This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer File: W4smxTL7xStd5nKrNXYdHH2X6yY.cer (raw, json) Hash identifier: gQFp/wxdtMal5iYk1G+cIV6fSuh5YbK/SjK3bvazMYI= Subject key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775917B91A9D50FF17DE027AE3FA6957 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 188.190.96.0/22 IP: 2a0d:d140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:17:b9:1a:9d:50:ff:17:de:02:7a:e3:fa:69:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:4e:10:b9:1f:47:d4:b5:97:6b:27:97:bc: 9e:88:fc:93:0b:5e:5e:d4:f2:17:ac:c1:ec:f3:76: bc:6c:52:8f:93:b6:4b:51:11:85:db:3e:3f:d2:6a: b3:39:35:d9:de:f6:97:c4:0a:46:03:f7:46:77:fe: 56:ab:df:c1:43:9d:4b:cd:36:9f:c7:99:d4:06:54: 5d:e4:73:25:7e:6c:5c:bb:7f:ae:bd:b4:11:24:00: 6c:9f:c6:df:45:e9:5f:68:00:e6:f0:d0:1a:4c:af: c4:c2:38:e0:47:9b:94:32:ae:6c:a2:1e:05:0d:10: 13:f4:75:94:a4:26:0c:20:12:43:1c:63:0c:bf:20: 43:f0:82:d4:0f:f6:3b:b9:98:af:d2:27:03:08:b1: 67:9e:4b:0b:80:c3:60:f5:1c:4f:8f:3d:74:b5:21: 23:ea:05:ae:a6:60:16:b8:94:c2:68:2f:d6:b9:7c: c8:3d:85:47:92:e0:30:b0:bd:93:5c:81:79:ca:09: 4e:e8:53:c6:ce:6e:c7:8c:62:80:30:33:2f:76:a4: 54:d0:b3:84:61:00:f5:b0:9d:74:79:91:3a:54:83: 0b:ad:87:07:62:83:5b:72:a2:0e:8d:cb:84:17:3f: d4:d8:6c:c1:96:f7:b6:2b:c6:2a:7d:ae:60:b0:b2: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.190.96.0/22 IPv6: 2a0d:d140::/29 Signature Algorithm: sha256WithRSAEncryption 2b:ce:06:71:7f:71:b3:8d:3f:59:e2:fa:2c:47:4d:37:fb:cc: c8:db:de:b1:fa:32:10:70:c0:0b:e2:bc:2b:e1:fa:59:b1:76: d9:97:af:b9:f1:c0:9a:ad:5b:60:04:27:73:e6:c9:24:34:fe: 8d:a5:99:38:80:d8:71:d5:75:b1:d7:5a:f5:07:c2:99:62:7c: 20:87:2c:a0:86:0d:ec:66:b3:d0:9a:7a:d1:7f:06:fa:05:1e: b6:61:de:38:c9:c9:26:74:5c:be:5a:46:73:95:de:97:6d:73: a6:54:f7:20:fe:14:7b:3c:58:c6:0f:a1:b5:50:57:00:c7:8c: fd:47:28:ea:05:28:b3:24:8d:5a:50:14:5f:15:b1:b1:a2:98: f6:f3:c7:9f:e0:90:42:ed:40:55:c7:a4:3b:5b:1d:51:11:c7: a3:66:64:70:01:98:e3:72:93:90:cb:8f:42:25:d8:e8:7b:3e: 0f:89:c6:e6:0c:60:c1:1b:be:7f:e1:34:43:53:86:10:5d:d3: fe:fa:03:47:aa:de:8b:23:7a:ed:81:72:89:23:ee:b4:f9:98: 76:8e:79:83:12:40:73:e9:75:b0:2c:3a:d4:f7:79:2b:36:fa: ed:f4:df:fe:d9:f6:ea:a0:9c:4e:cf:b2:89:94:1b:cd:1e:81: 3a:49:fd:11 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WRe5Gp1Q/xfeAnrj+mlXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjhiMjZjNTMyZmJjNTJiNWRlNjcyYWIzNTc2MWQxYzdkOTdlYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxBOELkfR9S1l2snl7yeiPyTC15e 1PIXrMHs83a8bFKPk7ZLURGF2z4/0mqzOTXZ3vaXxApGA/dGd/5Wq9/BQ51LzTaf x5nUBlRd5HMlfmxcu3+uvbQRJABsn8bfRelfaADm8NAaTK/EwjjgR5uUMq5soh4F DRAT9HWUpCYMIBJDHGMMvyBD8ILUD/Y7uZiv0icDCLFnnksLgMNg9RxPjz10tSEj 6gWupmAWuJTCaC/WuXzIPYVHkuAwsL2TXIF5yglO6FPGzm7HjGKAMDMvdqRU0LOE YQD1sJ10eZE6VIMLrYcHYoNbcqIOjcuEFz/U2GzBlve2K8Yqfa5gsLISNQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFuLJsUy+8UrXeZyqzV2HRx9l+smMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzg2NjRi Zi1lOTZhLTRjMGYtOGJlMy1lNzJlOWI0Yjc2NTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvODY2NGJm LWU5NmEtNGMwZi04YmUzLWU3MmU5YjRiNzY1OC8xL1c0c214VEw3eFN0ZDVuS3JO WFlkSEgyWDZ5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCvL5gMA0EAgACMAcDBQMqDdFAMA0GCSqGSIb3 DQEBCwUAA4IBAQArzgZxf3GzjT9Z4vosR003+8zI296x+jIQcMAL4rwr4fpZsXbZ l6+58cCarVtgBCdz5skkNP6NpZk4gNhx1XWx11r1B8KZYnwghyyghg3sZrPQmnrR fwb6BR62Yd44yckmdFy+WkZzld6XbXOmVPcg/hR7PFjGD6G1UFcAx4z9RyjqBSiz JI1aUBRfFbGxopj288ef4JBC7UBVx6Q7Wx1REcejZmRwAZjjcpOQy49CJdjoez4P icbmDGDBG75/4TRDU4YQXdP++gNHqt6LI3rtgXKJI+60+Zh2jnmDEkBz6XWwLDrU 93krNvrt9N/+2fbqoJxOz7KJlBvNHoE6Sf0R -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:44 2026 by rpki-client