This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer File: WOAvLKgauAKTlTAVbpYxsY9RWEA.cer (raw, json) Hash identifier: Ymprx8mRDaUdy+3Cwirf7d8W2wdm3t6ekVEzp3HZDYY= Subject key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD657E58824413BE792EC0B29035E2CC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 13:00:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44925 IP: 89.127.232.0/22 IP: 89.147.108.0/22 IP: 93.95.224.0/21 IP: 185.112.144.0/22 IP: 195.246.230.0/23 IP: 2a00:5ee0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:57:e5:88:24:41:3b:e7:92:ec:0b:29:03:5e:2c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 13:00:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58e02f2ca81ab802939530156e9631b18f515840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:10:c1:06:e6:10:19:1b:82:a2:50:49:0e: 63:d8:6c:02:63:e1:46:45:3f:1a:12:50:fd:8e:25: 9f:79:9e:af:ca:a9:c8:85:5e:7f:f0:35:fa:df:28: 9d:a9:5e:d9:40:3b:58:7b:4b:88:19:3c:03:31:3d: c3:7e:d5:42:d0:c1:48:65:d4:bb:5d:b0:3e:ed:cf: 79:33:f4:3b:74:d4:0c:e5:c2:3f:92:17:7e:6a:6e: a6:a7:32:e2:5c:88:82:cb:7c:30:5e:6a:b5:49:11: a3:d3:76:19:84:92:94:56:cc:3f:2b:69:66:b5:98: 11:ce:76:0b:f6:f6:f3:8b:0a:10:81:06:f0:24:f8: f6:11:bf:25:f7:c5:c5:92:0b:f4:9c:2f:47:e7:ab: 98:2d:e8:e8:ed:97:00:99:a5:f0:66:6a:40:19:72: c8:8f:c6:6f:c2:17:0b:72:38:5d:13:e4:1b:c2:09: 1c:c0:49:0f:30:0a:58:94:67:11:f9:25:f0:24:a4: ca:eb:c2:be:59:3f:37:63:9e:59:a1:1a:3d:5b:50: 33:d5:7e:5b:18:a9:e0:aa:81:a1:fd:52:ed:95:39: af:9d:f5:a8:6b:b1:b8:6b:6a:b9:00:7a:d6:e7:72: 2e:d6:b3:5d:dc:a7:0b:25:e9:44:0c:08:5b:93:6c: 75:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.127.232.0/22 89.147.108.0/22 93.95.224.0/21 185.112.144.0/22 195.246.230.0/23 IPv6: 2a00:5ee0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44925 Signature Algorithm: sha256WithRSAEncryption 31:c2:04:f3:75:36:e7:1e:3e:55:58:48:ae:30:10:8e:4b:06: 0b:a6:66:c4:9a:89:ae:d5:4e:27:bd:c8:01:de:5f:85:ad:13: 34:ba:4c:6d:50:d1:58:3a:12:6b:5c:34:25:a3:75:05:63:b5: 89:51:c1:6e:85:a2:3c:04:f1:5f:a1:32:e6:d1:d0:b8:cb:18: 5e:b9:11:c7:9b:63:4f:c8:18:3e:09:bd:ed:77:a6:a8:f7:2d: 57:27:f7:2b:4d:95:ef:fd:f3:0a:c4:42:72:09:43:76:02:9e: 02:9b:0e:19:fb:1b:1f:bb:be:07:64:06:32:26:ab:2f:f1:50: ea:65:d9:7b:f0:cc:56:37:84:e1:32:8e:0d:46:62:16:9f:b1: 5b:07:49:5a:79:31:21:01:77:4e:d2:f9:1e:24:37:7a:8d:49: da:92:f2:59:fd:03:f4:c8:bd:7c:d1:bb:22:b0:40:35:17:95: 06:00:ca:bc:fc:02:03:30:98:24:13:5c:6b:48:e1:6c:23:ac: cb:a8:c7:c1:7f:57:67:87:90:f0:b1:05:50:a5:8c:b8:4f:ba: 25:fb:42:7f:51:a9:f4:60:aa:fd:ec:92:e2:0f:1f:7b:2f:c9: 87:3b:fc:6f:42:50:d4:8a:c6:b3:dd:d9:c1:7c:37:70:83:fc: 96:81:04:43 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZvWV+WIJEE755LsCykDXizEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTMwMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGUwMmYyY2E4MWFiODAyOTM5NTMwMTU2ZTk2MzFiMThmNTE1ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvgQwQbmEBkbgqJQSQ5j2GwCY+FG RT8aElD9jiWfeZ6vyqnIhV5/8DX63yidqV7ZQDtYe0uIGTwDMT3DftVC0MFIZdS7 XbA+7c95M/Q7dNQM5cI/khd+am6mpzLiXIiCy3wwXmq1SRGj03YZhJKUVsw/K2lm tZgRznYL9vbziwoQgQbwJPj2Eb8l98XFkgv0nC9H56uYLejo7ZcAmaXwZmpAGXLI j8ZvwhcLcjhdE+QbwgkcwEkPMApYlGcR+SXwJKTK68K+WT83Y55ZoRo9W1Az1X5b GKngqoGh/VLtlTmvnfWoa7G4a2q5AHrW53Iu1rNd3KcLJelEDAhbk2x1wQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFFjgLyyoGrgCk5UwFW6WMbGPUVhAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzlmODcy OC0zMzVlLTRmN2ItYTFkYy1kNDhkMTNhNGRlMzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvOWY4NzI4 LTMzNWUtNGY3Yi1hMWRjLWQ0OGQxM2E0ZGUzOC8xL1dPQXZMS2dhdUFLVGxUQVZi cFl4c1k5UldFQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCWX/oAwQCWZNsAwQDXV/gAwQCuXCQAwQBw/bm MA0EAgACMAcDBQAqAF7gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCvfTANBgkq hkiG9w0BAQsFAAOCAQEAMcIE83U25x4+VVhIrjAQjksGC6ZmxJqJrtVOJ73IAd5f ha0TNLpMbVDRWDoSa1w0JaN1BWO1iVHBboWiPATxX6Ey5tHQuMsYXrkRx5tjT8gY Pgm97XemqPctVyf3K02V7/3zCsRCcglDdgKeApsOGfsbH7u+B2QGMiarL/FQ6mXZ e/DMVjeE4TKODUZiFp+xWwdJWnkxIQF3TtL5HiQ3eo1J2pLyWf0D9Mi9fNG7IrBA NReVBgDKvPwCAzCYJBNca0jhbCOsy6jHwX9XZ4eQ8LEFUKWMuE+6JftCf1Gp9GCq /eyS4g8fey/Jhzv8b0JQ1IrGs93ZwXw3cIP8loEEQw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:00 2026 by rpki-client