This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer (raw, json) Hash identifier: LgFG4KqYK3P7JkqVsogqSkDVVqq7KbRWvQfrkUNMQFI= Subject key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C7BBDC41F89095B0FAC1E95F3EC66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12567 IP: 78.138.44.0/24 IP: 91.225.125.0/24 IP: 185.106.204.0/22 IP: 2a0b:74c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7b:bd:c4:1f:89:09:5b:0f:ac:1e:95:f3:ec:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:60:b6:02:6f:38:4c:03:7a:71:85:5c:ac: 6f:14:70:99:ae:bb:ab:40:94:fd:95:c9:b2:db:12: d2:55:c3:bf:48:a3:8a:d0:09:71:c4:15:fa:b9:ff: f1:dc:5d:c4:d9:f4:51:29:25:39:6e:47:97:8e:f7: a8:e6:db:ea:0c:69:3d:69:b1:6e:5a:b5:fa:17:94: 25:34:e1:6b:f8:4e:27:be:ad:9d:61:3a:4e:d5:68: 8a:3a:fe:b1:65:b0:5f:6c:57:20:e9:57:8e:81:c7: aa:15:fe:1f:0a:e4:1b:ce:99:96:e0:1f:bf:3a:ab: 3d:d8:b6:2f:f0:1b:28:0a:53:53:f5:b0:7e:96:65: 3c:0e:b9:a2:e1:33:78:8d:ba:18:22:3e:c9:3c:01: 7a:b3:6b:3c:50:6c:c0:87:5a:20:8d:fb:7a:d9:59: 30:10:d2:d1:1a:df:e4:8c:f9:c2:83:93:06:10:fc: 40:58:1c:ac:2d:a8:b2:ec:c7:ae:22:55:35:3a:f1: 50:62:3c:88:4e:71:b7:4a:f9:6f:10:3e:b6:63:15: 28:c6:4a:61:8f:be:7f:ee:58:ed:60:c2:7f:c4:1e: 4a:60:6a:ce:4f:53:35:3a:c2:8d:5e:43:86:06:bb: 6c:be:da:a0:18:96:47:23:a0:b9:bf:bb:27:9d:d6: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.138.44.0/24 91.225.125.0/24 185.106.204.0/22 IPv6: 2a0b:74c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12567 Signature Algorithm: sha256WithRSAEncryption 12:56:69:d4:82:a8:89:f3:49:c2:03:80:06:bb:06:45:59:86: 7a:4a:e0:7a:33:b4:38:d3:88:92:a6:db:da:75:96:09:ed:7a: c5:72:ce:cb:37:2d:6a:9f:9c:da:8b:76:a3:70:18:c7:05:97: 79:20:5d:b2:7b:62:07:6f:3b:e3:7d:40:51:3a:65:02:e9:e4: 64:10:b4:c2:94:4b:b0:27:4b:2a:ba:f9:12:52:ee:62:17:30: e0:6f:ba:94:fd:70:13:8e:62:fe:cb:ab:e7:49:f2:f3:c8:62: 8e:d9:62:69:c7:87:a7:45:b8:29:e7:db:01:09:83:74:48:66: 47:45:63:0e:8c:73:31:ea:7c:00:f0:2a:af:10:98:7c:4f:3f: ca:cf:43:31:4d:b6:8f:4e:d5:db:9e:b0:b4:93:af:4f:18:da: 64:0a:e6:94:99:35:6f:be:1a:74:5f:29:0d:5b:27:a0:5e:f2: 15:ba:7c:ae:8a:59:7a:99:99:23:d3:b8:9a:f4:dd:0e:1e:c0: 61:37:61:8c:a9:ee:a0:55:b8:64:69:84:4b:f6:29:dc:66:73: 30:ba:3a:30:f2:d1:5b:6f:a7:14:b7:f0:68:b0:0b:ba:b9:52: 70:f0:ee:d4:f4:d6:ed:d2:f9:ea:1d:f3:f3:37:eb:84:f3:8b: cb:d8:1e:e0 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt9XHu9xB+JCVsPrB6V8+xmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGNkNTYzYTJhZTY1MjljOWY0M2ZlNGI1YzY3ZGI3MGU3NzlhMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fhgtgJvOEwDenGFXKxvFHCZrrur QJT9lcmy2xLSVcO/SKOK0AlxxBX6uf/x3F3E2fRRKSU5bkeXjveo5tvqDGk9abFu WrX6F5QlNOFr+E4nvq2dYTpO1WiKOv6xZbBfbFcg6VeOgceqFf4fCuQbzpmW4B+/ Oqs92LYv8BsoClNT9bB+lmU8Drmi4TN4jboYIj7JPAF6s2s8UGzAh1ogjft62Vkw ENLRGt/kjPnCg5MGEPxAWBysLaiy7MeuIlU1OvFQYjyITnG3SvlvED62YxUoxkph j75/7ljtYMJ/xB5KYGrOT1M1OsKNXkOGBrtsvtqgGJZHI6C5v7snndbHyQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFFjNVjoq5lKcn0P+S1xn23DneaCbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzQ4MDZh NS02ZmEzLTQ4MzItYjc0MC00N2E1ZjQ4MWU2ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvNDgwNmE1 LTZmYTMtNDgzMi1iNzQwLTQ3YTVmNDgxZTZmNS8xL1dNMVdPaXJtVXB5ZlFfNUxY R2ZiY09kNW9Kcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAToosAwQAW+F9AwQCuWrMMA0EAgACMAcDBQAq C3TAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjEXMA0GCSqGSIb3DQEBCwUAA4IB AQASVmnUgqiJ80nCA4AGuwZFWYZ6SuB6M7Q404iSptvadZYJ7XrFcs7LNy1qn5za i3ajcBjHBZd5IF2ye2IHbzvjfUBROmUC6eRkELTClEuwJ0squvkSUu5iFzDgb7qU /XATjmL+y6vnSfLzyGKO2WJpx4enRbgp59sBCYN0SGZHRWMOjHMx6nwA8CqvEJh8 Tz/Kz0MxTbaPTtXbnrC0k69PGNpkCuaUmTVvvhp0XykNWyegXvIVunyuill6mZkj 07ia9N0OHsBhN2GMqe6gVbhkaYRL9incZnMwujow8tFbb6cUt/BosAu6uVJw8O7U 9Nbt0vnqHfPzN+uE84vL2B7g -----END CERTIFICATE-----Generated at Fri Jan 9 18:08:38 2026 by rpki-client