This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer File: WCXq-3jz1WkmUXwqPNUzmqUTht4.cer (raw, json) Hash identifier: Riq8zu99js0qPScOJ4AWJinddHELEd9CMwcYZrqvs8U= Subject key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3929B6B0E9097F35BAD5DD3A79189 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211706 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:92:9b:6b:0e:90:97:f3:5b:ad:5d:d3:a7:91:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5825eafb78f3d56926517c2a3cd5339aa51386de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:52:3b:c8:e8:bc:56:ac:88:05:49:a7:1f:20: 35:8d:9f:90:41:00:f9:fa:85:f6:dd:ca:1c:c2:4c: 60:1a:d6:5c:01:e9:aa:1e:75:45:a2:98:7c:35:99: e5:20:68:2f:c2:1c:2d:d9:63:f8:08:48:f9:f5:b7: 41:69:f8:f1:c8:6d:f0:a4:8b:8c:01:21:21:df:c7: 0b:d4:56:5c:0d:09:04:43:79:27:f5:30:4e:4f:b4: 0c:91:0d:1f:ad:d1:8d:bb:f3:65:8b:16:09:e8:5a: 3c:99:80:53:21:13:81:ec:9e:da:c6:63:f1:5c:f3: 1e:8f:ba:1e:ea:b5:e4:61:fd:dd:e3:dc:31:f6:2a: 30:ec:40:19:e1:00:3f:ac:b2:c7:e8:94:c8:58:20: 3d:e5:b6:a0:c5:81:c6:2b:90:53:c8:ce:25:90:af: 4b:09:d8:be:ee:2c:2e:db:6e:2e:45:5e:d6:ed:12: 41:87:06:d2:25:1c:5e:86:cf:79:a9:b7:ff:88:ce: 10:cb:c2:35:15:a5:81:0c:76:d6:00:8d:1f:e1:77: 42:94:fb:0a:f0:a1:2d:f4:02:4e:8d:14:c1:04:dc: 14:06:8d:00:95:dc:70:5a:e5:07:ae:57:c6:30:9c: b2:68:ae:cd:30:27:4e:4b:63:23:74:fe:d3:17:77: 39:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211706 Signature Algorithm: sha256WithRSAEncryption 78:b4:25:69:10:37:60:06:32:7c:d4:19:49:2b:08:e7:c4:f7: 72:c1:11:73:47:cd:e4:b4:e3:38:34:03:c5:d5:9d:90:24:b8: 90:81:3b:b3:4b:f7:b1:89:94:2c:b6:9e:82:76:2e:15:a6:87: d1:5f:17:1a:05:d6:ad:23:c3:fb:5b:10:23:3e:7c:8f:35:cd: d1:d9:38:db:39:ce:02:40:bb:aa:b9:f3:59:44:df:94:11:8f: 60:85:8a:a0:51:6d:e4:f7:7e:f0:9e:84:0c:73:4d:fa:f0:ad: 5f:4c:13:cf:66:a2:93:c5:9c:c1:d4:46:a5:30:e3:65:c6:65: 77:e3:90:9b:e5:36:d5:9f:4d:65:1b:b7:09:03:ba:85:d2:3a: 3b:5b:a6:04:ea:00:c9:7b:5a:4e:ab:32:97:c7:b3:43:a1:25: 50:7e:14:cf:80:dc:41:6b:c3:52:d2:19:7f:9c:0c:30:3d:7b: 17:23:2b:70:a0:af:ab:4b:ce:ee:24:68:e2:2c:05:9d:52:64: 31:d9:24:ba:02:f2:0b:7e:ab:97:2b:7d:99:83:d9:27:f2:44: f9:2a:22:16:e5:f0:47:ba:cb:64:b7:05:e3:41:e6:4d:86:4b: fb:14:a7:2d:0d:d5:9c:35:2b:28:1d:26:f2:82:01:f9:5f:e2: 44:dd:3d:7a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7o5Kbaw6Ql/NbrV3Tp5GJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODI1ZWFmYjc4ZjNkNTY5MjY1MTdjMmEzY2Q1MzM5YWE1MTM4NmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslI7yOi8VqyIBUmnHyA1jZ+QQQD5 +oX23cocwkxgGtZcAemqHnVFoph8NZnlIGgvwhwt2WP4CEj59bdBafjxyG3wpIuM ASEh38cL1FZcDQkEQ3kn9TBOT7QMkQ0frdGNu/NlixYJ6Fo8mYBTIROB7J7axmPx XPMej7oe6rXkYf3d49wx9iow7EAZ4QA/rLLH6JTIWCA95bagxYHGK5BTyM4lkK9L Cdi+7iwu224uRV7W7RJBhwbSJRxehs95qbf/iM4Qy8I1FaWBDHbWAI0f4XdClPsK 8KEt9AJOjRTBBNwUBo0AldxwWuUHrlfGMJyyaK7NMCdOS2MjdP7TF3c5FQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFgl6vt489VpJlF8KjzVM5qlE4beMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3L2ZhODI1 Yi1jYWU2LTQ3N2ItYWJmYy1kNWM2YWUyNjI1YWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvZmE4MjVi LWNhZTYtNDc3Yi1hYmZjLWQ1YzZhZTI2MjVhYS8xL1dDWHEtM2p6MVdrbVVYd3FQ TlV6bXFVVGh0NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6+jANBgkqhkiG9w0BAQsFAAOCAQEAeLQlaRA3YAYy fNQZSSsI58T3csERc0fN5LTjODQDxdWdkCS4kIE7s0v3sYmULLaegnYuFaaH0V8X GgXWrSPD+1sQIz58jzXN0dk42znOAkC7qrnzWUTflBGPYIWKoFFt5Pd+8J6EDHNN +vCtX0wTz2aik8WcwdRGpTDjZcZld+OQm+U21Z9NZRu3CQO6hdI6O1umBOoAyXta Tqsyl8ezQ6ElUH4Uz4DcQWvDUtIZf5wMMD17FyMrcKCvq0vO7iRo4iwFnVJkMdkk ugLyC36rlyt9mYPZJ/JE+SoiFuXwR7rLZLcF40HmTYZL+xSnLQ3VnDUrKB0m8oIB +V/iRN09eg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:18 2026 by rpki-client