This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer File: WArULGTE9V_s54skJwcf5mhMIMk.cer (raw, json) Hash identifier: 1/2QR/YdO+sS1K/HwU8+YjDKjfmy3ZN1Oisl9WdFL7Y= Subject key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37235CFAB19B5009C7DDCBDD3AD98 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31239 IP: 195.225.236.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:72:35:cf:ab:19:b5:00:9c:7d:dc:bd:d3:ad:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=580ad42c64c4f55fece78b2427071fe6684c20c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:9f:ba:34:81:d7:e5:c5:7f:4d:cd:fe:2b: 36:67:39:da:ad:ce:81:f5:d8:c8:15:d2:51:92:8a: f5:10:bf:aa:dc:91:e1:58:46:04:2d:8b:11:98:db: 26:78:4d:da:6a:f0:95:6e:f6:bb:d3:7a:e7:1a:4c: de:f8:5d:07:4b:69:59:ee:fb:e8:ad:f8:b9:cb:70: 52:5c:38:9c:c7:31:11:a7:3b:c0:16:45:d2:0a:71: eb:ec:14:b8:66:00:b1:75:b0:c6:e0:aa:f0:bd:97: e9:d3:88:6a:c7:b7:6a:58:4a:c5:f4:0d:ba:da:8c: 85:4f:90:12:1c:03:fb:e0:76:ca:7a:58:b2:62:43: 01:e3:9d:56:55:51:50:c8:56:d6:41:84:2b:d2:7f: cf:0f:3d:aa:12:ab:b3:9b:9d:b5:5a:4b:e9:03:42: bb:fb:e8:33:43:7c:0e:3d:b1:9c:db:51:04:1c:5a: d5:a4:5a:81:c1:59:87:8e:b5:a2:96:93:5a:96:27: bd:36:80:d5:f3:0d:bc:a1:9c:69:6c:af:7c:49:73: 03:03:80:15:b2:92:31:0f:f3:93:39:88:68:fb:b2: de:ef:23:91:fd:7d:0e:f4:3a:21:fc:bf:ff:da:59: 7b:a0:a6:33:48:8a:10:cd:5d:16:b3:a6:4c:d5:8a: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31239 Signature Algorithm: sha256WithRSAEncryption 98:b9:e8:3a:ea:64:92:ab:36:b6:83:58:63:10:3f:bf:b8:d7: b5:90:4e:ea:32:6f:05:2d:dc:ca:c4:ce:5c:97:dc:3c:0a:1e: df:1f:7c:cc:5a:46:b2:6a:36:4e:69:bd:3d:dd:53:d5:56:b1: 2e:58:ff:f1:31:c4:69:9a:ea:06:5a:d7:48:e9:29:b2:a9:54: 42:11:d6:58:31:71:6e:0b:75:e7:68:d4:0b:35:4e:31:fe:94: 33:07:55:c9:05:23:5f:c0:af:94:3c:f6:ea:fc:8a:41:bc:a0: 2d:3f:a3:fb:11:b7:4f:d0:5e:a2:93:6e:60:52:c2:6f:04:64: c8:e0:5d:90:fe:f2:10:cb:d1:10:c3:53:e2:d3:cb:18:5c:16: 14:86:12:56:9c:a6:d1:7c:32:0b:1d:8f:07:47:e4:3c:02:e9: f4:00:f4:87:48:a3:20:00:db:38:a0:1e:bf:2b:50:86:64:aa: c8:43:60:a1:2d:b8:ef:08:28:0c:23:44:af:c9:56:cc:8d:30: 09:2e:41:0e:61:95:b5:4b:cc:91:cd:5f:fb:e5:26:44:d0:ba: d8:f9:78:b4:84:6c:ce:ac:a5:17:22:cc:47:96:91:55:da:00: 09:14:a0:14:92:df:dd:38:48:92:28:1b:8c:fa:35:0e:ea:75: 1e:97:8c:d5 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4o3I1z6sZtQCcfdy9062YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODBhZDQyYzY0YzRmNTVmZWNlNzhiMjQyNzA3MWZlNjY4NGMyMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbGfujSB1+XFf03N/is2Zznarc6B 9djIFdJRkor1EL+q3JHhWEYELYsRmNsmeE3aavCVbva703rnGkze+F0HS2lZ7vvo rfi5y3BSXDicxzERpzvAFkXSCnHr7BS4ZgCxdbDG4KrwvZfp04hqx7dqWErF9A26 2oyFT5ASHAP74HbKeliyYkMB451WVVFQyFbWQYQr0n/PDz2qEquzm521WkvpA0K7 ++gzQ3wOPbGc21EEHFrVpFqBwVmHjrWilpNalie9NoDV8w28oZxpbK98SXMDA4AV spIxD/OTOYho+7Le7yOR/X0O9Doh/L//2ll7oKYzSIoQzV0Ws6ZM1YonfwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFgK1CxkxPVf7OeLJCcHH+ZoTCDJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzhjYjM0 ZC05NGU3LTRlNTctOThiMS03MzY5YTQyNTcwMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvOGNiMzRk LTk0ZTctNGU1Ny05OGIxLTczNjlhNDI1NzAxNC8xL1dBclVMR1RFOVZfczU0c2tK d2NmNW1oTUlNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCw+HsMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnoHMA0GCSqGSIb3DQEBCwUAA4IBAQCYueg66mSSqza2g1hjED+/uNe1kE7qMm8F LdzKxM5cl9w8Ch7fH3zMWkayajZOab093VPVVrEuWP/xMcRpmuoGWtdI6SmyqVRC EdZYMXFuC3XnaNQLNU4x/pQzB1XJBSNfwK+UPPbq/IpBvKAtP6P7EbdP0F6ik25g UsJvBGTI4F2Q/vIQy9EQw1Pi08sYXBYUhhJWnKbRfDILHY8HR+Q8Aun0APSHSKMg ANs4oB6/K1CGZKrIQ2ChLbjvCCgMI0SvyVbMjTAJLkEOYZW1S8yRzV/75SZE0LrY +Xi0hGzOrKUXIsxHlpFV2gAJFKAUkt/dOEiSKBuM+jUO6nUel4zV -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:03 2026 by rpki-client