This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer File: WHO1mFUN9b_byZp6HjlsNJW9qDs.cer (raw, json) Hash identifier: O67mH7aAZ043PsQuVZfHULHAdgXLB7gQiloOb+zGXjE= Subject key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D7E394437B1648604B124D77B0D5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 130.82.0.0/16 IP: 192.41.141.0 -- 192.41.145.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d7:e3:94:43:7b:16:48:60:4b:12:4d:77:b0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5e:c9:fd:9d:db:6c:e8:94:de:56:2e:d5:25: 6f:fe:2a:7a:0e:e8:eb:26:15:db:0f:32:7d:9c:68: 99:d0:0c:0b:52:be:41:93:41:13:06:fa:ee:80:af: 9e:45:b2:54:29:df:87:b3:77:b0:cf:cc:f7:ce:de: 3b:f8:d8:1c:9c:6e:cd:ae:60:75:eb:43:cf:d6:c5: 1c:d9:7c:83:68:15:01:5f:3d:b3:97:f4:85:45:08: 77:84:f3:31:4c:d9:32:07:d6:98:86:26:31:80:31: 2d:68:a1:d3:e9:7d:cc:b2:d6:92:f0:dc:25:ea:4f: 0f:b1:64:0f:a0:26:8b:b4:99:e2:56:44:3e:7b:0b: 3e:86:0a:af:6e:65:eb:83:10:9f:50:3e:f1:3c:24: 50:60:ba:90:49:71:6b:22:6a:d9:ba:7d:73:3f:33: a9:1d:ac:7b:14:28:ba:e0:9f:61:8b:10:63:0f:b3: c1:45:b6:f5:8c:36:4a:64:f6:8f:83:4c:25:e5:da: b5:e9:6c:b3:97:05:cb:bb:b6:9f:c7:28:98:93:1d: d4:f2:c5:a1:5a:65:09:a9:76:fb:23:07:94:a1:96: 1d:bf:c1:6b:3b:06:22:b0:12:6a:5a:3c:be:38:7a: 41:a2:3c:03:63:fc:f1:02:a1:34:35:f8:e0:d1:f6: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.82.0.0/16 192.41.141.0-192.41.145.255 Signature Algorithm: sha256WithRSAEncryption 32:8d:9e:21:f3:cd:6c:6d:eb:97:ae:2b:4a:93:da:5f:db:5c: f9:ef:89:27:3e:45:0e:8c:b2:e0:67:4f:e9:89:e4:c5:49:bd: 8c:ec:f6:b9:1d:bf:ab:e3:54:88:a1:40:f5:df:fb:ce:96:ec: 34:90:35:9e:1a:5c:37:d0:a8:5e:95:4e:a2:f0:c4:5a:dc:b2: b6:48:c9:25:69:4f:41:6f:5a:c6:f3:8e:e1:5f:4b:45:67:1a: 7e:6d:b3:b7:2f:f3:a1:6d:af:6a:fb:e9:12:b3:8c:0a:99:70: a5:85:98:02:5e:40:e0:8c:c2:79:6b:ca:c8:64:64:64:0d:bb: 0d:fa:3b:d2:3f:54:46:31:6c:71:b4:da:e4:a9:a9:53:10:71: 32:5e:9a:73:f0:aa:8c:64:86:d2:5b:7d:21:b2:5c:14:40:d4: 9f:77:f0:7b:4a:4a:f7:ad:27:0d:35:bb:57:1a:a5:b7:e5:fd: 31:58:26:ca:ff:bc:f2:ac:44:24:34:6a:dd:01:0a:3e:85:bb: 6d:e7:0d:5c:4a:74:b3:af:c7:8b:71:b7:bc:e4:48:0a:bf:73: 54:5f:13:ef:60:34:92:85:14:d9:b1:3f:d6:10:e6:d2:38:66: 06:b7:21:54:35:05:88:75:d2:b4:d8:8c:7f:af:60:d7:f7:e5: fc:02:1e:88 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgISAZt5ENfjlEN7FkhgSxJNd7DVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODczYjU5ODU1MGRmNWJmZGJjOTlhN2ExZTM5NmMzNDk1YmRhODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4l7J/Z3bbOiU3lYu1SVv/ip6Dujr JhXbDzJ9nGiZ0AwLUr5Bk0ETBvrugK+eRbJUKd+Hs3ewz8z3zt47+NgcnG7NrmB1 60PP1sUc2XyDaBUBXz2zl/SFRQh3hPMxTNkyB9aYhiYxgDEtaKHT6X3MstaS8Nwl 6k8PsWQPoCaLtJniVkQ+ews+hgqvbmXrgxCfUD7xPCRQYLqQSXFrImrZun1zPzOp Hax7FCi64J9hixBjD7PBRbb1jDZKZPaPg0wl5dq16WyzlwXLu7afxyiYkx3U8sWh WmUJqXb7IweUoZYdv8FrOwYisBJqWjy+OHpBojwDY/zxAqE0Nfjg0fYYzQIDAQAB o4ICkTCCAo0wHQYDVR0OBBYEFFhztZhVDfW/28maeh45bDSVvag7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U3LzE0MjM4 ZC04NTkxLTQ3MWYtODk1Yi0xNzY5ZDE5OTRkZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMTQyMzhk LTg1OTEtNDcxZi04OTViLTE3NjlkMTk5NGRmNi8xL1dITzFtRlVOOWJfYnlacDZI amxzTkpXOXFEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCwGCCsGAQUF BwEHAQH/BB0wGzAZBAIAATATAwMAglIwDAMEAMApjQMEAcApkDANBgkqhkiG9w0B AQsFAAOCAQEAMo2eIfPNbG3rl64rSpPaX9tc+e+JJz5FDoyy4GdP6YnkxUm9jOz2 uR2/q+NUiKFA9d/7zpbsNJA1nhpcN9CoXpVOovDEWtyytkjJJWlPQW9axvOO4V9L RWcafm2zty/zoW2vavvpErOMCplwpYWYAl5A4IzCeWvKyGRkZA27Dfo70j9URjFs cbTa5KmpUxBxMl6ac/CqjGSG0lt9IbJcFEDUn3fwe0pK960nDTW7Vxqlt+X9MVgm yv+88qxEJDRq3QEKPoW7becNXEp0s6/Hi3G3vORICr9zVF8T72A0koUU2bE/1hDm 0jhmBrchVDUFiHXStNiMf69g1/fl/AIeiA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:28:34 2026 by rpki-client