This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer (raw, json) Hash identifier: HgE6Tu0h1PqcsvI8yAmftnc+V1njzw6J0bxvF4fFXz0= Subject key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FF1A800AD9769A4C35A9C71E2EA8E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201274 IP: 185.79.12.0/22 IP: 2a05:6fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f1:a8:00:ad:97:69:a4:c3:5a:9c:71:e2:ea:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:39:2d:83:71:f2:b0:38:93:fc:14:bf:13:a6: 26:28:4e:92:d2:8e:ac:7e:0b:e5:9a:ea:4a:5d:cd: 4f:b2:95:8e:5d:02:0c:a2:bf:47:0e:ce:55:ff:3d: b3:00:9c:62:8d:ea:cf:5a:2c:dc:c6:be:87:c2:44: 9b:fd:5a:9a:74:8b:30:32:02:54:ab:ff:90:56:a3: 64:05:3a:cf:a2:48:07:b8:51:d2:77:f3:51:7d:7f: a3:b6:d0:ff:7a:23:b7:a7:01:97:7e:9b:3c:46:a1: a2:41:b3:7a:5b:a5:4d:f6:e9:82:d1:45:28:3c:f2: d2:c7:d4:38:98:04:a8:26:db:9f:5d:7b:95:aa:f1: 5a:c4:5a:b2:04:66:6a:a7:49:ef:c7:2a:7b:d9:4f: 60:0a:c1:9f:3c:59:27:80:5a:26:49:fa:a4:1c:d2: 50:7a:5f:b1:c4:71:b9:cf:60:10:eb:98:9a:d0:0d: a6:29:c0:65:ef:b4:2b:00:0c:78:c9:ac:bb:1c:82: 01:ff:4f:c7:cd:9a:2d:c7:45:55:ee:b6:d2:1b:6a: 42:2a:b6:8d:da:0a:c4:2c:38:63:9e:70:da:de:92: b2:00:65:c9:73:50:96:39:11:a2:97:be:71:c6:99: f1:a8:91:5f:89:06:7d:29:f9:a1:c6:9f:8b:ce:61: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.12.0/22 IPv6: 2a05:6fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201274 Signature Algorithm: sha256WithRSAEncryption 58:45:e2:08:44:ee:2c:ca:1d:e9:b0:5b:77:b1:49:15:ef:d4: 4d:3d:7b:a2:8a:26:dc:68:f4:1c:bf:9a:e7:4d:db:d3:ff:03: 69:63:2b:91:41:0b:74:fd:4a:bc:85:ad:9e:cc:7a:7e:5e:99: a1:17:d5:69:94:82:bf:d7:49:31:15:1a:18:cd:65:d2:4f:7c: 05:5c:bb:f5:ba:e7:6e:61:57:be:96:48:a4:f7:34:8e:0b:ec: 2f:2b:a5:4c:17:d7:53:f3:47:22:f7:5a:aa:60:f4:c8:78:a5: fb:66:89:c3:14:c5:fc:16:dd:08:0a:b4:49:70:fa:f1:bc:33: 47:34:02:77:a9:5b:82:3b:1c:da:2c:2b:f5:94:a1:74:c0:82: 6e:94:d3:fa:4b:d8:1d:19:c2:72:29:99:0f:0f:f2:d4:1f:1f: 4e:93:16:9b:12:05:3d:3a:36:b6:62:3a:c5:12:b3:43:85:60: b5:72:f5:58:6d:d3:4a:97:67:27:7a:4b:e5:ae:bb:2e:1d:c5: 0e:a7:a8:c9:0a:36:2b:06:f8:1d:1d:99:2e:8e:e3:44:96:2a: d6:40:3b:08:c1:94:f0:22:b1:7e:0c:16:08:1c:75:82:81:46: 19:36:33:6c:71:e0:bd:ae:4a:3e:fb:db:10:04:71:51:2d:ee: c1:07:a2:ff -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f/GoAK2XaaTDWpxx4uqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODhjMzIwMjc0NjVhMjlmYjg0ZjJkZDA1ZjNmMGJlODA0MjdiMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTktg3HysDiT/BS/E6YmKE6S0o6s fgvlmupKXc1PspWOXQIMor9HDs5V/z2zAJxijerPWizcxr6HwkSb/VqadIswMgJU q/+QVqNkBTrPokgHuFHSd/NRfX+jttD/eiO3pwGXfps8RqGiQbN6W6VN9umC0UUo PPLSx9Q4mASoJtufXXuVqvFaxFqyBGZqp0nvxyp72U9gCsGfPFkngFomSfqkHNJQ el+xxHG5z2AQ65ia0A2mKcBl77QrAAx4yay7HIIB/0/HzZotx0VV7rbSG2pCKraN 2grELDhjnnDa3pKyAGXJc1CWORGil75xxpnxqJFfiQZ9Kfmhxp+LzmHgXwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFiMMgJ0ZaKfuE8t0F8/C+gEJ7DJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2JjMmNk NC1mZDM3LTRjNDEtYjVkYy05YTgwM2Y3MzZjNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvYmMyY2Q0 LWZkMzctNGM0MS1iNWRjLTlhODAzZjczNmM0YS8xL1dJd3lBblJsb3AtNFR5M1FY ejhMNkFRbnNNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuU8MMA0EAgACMAcDBQMqBW/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMSOjANBgkqhkiG9w0BAQsFAAOCAQEAWEXiCETuLMod 6bBbd7FJFe/UTT17ooom3Gj0HL+a503b0/8DaWMrkUELdP1KvIWtnsx6fl6ZoRfV aZSCv9dJMRUaGM1l0k98BVy79brnbmFXvpZIpPc0jgvsLyulTBfXU/NHIvdaqmD0 yHil+2aJwxTF/BbdCAq0SXD68bwzRzQCd6lbgjsc2iwr9ZShdMCCbpTT+kvYHRnC cimZDw/y1B8fTpMWmxIFPTo2tmI6xRKzQ4VgtXL1WG3TSpdnJ3pL5a67Lh3FDqeo yQo2Kwb4HR2ZLo7jRJYq1kA7CMGU8CKxfgwWCBx1goFGGTYzbHHgva5KPvvbEARx US3uwQei/w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:20 2026 by rpki-client