This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W71IGEEVS878rKezBFwL70pzTbI.cer File: W71IGEEVS878rKezBFwL70pzTbI.cer (raw, json) Hash identifier: DGzR5h6suPLeLbw8MkimA0ETT8e0jwqkZl41QYqhU10= Subject key identifier: 5B:BD:48:18:41:15:4B:CE:FC:AC:A7:B3:04:5C:0B:EF:4A:73:4D:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA64910F585A2FC2D65220D7D99BDEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/W71IGEEVS878rKezBFwL70pzTbI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213940 IP: 64.39.228.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:49:10:f5:85:a2:fc:2d:65:22:0d:7d:99:bd:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bbd481841154bcefcaca7b3045c0bef4a734db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:61:2f:26:65:73:a2:f4:50:41:50:35:99: b8:34:64:0d:36:1b:01:59:72:5c:d9:17:00:85:d6: 28:b7:48:20:81:9e:5a:c1:32:90:90:fb:02:d5:45: b6:07:49:0c:5d:8c:b5:48:c2:dd:f1:39:15:ca:63: ed:d3:79:40:17:15:f4:5f:18:e8:cc:5c:62:b1:14: 3d:99:60:5b:c9:31:da:f6:c3:87:e9:09:e1:07:80: 4e:5f:14:52:0e:ee:b2:0c:55:89:b9:d7:80:5a:ee: 33:94:f6:b2:69:8a:9f:55:10:ab:a6:56:89:da:d4: c4:55:4b:7c:8a:00:45:a1:d4:b1:db:2c:b4:1a:80: 2d:10:b4:2d:08:23:0c:86:09:de:96:fc:c3:ff:a8: 6f:65:23:ae:da:66:02:0a:01:39:85:df:89:87:5e: c0:b1:9c:f0:05:50:96:3a:2f:a8:d0:6a:4f:9f:72: 47:d8:55:ed:f2:73:25:9e:ca:e7:3e:7c:c9:38:46: c4:bb:6c:c0:73:87:8d:29:78:72:a3:72:31:ca:d3: e8:dd:bd:eb:83:6a:36:a3:06:4d:1e:b7:e6:0a:40: 2d:f3:b6:2f:0a:b1:79:3a:40:01:1b:9d:0b:60:2e: d9:ca:85:1e:1e:4a:87:90:54:4d:3a:7b:eb:0c:8f: f1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BD:48:18:41:15:4B:CE:FC:AC:A7:B3:04:5C:0B:EF:4A:73:4D:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/5dc195-0d99-483e-b449-ce227042dda2/1/W71IGEEVS878rKezBFwL70pzTbI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.39.228.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213940 Signature Algorithm: sha256WithRSAEncryption 7e:e1:2d:05:a7:49:ea:4c:25:4e:be:1c:ec:ea:14:98:5b:91: b3:72:44:9a:3c:d3:09:75:94:e7:d3:65:67:c4:8f:9d:c3:36: c6:85:32:29:fb:da:f7:6d:41:75:09:0c:5c:e5:ce:5a:13:3a: b1:66:f8:e4:bf:c3:0e:58:ad:c9:e6:d4:38:5d:34:55:cf:5c: f2:ff:a5:b4:c9:e0:c6:bd:1f:49:e2:81:94:ec:66:ba:3e:b9: 96:d9:ad:11:82:d6:fb:13:dd:9e:6f:46:d3:eb:ee:18:72:cb: e6:c5:f4:dc:f9:ff:4b:99:3f:a8:34:53:63:1c:7d:dd:29:f6: e6:72:27:12:01:87:e1:e5:a5:a9:a4:87:8d:2d:dc:a8:bf:8f: 18:79:92:49:9f:df:6d:1b:a7:36:4b:8d:2a:97:0a:36:6b:04: aa:a1:6d:ad:4b:bb:14:40:49:6c:53:99:ed:83:31:11:a6:37: 5b:f2:f1:eb:77:24:78:23:61:27:19:99:71:38:b9:ab:25:16: 55:98:a2:48:ae:06:4c:34:8b:41:5e:2a:b9:ed:3c:27:e6:96: 2b:94:60:34:3e:ee:99:89:07:1d:6f:51:5c:75:ab:0f:c0:2d: 19:1d:63:e9:91:c0:bb:d3:38:02:a8:c4:72:ee:11:fd:e9:19: 4b:94:7f:41 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pkkQ9YWi/C1lIg19mb3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmJkNDgxODQxMTU0YmNlZmNhY2E3YjMwNDVjMGJlZjRhNzM0ZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYBhLyZlc6L0UEFQNZm4NGQNNhsB WXJc2RcAhdYot0gggZ5awTKQkPsC1UW2B0kMXYy1SMLd8TkVymPt03lAFxX0Xxjo zFxisRQ9mWBbyTHa9sOH6QnhB4BOXxRSDu6yDFWJudeAWu4zlPayaYqfVRCrplaJ 2tTEVUt8igBFodSx2yy0GoAtELQtCCMMhgnelvzD/6hvZSOu2mYCCgE5hd+Jh17A sZzwBVCWOi+o0GpPn3JH2FXt8nMlnsrnPnzJOEbEu2zAc4eNKXhyo3IxytPo3b3r g2o2owZNHrfmCkAt87YvCrF5OkABG50LYC7ZyoUeHkqHkFRNOnvrDI/xtwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFu9SBhBFUvO/KynswRcC+9Kc02yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzVkYzE5 NS0wZDk5LTQ4M2UtYjQ0OS1jZTIyNzA0MmRkYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvNWRjMTk1 LTBkOTktNDgzZS1iNDQ5LWNlMjI3MDQyZGRhMi8xL1c3MUlHRUVWUzg3OHJLZXpC RndMNzBwelRiSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAQCfkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNDtDANBgkqhkiG9w0BAQsFAAOCAQEAfuEtBadJ6kwlTr4c7OoUmFuRs3JEmjzT CXWU59NlZ8SPncM2xoUyKfva921BdQkMXOXOWhM6sWb45L/DDlityebUOF00Vc9c 8v+ltMngxr0fSeKBlOxmuj65ltmtEYLW+xPdnm9G0+vuGHLL5sX03Pn/S5k/qDRT Yxx93Sn25nInEgGH4eWlqaSHjS3cqL+PGHmSSZ/fbRunNkuNKpcKNmsEqqFtrUu7 FEBJbFOZ7YMxEaY3W/Lx63ckeCNhJxmZcTi5qyUWVZiiSK4GTDSLQV4que08J+aW K5RgND7umYkHHW9RXHWrD8AtGR1j6ZHAu9M4AqjEcu4R/ekZS5R/QQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:57 2026 by rpki-client