This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer File: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer (raw, json) Hash identifier: t7V4KNmrs7kkz6VrLWJKeaFNEBgIgu6cgzdvzfatgl8= Subject key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FE436F3CFFE39E94E393DC27C46B7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208070 IP: 45.159.168.0/22 IP: 2a01:fc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e4:36:f3:cf:fe:39:e9:4e:39:3d:c2:7c:46:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5871720a8884167fef82a49267661fb346d7561a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:48:37:8d:bc:b7:d6:eb:f6:f3:69:08:13:3b: cd:a8:47:33:6a:68:4b:db:33:1c:8f:6b:ef:20:b7: af:0e:25:b8:47:b2:e3:dd:65:d7:dc:01:59:0f:85: 17:bc:bf:5e:7e:74:2b:50:3f:f6:17:05:2c:d6:e2: 98:39:be:76:d0:3a:95:73:cd:56:a4:c9:8c:6d:e7: 41:70:6c:5e:14:56:b1:c7:c3:36:6b:ab:e3:09:02: 0e:07:7b:7d:76:a4:4e:df:f9:0d:0e:ff:4d:b8:01: 74:ce:b1:52:75:ff:38:0a:d6:89:bf:c7:5d:a3:73: 9e:85:29:87:ce:20:0e:af:b7:2b:c6:f1:fd:6a:41: 54:63:2a:f4:d7:45:82:26:c2:48:0a:a9:56:1d:b5: 62:7f:83:28:cf:30:f0:05:c5:d2:f3:77:a3:7b:8e: 14:df:5c:aa:cd:7e:89:38:1b:72:46:b3:4d:9d:6e: 8c:f8:1a:87:5c:80:8b:db:6a:e9:00:63:87:a6:6e: 50:20:79:d8:52:77:16:75:7d:30:e9:85:b3:28:a2: ce:93:4a:21:98:dc:15:94:51:f4:db:20:2d:76:31: 4c:cb:1f:7f:b5:4c:d7:54:68:b2:91:c6:7e:0e:06: 86:40:67:8b:77:ad:d6:51:c2:7f:ea:67:21:14:e2: 4b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.168.0/22 IPv6: 2a01:fc00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208070 Signature Algorithm: sha256WithRSAEncryption 84:b1:f1:59:f3:0c:6f:f7:ab:97:a8:4b:76:3f:ff:e5:56:b8: e7:e8:b2:28:42:75:43:4a:61:0d:8b:eb:d8:e7:a0:cd:9f:19: 2b:dc:70:dc:43:1e:cc:65:53:9d:a6:b9:0c:39:e6:a2:d9:4e: 26:95:92:e9:39:29:a3:df:6d:41:c9:a2:51:1e:a5:e3:4b:30: cd:d6:8a:46:52:d7:99:a6:09:0b:25:28:59:91:7d:5e:20:4f: 3e:3c:63:46:86:f4:0b:f4:10:a2:44:a6:73:e6:f5:3a:ac:7f: 65:a9:b6:b9:85:e1:9c:6e:f5:1e:90:bc:82:3c:91:80:fc:cc: a3:50:be:fd:58:b9:96:90:76:50:2c:64:c4:cc:02:45:a2:f9: 7d:e6:60:16:58:d0:9c:cd:9f:08:6c:8b:e4:04:84:ee:3a:7e: 3c:43:3c:16:8c:09:7b:b7:cf:1f:23:fc:83:d1:97:b7:8a:dc: f1:9e:e9:8c:24:99:44:f8:3c:07:c7:a1:dc:a3:7a:ba:ab:98: 49:84:c1:a5:56:a3:68:da:1a:50:5c:e1:ab:38:23:25:d9:5b: 33:ca:c4:b3:48:be:42:1d:72:b0:cf:fb:78:42:e8:d7:ad:87: cf:89:38:4a:53:12:7d:a2:b5:4f:a8:cb:a5:8b:2d:be:4e:8c: 00:ad:ef:5f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f+Q288/+OelOOT3CfEa3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODcxNzIwYTg4ODQxNjdmZWY4MmE0OTI2NzY2MWZiMzQ2ZDc1NjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kg3jby31uv282kIEzvNqEczamhL 2zMcj2vvILevDiW4R7Lj3WXX3AFZD4UXvL9efnQrUD/2FwUs1uKYOb520DqVc81W pMmMbedBcGxeFFaxx8M2a6vjCQIOB3t9dqRO3/kNDv9NuAF0zrFSdf84CtaJv8dd o3OehSmHziAOr7crxvH9akFUYyr010WCJsJICqlWHbVif4MozzDwBcXS83eje44U 31yqzX6JOBtyRrNNnW6M+BqHXICL22rpAGOHpm5QIHnYUncWdX0w6YWzKKLOk0oh mNwVlFH02yAtdjFMyx9/tUzXVGiykcZ+DgaGQGeLd63WUcJ/6mchFOJLcQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFhxcgqIhBZ/74KkkmdmH7NG11YaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzBmYTYw Mi1mNmI4LTQ3YWUtYmYwNi03ZGE4OWNkYTlmNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvMGZhNjAy LWY2YjgtNDdhZS1iZjA2LTdkYTg5Y2RhOWY3MS8xL1dIRnlDb2lFRm5fdmdxU1Na MllmczBiWFZoby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZ+oMA0EAgACMAcDBQMqAfwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMsxjANBgkqhkiG9w0BAQsFAAOCAQEAhLHxWfMMb/er l6hLdj//5Va45+iyKEJ1Q0phDYvr2OegzZ8ZK9xw3EMezGVTnaa5DDnmotlOJpWS 6Tkpo99tQcmiUR6l40swzdaKRlLXmaYJCyUoWZF9XiBPPjxjRob0C/QQokSmc+b1 Oqx/Zam2uYXhnG71HpC8gjyRgPzMo1C+/Vi5lpB2UCxkxMwCRaL5feZgFljQnM2f CGyL5ASE7jp+PEM8FowJe7fPHyP8g9GXt4rc8Z7pjCSZRPg8B8eh3KN6uquYSYTB pVajaNoaUFzhqzgjJdlbM8rEs0i+Qh1ysM/7eELo162Hz4k4SlMSfaK1T6jLpYst vk6MAK3vXw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:26 2026 by rpki-client