: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.220.64.0/19 93.93.172.0/22 IPv6: 2a04:e380::/29 2a06:68c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31275 205773 Signature Algorithm: sha256WithRSAEncryption 01:02:bd:c3:0a:b6:5f:4d:1c:48:ec:c4:a5:3d:53:67:85:54: 2c:37:f9:cd:5d:60:66:97:9f:08:1e:ef:b9:00:ee:b8:40:81: 9b:c0:72:7c:f1:fe:c4:2c:bb:f8:db:ec:06:94:ac:dc:40:31: 3a:fd:d8:f6:09:0f:88:db:bb:0e:aa:e5:09:8a:d9:2b:75:dc: a4:14:1c:68:83:28:b3:b8:86:bc:a5:dd:4d:17:0c:60:06:85: 32:00:1c:54:6b:a7:d2:f2:1b:ed:36:5e:58:09:58:51:c1:b1: 83:fa:55:1e:a4:7d:f5:60:97:40:63:63:59:a1:42:7e:f9:98: 3e:28:d0:a2:08:d9:14:77:cb:2f:2e:ff:74:4c:ab:3c:49:46: 09:42:e8:2c:0c:7e:0e:c4:b6:a2:20:93:29:43:05:63:60:d9: dc:3d:26:1d:dc:83:ff:89:23:23:e7:69:4a:66:9a:ad:71:82: 1d:8f:d2:ea:33:44:69:90:b2:b3:a3:ec:5d:e5:56:2b:51:8b: 43:e3:7f:38:b2:fd:75:86:93:f6:16:89:1e:a8:3d:30:50:e3: 0c:f9:64:3a:c5:57:9b:f2:22:57:9a:7c:36:61:56:5e:d5:18: 2b:dd:33:c9:65:f6:e9:7f:de:c2:4e:9c:e7:c1:9e:dd:d9:a5: 0c:5e:53:0f -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt4o1YASmYhFLQvQPw+l4ahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTYyZGM2OTQwNzYwYjdmYmMyZWE0MzY3Y2M1M2JjMjMwYTY0ZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qrovYY4y5buFrW1b4oGQVuAqr5l q0EvJMACyZHx0yt2EHWjeoewVGpbx3fQAnkoCWKGA9ae5vybr4iPwRXrjo5+mSFS JzN/ZwlnGui0k93xQfOuyxJ0ZbhLzJmb9BO1IQpKgzwul6yYd1oEJJ1RRHoiphgU NlpHmrIF5Q9oDxpAZTz3QZDDO7zjUlogAE/qJBa9YBJj1VFQTcqTNDNWXc/bmYqJ /tBuNbeVnY/Qj6HT0oFMdE93a+F6THQnD2FVu8xHWfM6GXbMLgC9w0iATAgNwL5R 53A3/YEKRAIBETAJGlcgNnqfMDwhZlb8R0dZq6B5fFsl51917P7oEwoKvQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFAli3GlAdgt/vC6kNnzFO8Iwpk+bMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzIwZmYw Zi02MThmLTRjYjYtYmM3Zi02NTQxOTc3ZjY1ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvMjBmZjBm LTYxOGYtNGNiNi1iYzdmLTY1NDE5NzdmNjVmOS8xL0NXTGNhVUIyQzMtOExxUTJm TVU3d2pDbVQ1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQFU9xAAwQCXV2sMBQEAgACMA4DBQMqBOOAAwUD KgZowDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJ6KwIDAyPNMA0GCSqGSIb3DQEB CwUAA4IBAQABAr3DCrZfTRxI7MSlPVNnhVQsN/nNXWBml58IHu+5AO64QIGbwHJ8 8f7ELLv42+wGlKzcQDE6/dj2CQ+I27sOquUJitkrddykFBxogyizuIa8pd1NFwxg BoUyABxUa6fS8hvtNl5YCVhRwbGD+lUepH31YJdAY2NZoUJ++Zg+KNCiCNkUd8sv Lv90TKs8SUYJQugsDH4OxLaiIJMpQwVjYNncPSYd3IP/iSMj52lKZpqtcYIdj9Lq M0RpkLKzo+xd5VYrUYtD4384sv11hpP2FokeqD0wUOMM+WQ6xVeb8iJXmnw2YVZe 1Rgr3TPJZfbpf97CTpznwZ7d2aUMXlMP -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:09 2026 by rpki-client