This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer File: P_WH5OB6zfs4niWRYdoYazhrT2M.cer (raw, json) Hash identifier: enZpg6q2RozXelNRcYZMPeqc9BTZfJw0Tm4/ZEW4Y6E= Subject key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C86CD48A8EF2D89F82223BCF4B1A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213528 IP: 185.72.100.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c8:6c:d4:8a:8e:f2:d8:9f:82:22:3b:cf:4b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ff587e4e07acdfb389e259161da186b386b4f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:e2:f8:fc:3c:cf:44:32:70:34:59:c7:7b: 20:d4:f3:28:c1:e7:8f:a0:8d:26:ec:2e:4c:fa:4e: e7:98:83:8a:85:42:dd:9c:04:7f:f6:e5:89:08:8a: 99:f1:35:9f:1c:f8:ef:cc:f8:2e:9c:02:46:24:3e: b1:83:88:c0:07:56:25:87:f8:b5:87:a2:f1:70:8b: 84:4f:34:de:d7:e5:2b:cf:75:a7:eb:79:a5:90:73: 02:28:2d:17:91:59:de:f7:56:31:02:ea:85:d1:a0: 4b:e7:ac:eb:9b:a3:e8:a8:4d:ab:be:44:e9:f3:11: 36:03:b9:b1:5f:4b:25:da:4f:45:59:8e:af:5c:e5: 87:79:db:52:68:85:6a:47:ca:57:4d:13:ea:f8:be: b8:1d:79:9c:0f:91:d8:04:1b:b2:da:37:8c:62:e8: d2:07:8c:5d:9f:24:73:1f:e4:4b:34:57:e0:6c:37: 3a:7d:5c:6b:20:2b:ee:67:b6:b9:dc:24:40:c9:5e: 87:e6:40:6c:65:4b:3f:26:aa:34:04:23:b2:8a:cf: 78:5c:a1:8c:d1:37:c9:c8:4b:0e:ba:8d:bc:1f:f4: 52:c8:c9:e8:69:49:6d:29:d2:3d:fa:94:46:90:2a: ff:4e:d1:fb:ad:9e:4a:b1:53:76:d0:49:07:aa:21: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.100.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213528 Signature Algorithm: sha256WithRSAEncryption 22:ed:cc:4a:fa:2d:85:7a:c8:eb:9f:03:c5:ec:9a:af:2e:a3: 4d:37:59:1b:39:aa:6e:ac:13:60:ea:4a:ae:e1:29:dd:0d:8c: 39:65:37:6a:f8:98:d6:40:a3:ae:ee:25:bc:a9:ce:a1:b6:df: eb:b2:bd:c3:f2:63:c9:75:6d:06:78:d2:53:96:ff:44:c2:e6: 84:11:35:2d:05:4d:01:8d:f0:d8:7d:e9:07:5e:c2:58:e4:a8: 60:0c:af:05:cb:8a:71:b2:df:b5:55:4b:f0:f5:0d:23:ab:05: e4:34:8d:fd:6a:71:ce:32:d6:13:75:eb:e3:b3:8c:08:23:12: 37:df:43:13:96:59:79:95:c9:62:bc:87:1a:09:38:91:a8:cc: 55:7e:69:9d:45:61:92:e6:11:1d:1f:7b:53:0b:d8:18:9a:d3: a3:6b:8b:ea:9e:46:25:a1:21:f4:6c:0b:5e:47:57:ed:45:e9: 50:33:30:83:4e:bb:59:96:85:b8:0f:9e:d8:d1:80:06:ce:8b: 81:47:98:09:12:e5:bb:88:1d:b1:e3:b1:21:5e:66:e8:47:a5: 7a:69:b2:d0:81:38:4b:de:ee:a5:79:db:98:f6:f3:79:74:1c: 5c:ba:85:33:e4:66:73:d9:be:e9:4e:6e:0f:7b:16:c0:43:ac: f9:ef:4e:83 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NMhs1IqO8tifgiI7z0saMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmY1ODdlNGUwN2FjZGZiMzg5ZTI1OTE2MWRhMTg2YjM4NmI0ZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDHi+Pw8z0QycDRZx3sg1PMoweeP oI0m7C5M+k7nmIOKhULdnAR/9uWJCIqZ8TWfHPjvzPgunAJGJD6xg4jAB1Ylh/i1 h6LxcIuETzTe1+Urz3Wn63mlkHMCKC0XkVne91YxAuqF0aBL56zrm6PoqE2rvkTp 8xE2A7mxX0sl2k9FWY6vXOWHedtSaIVqR8pXTRPq+L64HXmcD5HYBBuy2jeMYujS B4xdnyRzH+RLNFfgbDc6fVxrICvuZ7a53CRAyV6H5kBsZUs/Jqo0BCOyis94XKGM 0TfJyEsOuo28H/RSyMnoaUltKdI9+pRGkCr/TtH7rZ5KsVN20EkHqiHArwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFD/1h+Tges37OJ4lkWHaGGs4a09jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2Y5MTdj Mi1mYzZkLTQ0NjgtYTEyMS01NmZhMDZjNDMxODAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvZjkxN2My LWZjNmQtNDQ2OC1hMTIxLTU2ZmEwNmM0MzE4MC8xL1BfV0g1T0I2emZzNG5pV1JZ ZG9ZYXpoclQyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuUhkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNCGDANBgkqhkiG9w0BAQsFAAOCAQEAIu3MSvothXrI658Dxeyary6jTTdZGzmq bqwTYOpKruEp3Q2MOWU3aviY1kCjru4lvKnOobbf67K9w/JjyXVtBnjSU5b/RMLm hBE1LQVNAY3w2H3pB17CWOSoYAyvBcuKcbLftVVL8PUNI6sF5DSN/WpxzjLWE3Xr 47OMCCMSN99DE5ZZeZXJYryHGgk4kajMVX5pnUVhkuYRHR97UwvYGJrTo2uL6p5G JaEh9GwLXkdX7UXpUDMwg067WZaFuA+e2NGABs6LgUeYCRLlu4gdseOxIV5m6Eel emmy0IE4S97upXnbmPbzeXQcXLqFM+Rmc9m+6U5uD3sWwEOs+e9Ogw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:23 2026 by rpki-client