This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer File: W4M_gwOig5k2kGEKkYWlybaCv_s.cer (raw, json) Hash identifier: dkqCAfx8JlWplntsVgsuE55/bNiw0mm0Yq6bU/SktnE= Subject key identifier: 5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F856CA1ABDF94BAC7FA352AABAAEA1E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52098 IP: 91.221.224.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:6c:a1:ab:df:94:ba:c7:fa:35:2a:ab:aa:ea:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b833f8303a283993690610a9185a5c9b682bffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:2f:14:46:1a:05:0b:dc:99:60:72:9c:96: 0d:f7:da:66:f9:ad:82:5e:c5:4b:8c:18:cb:09:fc: 9e:76:d5:a0:5e:3d:52:7a:50:57:48:8c:69:7d:6e: 4f:5d:3b:d9:9a:ef:54:b4:07:8e:9e:02:1b:73:a1: 2f:e2:d1:9c:b2:66:0d:ce:e9:12:92:09:e6:74:b1: 63:84:54:32:8c:62:b3:3b:df:5e:8d:17:b1:cd:43: 8f:57:2a:46:fb:13:3d:0e:25:3c:00:7c:72:a1:33: d7:89:76:b6:81:d5:21:5e:db:fa:31:ff:a1:a9:7d: 3f:12:74:da:e6:13:89:69:aa:e6:4c:68:80:aa:06: db:30:16:60:4c:38:20:66:33:2b:8e:31:92:7a:90: be:ae:9d:e7:fa:23:fd:92:8f:9f:d8:00:06:8b:9e: b1:23:26:f6:42:3a:7c:9d:f0:44:34:62:c1:98:52: 6e:dc:e7:41:26:2f:65:a5:f4:bd:3d:8c:d2:dd:bd: b7:91:41:43:e2:37:a5:38:5a:c7:67:50:e1:00:49: 1b:41:85:a6:6a:17:f1:94:4e:89:8c:d7:f6:ae:e5: 51:d8:9c:c5:7a:ff:af:be:7d:ea:03:43:7a:a8:c9: 53:e4:49:34:da:81:09:5a:df:d1:22:7d:1b:af:89: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.224.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52098 Signature Algorithm: sha256WithRSAEncryption 12:cb:a2:f6:17:b1:ff:aa:1d:3b:49:ae:9b:ba:33:29:9e:81: fb:ea:5d:ea:7e:5a:34:05:5c:cc:97:65:6a:ae:44:df:c9:4e: cc:b0:c9:d3:23:d5:35:9f:54:96:e4:eb:a1:45:48:c2:4c:46: 9f:5b:61:13:38:90:f9:67:b8:b0:eb:0e:c3:e2:2d:93:63:17: bd:60:6a:66:72:41:d7:00:cb:f5:d4:f8:24:7b:0a:f0:d1:a1: d5:30:4b:3b:e0:12:1f:66:4b:26:74:3f:4f:f8:46:42:d1:16: 34:ee:dc:b0:d6:8c:15:f6:3e:27:76:02:88:62:61:93:40:8e: 41:e1:d7:ae:d3:59:5f:05:72:66:2e:14:7b:ce:cc:5b:56:c2: 5d:fc:bf:32:67:bb:ce:73:ac:37:98:04:31:b1:1b:35:3b:0c: 17:e4:ea:f9:4a:be:e9:69:10:6c:24:b1:a7:98:6a:fe:f6:81: 1d:22:46:90:5a:17:9a:0b:a2:07:0f:c7:18:41:34:8f:b3:d5: 94:6d:7b:0c:3a:7e:4f:8e:83:74:19:56:83:c8:8b:c2:79:c2: 81:3b:2f:cb:7a:68:f5:a3:d3:d6:df:75:45:69:af:bb:5f:2d: 39:3b:f0:a6:a5:55:f4:b7:6a:86:91:78:2e:f0:2d:0e:31:c3: de:1a:4a:d8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hWyhq9+Uusf6NSqrquoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjgzM2Y4MzAzYTI4Mzk5MzY5MDYxMGE5MTg1YTVjOWI2ODJiZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTEvFEYaBQvcmWBynJYN99pm+a2C XsVLjBjLCfyedtWgXj1SelBXSIxpfW5PXTvZmu9UtAeOngIbc6Ev4tGcsmYNzukS kgnmdLFjhFQyjGKzO99ejRexzUOPVypG+xM9DiU8AHxyoTPXiXa2gdUhXtv6Mf+h qX0/EnTa5hOJaarmTGiAqgbbMBZgTDggZjMrjjGSepC+rp3n+iP9ko+f2AAGi56x Iyb2Qjp8nfBENGLBmFJu3OdBJi9lpfS9PYzS3b23kUFD4jelOFrHZ1DhAEkbQYWm ahfxlE6JjNf2ruVR2JzFev+vvn3qA0N6qMlT5Ek02oEJWt/RIn0br4n2NwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFuDP4MDooOZNpBhCpGFpcm2gr/7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2RmMjE1 Yi0zNWU3LTRjY2MtYWE4Yy1jMTI4ZjI3Y2NjNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZGYyMTVi LTM1ZTctNGNjYy1hYThjLWMxMjhmMjdjY2M3OC8xL1c0TV9nd09pZzVrMmtHRUtr WVdseWJhQ3Zfcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW93gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDLgjANBgkqhkiG9w0BAQsFAAOCAQEAEsui9hex/6odO0mum7ozKZ6B++pd6n5a NAVczJdlaq5E38lOzLDJ0yPVNZ9UluTroUVIwkxGn1thEziQ+We4sOsOw+Itk2MX vWBqZnJB1wDL9dT4JHsK8NGh1TBLO+ASH2ZLJnQ/T/hGQtEWNO7csNaMFfY+J3YC iGJhk0COQeHXrtNZXwVyZi4Ue87MW1bCXfy/Mme7znOsN5gEMbEbNTsMF+Tq+Uq+ 6WkQbCSxp5hq/vaBHSJGkFoXmguiBw/HGEE0j7PVlG17DDp+T46DdBlWg8iLwnnC gTsvy3po9aPT1t91RWmvu18tOTvwpqVV9LdqhpF4LvAtDjHD3hpK2A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:23 2026 by rpki-client