This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer File: CWw-hlT-h72rRxHXduRLTwzRtkc.cer (raw, json) Hash identifier: XOtxkJavMlpa2xiXFuEZqj0pGfnnq7cpIYyaF8JAMgs= Subject key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC79E2B04F4C3397081273CD4A7FC15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.35.94.0/24 IP: 192.67.43.0/24 IP: 194.32.69.0/24 IP: 194.32.218.0/23 IP: 194.34.138.0/24 IP: 194.61.92.0 -- 194.61.94.255 IP: 2a0b:3b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9e:2b:04:f4:c3:39:70:81:27:3c:d4:a7:fc:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:7b:53:d2:3c:d8:03:1c:0b:c8:31:bc:f3: 6f:69:d0:1b:8d:5a:80:3b:f4:b7:bf:f6:54:3a:f5: 88:67:4c:ad:28:75:78:d1:4b:40:d2:9e:da:13:92: cb:e3:49:54:98:ce:8e:eb:ad:e4:6c:81:33:e3:28: a7:b4:da:5c:e2:45:bb:6f:e1:91:70:c8:a6:e7:84: bc:01:06:4f:35:13:21:b3:f4:d6:a8:c5:76:8e:0b: 61:aa:33:f9:d0:84:02:55:cd:8c:6a:a0:c9:4e:52: 38:3b:0c:10:e6:0d:fb:1d:00:47:f0:bc:1e:ae:51: 66:45:a7:1c:5b:22:85:6b:88:33:95:88:89:72:d6: 25:e7:af:6f:c0:8c:ce:95:0c:6f:57:7f:0b:b8:de: b1:39:18:1d:84:6a:58:33:43:d0:ea:a8:e5:03:b4: b0:61:7a:03:44:fa:01:a9:6a:f5:61:68:90:ec:2b: 7c:5b:16:78:d8:3f:89:bf:3b:76:bd:2d:7d:97:84: 51:41:2b:c9:51:da:ad:31:d1:f9:68:e2:a9:20:9f: e3:52:d0:eb:af:9b:4f:a6:84:dd:b5:08:a3:a8:ca: a6:8e:ec:f2:16:fe:29:7b:eb:d3:a5:1e:06:bd:c9: bc:f9:c7:47:c4:15:95:dc:4d:c8:0b:aa:72:cf:57: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.35.94.0/24 192.67.43.0/24 194.32.69.0/24 194.32.218.0/23 194.34.138.0/24 194.61.92.0-194.61.94.255 IPv6: 2a0b:3b40::/29 Signature Algorithm: sha256WithRSAEncryption 8e:b8:db:01:5b:bc:8d:16:59:86:e3:5d:da:c7:5a:42:92:30: 7a:2e:f3:87:7b:6d:d9:bf:ae:3a:9c:57:be:e9:e6:0b:38:9d: 46:fe:88:36:d4:bb:84:e0:c2:b1:27:db:ee:dc:6b:cd:ad:5a: 1b:c2:3f:71:87:5c:a7:be:08:67:ea:c2:16:67:85:8a:4f:bc: cb:a1:36:3c:00:ab:f3:2f:4c:4e:6c:b3:74:e5:d7:6a:f2:b8: f8:22:0a:89:57:e0:3b:ee:ec:5f:e4:06:5c:f1:a0:a1:3c:88: 82:ce:67:e4:98:94:98:86:6d:ec:2e:fb:2d:cd:b2:0a:dd:b7: c8:1a:f6:cf:61:b1:6d:15:96:58:29:aa:a6:23:fd:32:ba:b2: 53:12:10:c3:15:e6:33:16:cf:88:62:0d:3d:a9:e8:a0:2e:a8: b6:03:3d:fd:76:6a:98:de:fe:c9:63:f4:39:a4:df:7e:63:0a: 0b:55:57:64:c8:c8:dd:d5:1f:a0:dd:f0:d2:81:44:4d:57:85: cb:32:15:80:29:6f:c6:6b:76:34:ea:5f:d6:f7:72:9c:12:b7: 0f:21:0a:a2:00:fb:88:48:a4:d0:3d:de:7b:a9:6f:09:30:a7: 6d:4c:64:df:91:29:59:0f:21:54:d5:d1:2e:a0:dd:8a:5f:ac: d5:e1:ac:e0 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt6x54rBPTDOXCBJzzUp/wVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTZjM2U4NjU0ZmU4N2JkYWI0NzExZDc3NmU0NGI0ZjBjZDFiNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlt7U9I82AMcC8gxvPNvadAbjVqA O/S3v/ZUOvWIZ0ytKHV40UtA0p7aE5LL40lUmM6O663kbIEz4yintNpc4kW7b+GR cMim54S8AQZPNRMhs/TWqMV2jgthqjP50IQCVc2MaqDJTlI4OwwQ5g37HQBH8Lwe rlFmRaccWyKFa4gzlYiJctYl569vwIzOlQxvV38LuN6xORgdhGpYM0PQ6qjlA7Sw YXoDRPoBqWr1YWiQ7Ct8WxZ42D+Jvzt2vS19l4RRQSvJUdqtMdH5aOKpIJ/jUtDr r5tPpoTdtQijqMqmjuzyFv4pe+vTpR4Gvcm8+cdHxBWV3E3IC6pyz1fWawIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFAlsPoZU/oe9q0cR13bkS08M0bZHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0LzYyNWUw ZS1lYmE4LTRlODgtYTAyMS00ZTdkNTg0OGRlMDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvNjI1ZTBl LWViYTgtNGU4OC1hMDIxLTRlN2Q1ODQ4ZGUwMC8xL0NXdy1obFQtaDcyclJ4SFhk dVJMVHd6UnRrYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsAwQAwCNeAwQAwEMrAwQAwiBFAwQBwiDaAwQAwiKK MAwDBALCPVwDBADCPV4wDQQCAAIwBwMFAyoLO0AwDQYJKoZIhvcNAQELBQADggEB AI642wFbvI0WWYbjXdrHWkKSMHou84d7bdm/rjqcV77p5gs4nUb+iDbUu4TgwrEn 2+7ca82tWhvCP3GHXKe+CGfqwhZnhYpPvMuhNjwAq/MvTE5ss3Tl12ryuPgiColX 4Dvu7F/kBlzxoKE8iILOZ+SYlJiGbewu+y3Nsgrdt8ga9s9hsW0VllgpqqYj/TK6 slMSEMMV5jMWz4hiDT2p6KAuqLYDPf12apje/slj9Dmk335jCgtVV2TIyN3VH6Dd 8NKBRE1XhcsyFYApb8ZrdjTqX9b3cpwStw8hCqIA+4hIpNA93nupbwkwp21MZN+R KVkPIVTV0S6g3YpfrNXhrOA= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:15 2026 by rpki-client