This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer File: W7XwXxK1IHaGju_NFK_OwZL-LPI.cer (raw, json) Hash identifier: pxz8OoOMIRQaC0RQ8WTkeseJrl6grXeYMP0Pu+8CLtQ= Subject key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37958DF5532BC411B85472E1C32FF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57869 IP: 5.154.168.0/23 IP: 5.154.228.0/23 IP: 5.154.248.0/22 IP: 82.118.0.0/20 IP: 185.36.68.0/22 IP: 213.91.96.0/20 IP: 2a00:ed60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:95:8d:f5:53:2b:c4:11:b8:54:72:e1:c3:2f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:80:5d:36:8b:9d:bf:c1:ee:de:9b:ab:2c: 47:4b:d6:89:ff:0b:40:97:c0:3a:e1:6a:45:42:6e: 87:af:f5:e9:36:69:f6:3e:08:8e:2b:8c:4a:37:d1: 94:66:7f:4a:c9:10:3c:bb:f6:3f:4c:e4:51:e0:c2: 48:ac:77:1d:9c:ff:57:a7:2b:a3:f6:7a:d9:32:77: cd:8a:2f:ff:79:65:d8:e6:6e:87:93:b7:47:a3:b1: 3d:98:4c:41:3a:96:c8:a9:49:bd:34:12:cd:5b:7b: ec:fe:61:d2:9f:dd:0b:73:c9:5c:0a:85:88:8c:14: 2e:e2:14:ef:b9:c0:89:84:d7:b2:a4:f5:c6:8e:49: 51:f9:66:f7:4b:d2:55:4b:a6:df:1f:ce:cb:9c:7b: 56:7c:e4:b8:6c:ca:6d:da:b8:4f:0f:4e:c6:d2:0f: 6c:08:bd:e3:55:83:b9:57:f4:50:b6:84:17:6f:f4: 8e:04:86:26:64:fa:66:6b:e2:1e:74:62:08:0d:28: 6a:5f:c5:23:8a:a1:28:c6:e6:73:5a:80:e3:8a:58: 13:4d:1b:17:8c:cd:e5:dc:5f:6b:74:2b:05:c9:f0: 81:91:c9:f4:78:5e:91:11:27:cc:f9:b3:4c:86:fc: ca:f1:d3:47:e2:87:f3:0b:73:79:3c:08:4b:66:fc: 4c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.168.0/23 5.154.228.0/23 5.154.248.0/22 82.118.0.0/20 185.36.68.0/22 213.91.96.0/20 IPv6: 2a00:ed60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57869 Signature Algorithm: sha256WithRSAEncryption 12:be:c5:ff:55:ce:69:b0:e5:a0:57:06:af:ba:c1:90:68:3e: 04:a6:a0:7c:63:71:d8:0a:04:5b:36:72:e8:21:25:ba:fd:ee: f7:47:41:a6:79:38:02:f3:db:21:11:ec:7b:99:e2:c3:97:d9: 4e:ef:a6:c1:e9:7f:e4:3d:34:8f:c1:16:7d:b7:b3:47:7a:06: 1f:a8:ec:b9:12:48:96:6e:b4:8f:b0:e2:90:c1:16:63:e1:ac: f6:b3:8f:3d:04:b3:6c:1d:7b:dc:56:29:3d:cb:3c:b9:2f:28: 12:f6:a9:04:e6:b3:c5:c0:79:3b:f0:f6:05:77:6b:a0:c4:d2: 4e:f8:bb:f3:f0:e6:27:43:3a:a8:c0:95:0a:9d:87:27:f6:f4: 08:c7:24:28:38:d4:a8:a2:81:ef:fc:f9:7a:49:78:ac:4b:58: 44:21:bb:36:eb:01:be:1c:30:b5:27:9a:fa:a1:87:27:af:3c: 6f:ed:db:e0:91:27:da:d0:b0:01:29:b5:18:59:1c:ba:bb:ec: 53:e4:97:64:3a:e2:a4:8d:60:09:ad:cc:13:d0:71:2c:27:4a: 56:45:0f:e7:a9:c1:77:db:48:7d:67:07:b9:c9:71:9f:f8:e7: c5:9a:94:6e:5c:9f:f5:5c:dc:01:f0:26:11:85:4a:c4:47:33: 70:a1:87:8d -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt+N5WN9VMrxBG4VHLhwy/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmI1ZjA1ZjEyYjUyMDc2ODY4ZWVmY2QxNGFmY2VjMTkyZmUyY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAWAXTaLnb/B7t6bqyxHS9aJ/wtA l8A64WpFQm6Hr/XpNmn2PgiOK4xKN9GUZn9KyRA8u/Y/TORR4MJIrHcdnP9Xpyuj 9nrZMnfNii//eWXY5m6Hk7dHo7E9mExBOpbIqUm9NBLNW3vs/mHSn90Lc8lcCoWI jBQu4hTvucCJhNeypPXGjklR+Wb3S9JVS6bfH87LnHtWfOS4bMpt2rhPD07G0g9s CL3jVYO5V/RQtoQXb/SOBIYmZPpma+IedGIIDShqX8UjiqEoxuZzWoDjilgTTRsX jM3l3F9rdCsFyfCBkcn0eF6RESfM+bNMhvzK8dNH4ofzC3N5PAhLZvxMiwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFFu18F8StSB2ho7vzRSvzsGS/izyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzk4YWRj MS02ZmY4LTQ5NTktYTM0NC1kYjZjYTZlNGQ0YTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvOThhZGMx LTZmZjgtNDk1OS1hMzQ0LWRiNmNhNmU0ZDRhMy8xL1c3WHdYeEsxSUhhR2p1X05G S19Pd1pMLUxQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQBBZqoAwQBBZrkAwQCBZr4AwQEUnYAAwQCuSRE AwQE1VtgMA0EAgACMAcDBQAqAO1gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDi DTANBgkqhkiG9w0BAQsFAAOCAQEAEr7F/1XOabDloFcGr7rBkGg+BKagfGNx2AoE WzZy6CEluv3u90dBpnk4AvPbIRHse5niw5fZTu+mwel/5D00j8EWfbezR3oGH6js uRJIlm60j7DikMEWY+Gs9rOPPQSzbB173FYpPcs8uS8oEvapBOazxcB5O/D2BXdr oMTSTvi78/DmJ0M6qMCVCp2HJ/b0CMckKDjUqKKB7/z5ekl4rEtYRCG7NusBvhww tSea+qGHJ688b+3b4JEn2tCwASm1GFkcurvsU+SXZDripI1gCa3ME9BxLCdKVkUP 56nBd9tIfWcHuclxn/jnxZqUblyf9VzcAfAmEYVKxEczcKGHjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:35 2026 by rpki-client