This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer File: WSh1E_SesUCO5BsoHIsnczB6iRA.cer (raw, json) Hash identifier: SLsnQ9Z7aMwaVdFUpuks1kKx7PdLNBMvt0rqr8oL0KQ= Subject key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B19BA711FCCDAB0D6403E901B1DE2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57701 IP: 171.25.182.0/24 IP: 176.106.104.0/21 IP: 2001:67c:c24::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:19:ba:71:1f:cc:da:b0:d6:40:3e:90:1b:1d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59287513f49eb1408ee41b281c8b2773307a8910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:87:92:b6:72:7b:24:6c:04:1e:9c:86:1f: 24:96:62:da:d2:e4:d7:70:b9:c5:56:1d:b3:f4:1d: ee:9a:77:24:45:23:df:18:da:63:45:98:88:38:7f: 61:ab:2c:12:aa:49:c1:82:74:4e:a4:73:40:eb:e0: 2c:64:54:ec:14:06:70:03:46:2a:32:a7:97:5e:08: d8:4f:b6:2c:ce:05:03:8a:6c:2a:85:26:40:62:eb: 41:12:38:20:f7:b9:d7:b4:d8:9d:c4:7e:5b:77:96: 2f:db:00:95:e9:81:57:07:e4:73:85:39:7d:76:c0: f2:58:1a:60:81:74:fc:2f:8d:63:85:4d:4b:df:7e: 6c:44:f7:a4:6a:4d:df:ec:41:f4:f1:c2:b8:9f:20: 16:91:97:7f:e8:1a:6b:d3:d4:ae:a8:de:07:ee:e3: cf:3b:15:1e:da:9c:ca:03:75:b7:66:57:39:54:b2: d4:73:c4:dc:62:ae:94:e0:cf:13:8f:cf:79:9f:8b: 6c:47:93:7c:d3:df:e0:23:9b:3d:ce:bb:63:e6:fc: 81:4e:e2:a4:4b:1a:dd:40:6e:40:c4:64:f1:68:3e: 0b:32:e2:a8:6a:02:46:63:35:6d:a9:fe:ef:d3:69: d6:df:e5:1d:d4:38:59:1c:e3:4e:4d:b9:e4:98:fd: c6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.182.0/24 176.106.104.0/21 IPv6: 2001:67c:c24::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57701 Signature Algorithm: sha256WithRSAEncryption 8e:f1:35:00:80:f3:b8:6f:d7:cf:38:1a:68:2b:34:b2:db:0b: 46:ae:9d:38:3a:5c:3f:b0:7e:6a:f2:0a:89:c7:e7:88:cc:48: 7f:12:92:79:91:70:89:4c:2e:06:2d:a8:cb:50:b4:bf:80:b7: eb:c8:a3:f4:31:50:ff:94:e4:4c:b1:a4:6b:a0:fe:29:fc:70: b8:86:ec:5d:58:76:10:7a:4e:af:36:83:98:47:63:62:65:4c: 88:d8:a1:db:2c:ee:f5:c2:44:b7:30:f1:61:d8:e1:5e:8b:13: b7:73:28:ff:9f:1c:67:2d:1f:92:3a:fa:17:ec:9d:f3:e7:cf: fa:53:8a:46:b3:5a:27:94:a9:87:4b:68:00:92:42:9b:f0:24: f1:ee:0f:a9:c8:4d:2d:bb:68:54:6a:c5:7a:3e:5e:f0:df:45: 06:e4:17:a5:5b:1c:d4:89:37:8b:e6:39:2c:03:63:e0:68:1b: 0e:af:37:a2:ec:73:ea:77:3c:cd:5e:24:b8:f9:89:aa:8d:ff: 4c:c6:12:b1:98:28:00:c7:5c:94:64:99:6e:9f:ec:99:79:56: 0c:70:b5:99:e9:fb:ba:5a:6a:cd:5c:06:65:85:ad:d8:c6:07: f0:f1:e6:53:8c:82:1f:65:c7:ba:9f:ed:37:c9:aa:26:42:23: b5:60:59:bf -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt6Wxm6cR/M2rDWQD6QGx3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTI4NzUxM2Y0OWViMTQwOGVlNDFiMjgxYzhiMjc3MzMwN2E4OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYCHkrZyeyRsBB6chh8klmLa0uTX cLnFVh2z9B3umnckRSPfGNpjRZiIOH9hqywSqknBgnROpHNA6+AsZFTsFAZwA0Yq MqeXXgjYT7YszgUDimwqhSZAYutBEjgg97nXtNidxH5bd5Yv2wCV6YFXB+RzhTl9 dsDyWBpggXT8L41jhU1L335sRPekak3f7EH08cK4nyAWkZd/6Bpr09SuqN4H7uPP OxUe2pzKA3W3Zlc5VLLUc8TcYq6U4M8Tj895n4tsR5N809/gI5s9zrtj5vyBTuKk SxrdQG5AxGTxaD4LMuKoagJGYzVtqf7v02nW3+Ud1DhZHONOTbnkmP3GswIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFFkodRP0nrFAjuQbKByLJ3MweokQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzg5NTEx Ny1hMGY4LTQxNDUtYmRhYS04OGNlYzJmOTU1MTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvODk1MTE3 LWEwZjgtNDE0NS1iZGFhLTg4Y2VjMmY5NTUxMy8xL1dTaDFFX1Nlc1VDTzVCc29I SXNuY3pCNmlSQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAqxm2AwQDsGpoMA8EAgACMAkDBwAgAQZ8DCQw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOFlMA0GCSqGSIb3DQEBCwUAA4IBAQCO 8TUAgPO4b9fPOBpoKzSy2wtGrp04Olw/sH5q8gqJx+eIzEh/EpJ5kXCJTC4GLajL ULS/gLfryKP0MVD/lORMsaRroP4p/HC4huxdWHYQek6vNoOYR2NiZUyI2KHbLO71 wkS3MPFh2OFeixO3cyj/nxxnLR+SOvoX7J3z58/6U4pGs1onlKmHS2gAkkKb8CTx 7g+pyE0tu2hUasV6Pl7w30UG5BelWxzUiTeL5jksA2PgaBsOrzei7HPqdzzNXiS4 +Ymqjf9MxhKxmCgAx1yUZJlun+yZeVYMcLWZ6fu6WmrNXAZlha3Yxgfw8eZTjIIf Zce6n+03yaomQiO1YFm/ -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:30 2026 by rpki-client