This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer File: WAFcyNofG780PiarII34uyb9U64.cer (raw, json) Hash identifier: rOjaDdgnfssMfg6A0/KCYn1Hf3z7VlLgFQPIf/BoL/A= Subject key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE563694F776259C1241226ADD34F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15576 AS: 39040 AS: 43800 IP: 77.95.120.0/21 IP: 85.118.216.0/21 IP: 185.54.4.0 -- 185.54.6.255 IP: 185.63.149.0 -- 185.63.151.255 IP: 193.34.136.0/23 IP: 194.187.88.0/22 IP: 212.103.64.0/19 IP: 217.11.208.0/20 IP: 217.146.160.0/20 IP: 2a00:c38::/32 IP: 2a02:388::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:56:36:94:f7:76:25:9c:12:41:22:6a:dd:34:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:f1:3e:62:42:ae:38:81:07:b6:5f:fc:5e: db:b2:b6:5c:38:b8:ca:07:76:63:5f:eb:12:f7:55: 91:81:9d:a5:11:6a:c0:f4:04:2a:60:76:c8:68:7d: 6f:67:0d:be:68:d2:38:ea:d5:49:4c:df:7a:36:1a: 21:5d:5b:5d:ce:ba:e0:30:e5:35:f3:65:28:22:29: f9:2d:e4:31:1e:8b:ef:e5:dc:94:96:d3:47:80:40: 11:47:38:df:8b:51:d1:c0:94:09:80:50:7e:58:b8: 12:5d:b9:0f:80:94:01:8b:8c:a7:2d:2e:7b:db:59: 1f:0b:31:71:93:c7:43:93:0b:a8:f2:bb:17:62:f1: 3e:26:df:08:e5:09:28:b7:ed:4b:0b:cf:b8:95:69: c0:aa:90:c6:2a:1b:ff:5a:60:e1:30:99:34:68:c6: 4f:0d:02:17:cd:29:c9:62:44:b7:ff:23:db:c3:c5: 75:e4:7f:58:c8:40:f2:64:e7:40:c7:94:fd:e0:60: 46:b3:6e:8c:e5:25:ce:1a:ab:f1:d5:30:f3:5c:d1: 87:0a:48:e4:e0:eb:cf:06:ca:7b:a2:85:16:83:29: 0b:b0:16:49:46:bc:80:d8:c6:e1:f7:40:19:47:dd: 7a:e4:78:fb:db:31:48:e1:92:d9:95:e7:cc:3a:b0: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.120.0/21 85.118.216.0/21 185.54.4.0-185.54.6.255 185.63.149.0-185.63.151.255 193.34.136.0/23 194.187.88.0/22 212.103.64.0/19 217.11.208.0/20 217.146.160.0/20 IPv6: 2a00:c38::/32 2a02:388::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15576 39040 43800 Signature Algorithm: sha256WithRSAEncryption 57:1f:03:4d:39:75:28:d4:fa:f3:8c:7d:6a:d8:e1:01:66:45: 30:3d:85:08:b7:92:35:92:1e:f2:21:90:d8:c0:06:a8:bd:fb: 1d:3b:aa:56:87:ad:00:2b:63:14:fd:ce:ae:2c:8a:82:68:90: cd:b9:02:6d:16:93:99:e9:ef:b6:8a:f1:de:08:e1:62:c5:08: 59:75:0a:e7:04:db:e2:ce:fc:18:bd:f0:ff:54:6c:37:7e:e4: c1:fe:1f:d4:94:fa:fb:87:ce:f3:92:6a:93:54:69:ee:33:1d: f9:4f:8f:b3:51:4a:a5:46:54:a7:de:7b:ac:9b:ff:35:ad:8f: 73:d4:b6:87:ad:01:a9:b2:17:71:6f:40:20:27:68:cb:a5:79: 09:60:f1:7c:af:3d:e4:16:65:d4:1d:b5:d5:3a:28:24:2e:97: 5f:c1:33:57:64:a7:55:b2:10:9f:c8:4b:5c:f2:a1:d8:f4:55: ae:b6:97:ee:43:44:7c:35:c0:f4:07:be:6b:5d:7b:07:a9:2a: 15:10:d0:87:47:ea:5e:84:68:16:75:f5:f0:04:23:0e:fa:f3: d6:b4:b1:9b:ee:4e:b8:45:fc:4f:4d:ca:2e:7d:12:29:23:2e: c6:5c:fe:91:bf:57:91:65:c8:20:56:c4:51:4f:3b:73:d6:b0: 65:9e:34:fe -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISAZt87lY2lPd2JZwSQSJq3TT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODAxNWNjOGRhMWYxYmJmMzQzZTI2YWIyMDhkZjhiYjI2ZmQ1M2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIzxPmJCrjiBB7Zf/F7bsrZcOLjK B3ZjX+sS91WRgZ2lEWrA9AQqYHbIaH1vZw2+aNI46tVJTN96NhohXVtdzrrgMOU1 82UoIin5LeQxHovv5dyUltNHgEARRzjfi1HRwJQJgFB+WLgSXbkPgJQBi4ynLS57 21kfCzFxk8dDkwuo8rsXYvE+Jt8I5Qkot+1LC8+4lWnAqpDGKhv/WmDhMJk0aMZP DQIXzSnJYkS3/yPbw8V15H9YyEDyZOdAx5T94GBGs26M5SXOGqvx1TDzXNGHCkjk 4OvPBsp7ooUWgykLsBZJRryA2Mbh90AZR9165Hj72zFI4ZLZlefMOrBMPQIDAQAB o4IC/zCCAvswHQYDVR0OBBYEFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1L2Q0MTc1 ZC0xOTJjLTQxOGMtOTcyZi04ZWUyMWI3NGRkNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZDQxNzVk LTE5MmMtNDE4Yy05NzJmLThlZTIxYjc0ZGQ1Ni8xL1dBRmN5Tm9mRzc4MFBpYXJJ STM0dXliOVU2NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHUGCCsGAQUF BwEHAQH/BGYwZDBMBAIAATBGAwQDTV94AwQDVXbYMAwDBAK5NgQDBAC5NgYwDAME ALk/lQMEA7k/kAMEAcEiiAMEAsK7WAMEBdRnQAMEBNkL0AMEBNmSoDAUBAIAAjAO AwUAKgAMOAMFACoCA4gwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICPNgCAwCYgAID AKsYMA0GCSqGSIb3DQEBCwUAA4IBAQBXHwNNOXUo1PrzjH1q2OEBZkUwPYUIt5I1 kh7yIZDYwAaovfsdO6pWh60AK2MU/c6uLIqCaJDNuQJtFpOZ6e+2ivHeCOFixQhZ dQrnBNvizvwYvfD/VGw3fuTB/h/UlPr7h87zkmqTVGnuMx35T4+zUUqlRlSn3nus m/81rY9z1LaHrQGpshdxb0AgJ2jLpXkJYPF8rz3kFmXUHbXVOigkLpdfwTNXZKdV shCfyEtc8qHY9FWutpfuQ0R8NcD0B75rXXsHqSoVENCHR+pehGgWdfXwBCMO+vPW tLGb7k64RfxPTcoufRIpIy7GXP6Rv1eRZcggVsRRTztz1rBlnjT+ -----END CERTIFICATE-----Generated at Mon Jan 26 20:52:42 2026 by rpki-client