This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer File: W67rTDpphRQSVf1fauGIQGc0j0E.cer (raw, json) Hash identifier: JqsGVj53vvP2yXnRZbFWqIWD0UDT9bIiqKa+JWq4T/U= Subject key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3876C5D0F67282C6814E01D4B7B68C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43684 AS: 48160 AS: 57762 IP: 91.207.142.0/23 IP: 91.233.132.0/22 IP: 91.234.224.0/23 IP: 185.85.160.0/22 IP: 2a0b:1380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:76:c5:d0:f6:72:82:c6:81:4e:01:d4:b7:b6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:8b:9c:84:01:80:84:2e:1c:6f:90:9d:c6: bd:ae:1b:00:a6:43:a2:6f:ff:ce:14:31:7d:11:0b: 3f:7b:83:25:f5:cf:d2:7d:04:c5:0f:c6:06:91:50: a1:c6:13:87:7c:7e:d4:b2:9c:71:5e:d4:9e:09:ee: bf:0a:d9:e2:be:db:62:4d:bc:05:7b:ce:15:64:06: 61:31:2c:a7:8e:f2:4b:fc:e7:0a:7b:75:7c:a6:10: a5:34:3a:90:39:38:bc:b8:c2:99:bd:a6:7c:8c:64: b6:0b:59:dd:33:b4:ca:d9:20:0e:75:e5:dd:05:f2: fd:68:1e:33:a8:b6:66:64:a4:c7:cd:05:f1:d4:3f: 73:e6:1e:58:cc:9f:87:a5:7e:ff:d8:2a:f1:45:25: f7:4f:f6:6b:37:bc:ae:c6:90:dd:8f:13:7c:5d:24: 84:09:2b:d3:a4:11:db:72:bb:14:ff:94:6e:f0:3a: 6f:94:2c:8d:5d:f9:3e:ea:d5:a1:be:ab:cd:fe:1b: ad:79:90:f6:08:28:6a:bd:47:1d:df:6f:a3:65:d5: 5c:77:54:7b:42:7e:98:9b:e4:85:37:cb:2c:97:cc: 07:03:75:6c:b1:ed:b8:15:c8:b3:b3:fd:f9:73:3a: 0d:98:95:b8:89:7e:65:60:4a:37:46:91:14:c1:50: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.142.0/23 91.233.132.0/22 91.234.224.0/23 185.85.160.0/22 IPv6: 2a0b:1380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43684 48160 57762 Signature Algorithm: sha256WithRSAEncryption 48:00:69:ca:6d:7d:46:d4:b2:d7:03:96:20:18:30:66:75:70: 34:4a:72:2b:48:35:85:e4:c3:46:98:81:76:7a:7c:ec:bb:0f: 97:9a:2b:05:98:6c:f7:14:84:02:31:d5:31:53:f5:fe:32:2e: e9:ea:34:ff:3e:6b:ea:d5:e3:fb:9b:9e:19:8d:c1:8c:d0:40: 34:f6:66:8c:ac:80:72:56:ce:8d:a6:ce:ec:fa:cc:7f:67:06: 61:4d:fe:6c:d0:0e:ed:4b:1d:80:39:9b:42:64:f8:11:7f:af: 67:eb:68:f1:fd:6d:01:3d:fa:a8:6f:30:01:53:8a:4f:01:27: b9:d8:7b:0b:ca:07:7e:ab:79:be:d5:0e:82:86:8a:d5:6c:0b: c3:04:4a:f2:5b:d3:cd:94:00:65:c3:68:1d:a7:f1:7b:ad:9f: 52:0a:84:cd:02:e5:da:77:c0:da:0f:1f:62:e9:58:77:86:fa: f1:66:0a:d9:bb:a7:c6:36:2e:d2:db:e9:e9:05:92:f4:3c:a8: e6:25:04:c2:26:54:63:60:e1:3d:d4:bc:7d:fd:82:4e:85:32: a6:73:1c:1c:21:09:b1:9b:29:4f:1a:d1:64:9b:93:f5:28:1a: 35:d6:2f:79:34:fc:05:8e:b4:9e:b0:68:eb:61:b2:0b:86:f7: 9a:a2:42:31 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt+OHbF0PZygsaBTgHUt7aMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmFlZWI0YzNhNjk4NTE0MTI1NWZkNWY2YWUxODg0MDY3MzQ4ZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRiLnIQBgIQuHG+Qnca9rhsApkOi b//OFDF9EQs/e4Ml9c/SfQTFD8YGkVChxhOHfH7UspxxXtSeCe6/CtnivttiTbwF e84VZAZhMSynjvJL/OcKe3V8phClNDqQOTi8uMKZvaZ8jGS2C1ndM7TK2SAOdeXd BfL9aB4zqLZmZKTHzQXx1D9z5h5YzJ+HpX7/2CrxRSX3T/ZrN7yuxpDdjxN8XSSE CSvTpBHbcrsU/5Ru8DpvlCyNXfk+6tWhvqvN/huteZD2CChqvUcd32+jZdVcd1R7 Qn6Ym+SFN8ssl8wHA3Vsse24Fcizs/35czoNmJW4iX5lYEo3RpEUwVAwGwIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFFuu60w6aYUUElX9X2rhiEBnNI9BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2I0YjAx YS0wNzQ2LTQ1ZmYtYWY0MS0xNWUyODhiNGE1N2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvYjRiMDFh LTA3NDYtNDVmZi1hZjQxLTE1ZTI4OGI0YTU3ZC8xL1c2N3JURHBwaFJRU1ZmMWZh dUdJUUdjMGowRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQBW8+OAwQCW+mEAwQBW+rgAwQCuVWgMA0EAgAC MAcDBQMqCxOAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCqpAIDALwgAgMA4aIw DQYJKoZIhvcNAQELBQADggEBAEgAacptfUbUstcDliAYMGZ1cDRKcitINYXkw0aY gXZ6fOy7D5eaKwWYbPcUhAIx1TFT9f4yLunqNP8+a+rV4/ubnhmNwYzQQDT2Zoys gHJWzo2mzuz6zH9nBmFN/mzQDu1LHYA5m0Jk+BF/r2fraPH9bQE9+qhvMAFTik8B J7nYewvKB36reb7VDoKGitVsC8MESvJb082UAGXDaB2n8Xutn1IKhM0C5dp3wNoP H2LpWHeG+vFmCtm7p8Y2LtLb6ekFkvQ8qOYlBMImVGNg4T3UvH39gk6FMqZzHBwh CbGbKU8a0WSbk/UoGjXWL3k0/AWOtJ6waOthsguG95qiQjE= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:05 2026 by rpki-client