This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer File: WA7nOx5qibTvUVvGfcmBcpak2Ks.cer (raw, json) Hash identifier: lEQHI6G9uv0qXd+5TLtB6HmjMUpsBpNifioGt5S/qg8= Subject key identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD09B6423D7003C78A51885B59F4152E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 18 Jan 2026 10:16:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56714 IP: 91.227.22.0/24 IP: 91.227.24.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:9b:64:23:d7:00:3c:78:a5:18:85:b5:9f:41:52:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 18 10:16:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:81:5c:22:4b:db:45:6d:f1:4d:30:55:25: d9:c7:f4:1a:ab:e6:5e:84:40:f4:58:39:5c:77:87: ed:b5:fa:34:c4:52:ee:19:ec:be:cc:03:b6:54:80: de:7b:5c:c7:f3:f3:ba:d2:70:4c:2c:2a:a2:ee:a9: c7:96:6f:85:38:e1:96:46:c9:c4:56:26:c3:be:94: 0f:cd:b1:4b:c9:0c:c5:c7:25:21:d9:b1:57:94:02: 23:41:a2:c4:17:26:57:bf:22:55:17:56:56:12:0c: 07:08:31:3c:e5:2a:9f:89:8a:80:6c:5d:56:cf:b0: 13:e0:12:1c:37:4e:bb:93:95:c9:16:e7:9e:74:5c: 2e:d9:c7:83:4a:cb:af:a0:8c:f6:5a:95:2b:ba:bb: 41:15:e2:bc:f6:d5:13:a5:e6:e9:e0:0c:10:75:5d: 07:27:8b:9b:5e:6a:54:16:47:db:b4:e1:9d:57:ff: cc:c8:f3:a5:c4:e2:92:9f:ed:44:be:84:af:32:db: 91:67:fe:8d:92:4b:80:02:96:db:d1:fb:b1:bb:ff: 8a:93:10:c9:57:b9:bd:06:6d:cd:ca:53:d4:a8:df: 84:37:6d:84:82:bb:3c:7f:88:5b:06:03:33:41:a3: b9:6e:a0:76:99:4d:bc:bf:99:f7:8e:3b:19:cb:58: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.22.0/24 91.227.24.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56714 Signature Algorithm: sha256WithRSAEncryption 1d:30:e5:b3:7e:fd:0f:e9:52:80:47:e0:89:9b:7b:61:82:87: fe:20:0a:2e:ed:fd:cb:dc:9a:c6:bc:ce:e4:8b:61:0a:28:1e: 5b:5d:c5:61:d2:71:99:2b:45:69:06:61:85:ba:87:46:0e:8e: 35:0d:c2:85:48:bc:23:ae:1b:64:a0:a4:64:4b:ef:dd:ed:57: 0a:3c:4d:d8:40:31:59:86:a5:38:c6:54:6f:72:71:6c:80:d4: 83:a9:e2:20:b8:e2:ed:cf:8e:5c:a8:c3:e5:32:b2:d3:32:d6: fd:51:72:ed:8b:e5:dc:a0:d2:75:28:b6:43:c9:41:d6:88:22: 8a:b6:f0:a3:e7:a9:87:2f:78:e8:f8:24:15:41:40:73:98:8e: 4e:33:60:32:69:ff:4a:55:e5:ca:cf:63:9e:ef:f7:73:32:da: 3d:ad:77:9b:23:33:b4:14:f9:a2:d4:3d:2c:b4:7c:fa:0f:22: 0a:d7:40:6e:36:21:49:6c:f1:67:28:50:ff:74:5d:78:c8:8d: 01:84:fa:47:07:42:8b:28:e4:d5:ad:00:86:3c:39:5b:4a:ca: 1f:84:be:0a:58:bd:e3:09:91:64:63:e7:ce:4d:67:8d:8f:cd: f9:2f:49:4f:5b:b3:d8:b9:8f:e3:53:01:07:f6:82:59:07:45: 74:8e:84:5d -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZvQm2Qj1wA8eKUYhbWfQVLnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE4MTAxNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODBlZTczYjFlNmE4OWI0ZWY1MTViYzY3ZGM5ODE3Mjk2YTRkOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqmBXCJL20Vt8U0wVSXZx/Qaq+Ze hED0WDlcd4fttfo0xFLuGey+zAO2VIDee1zH8/O60nBMLCqi7qnHlm+FOOGWRsnE VibDvpQPzbFLyQzFxyUh2bFXlAIjQaLEFyZXvyJVF1ZWEgwHCDE85SqfiYqAbF1W z7AT4BIcN067k5XJFueedFwu2ceDSsuvoIz2WpUrurtBFeK89tUTpebp4AwQdV0H J4ubXmpUFkfbtOGdV//MyPOlxOKSn+1EvoSvMtuRZ/6NkkuAApbb0fuxu/+KkxDJ V7m9Bm3NylPUqN+EN22Egrs8f4hbBgMzQaO5bqB2mU28v5n3jjsZy1jKQwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFFgO5zseaom071Fbxn3JgXKWpNirMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzE0NGMx OC05ZTllLTRlODEtOWJiYi1mYTZhMTg3NWI5NDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMTQ0YzE4 LTllOWUtNGU4MS05YmJiLWZhNmExODc1Yjk0Ny8xL1dBN25PeDVxaWJUdlVWdkdm Y21CY3BhazJLcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW+MWAwQBW+MYMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDdijANBgkqhkiG9w0BAQsFAAOCAQEAHTDls379D+lSgEfgiZt7YYKH /iAKLu39y9yaxrzO5IthCigeW13FYdJxmStFaQZhhbqHRg6ONQ3ChUi8I64bZKCk ZEvv3e1XCjxN2EAxWYalOMZUb3JxbIDUg6niILji7c+OXKjD5TKy0zLW/VFy7Yvl 3KDSdSi2Q8lB1ogiirbwo+ephy946PgkFUFAc5iOTjNgMmn/SlXlys9jnu/3czLa Pa13myMztBT5otQ9LLR8+g8iCtdAbjYhSWzxZyhQ/3RdeMiNAYT6RwdCiyjk1a0A hjw5W0rKH4S+Cli94wmRZGPnzk1njY/N+S9JT1uz2LmP41MBB/aCWQdFdI6EXQ== -----END CERTIFICATE-----Generated at Thu Jan 22 11:12:04 2026 by rpki-client