This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer File: WUGkBv3_7iWThJa-WsmlPhu5xlk.cer (raw, json) Hash identifier: 82uxjfhWRh12HLU0MxQhI/nehjgl6R7zpkcvh5lyaE4= Subject key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B5B9AD0F0C7AF4EDA6352DA47032B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210394 IP: 193.201.83.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5b:9a:d0:f0:c7:af:4e:da:63:52:da:47:03:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5941a406fdffee25938496be5ac9a53e1bb9c659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:ce:c7:e1:82:21:9b:9c:51:e5:f7:60:e1: d8:54:cc:27:28:cf:77:bd:9e:78:42:1b:87:1b:f0: 3f:36:40:14:e4:61:52:9e:0e:0a:f4:20:a8:b7:d0: c6:75:ed:35:d3:19:06:40:59:fe:8d:17:05:85:69: ef:28:d0:d9:6d:fb:a9:4d:3b:58:8a:75:01:04:f2: ac:57:57:bd:37:e9:c6:49:ff:e2:80:45:d2:b6:c7: 2c:d5:0f:62:b9:90:58:75:ac:88:9c:95:11:e3:18: d0:86:bb:b4:10:fe:e4:7c:89:ba:43:38:8f:ec:e7: 76:59:8f:f2:61:69:21:e7:aa:07:d7:68:ac:87:0e: 53:31:cb:36:1a:cb:8b:8b:25:58:db:8e:71:8d:d9: 6d:19:7e:1e:40:b1:95:55:52:66:e2:3f:de:0d:87: 04:24:75:1d:b1:e1:76:4c:25:1c:fa:71:6e:ac:0c: 2e:94:b5:30:8b:b7:07:81:58:81:02:b4:43:1a:f0: 25:34:3b:2f:52:da:d2:97:36:a9:ed:ed:e4:d6:fd: f8:61:71:ad:80:b6:ab:9d:12:f1:84:01:d9:5a:78: 0a:0b:ca:be:36:3b:c2:3f:11:7b:a8:c8:6b:30:31: b4:0c:77:5b:72:62:5f:50:f5:97:f7:c3:c6:6e:08: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.83.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210394 Signature Algorithm: sha256WithRSAEncryption 1c:4d:a4:7d:7d:23:30:a8:bf:66:f6:eb:a7:ff:ec:64:16:2e: 0c:50:d6:ad:11:26:26:b1:38:e5:19:2b:d3:26:51:33:05:67: a6:e1:f9:31:f6:95:ea:fe:bb:d6:98:a5:ab:8f:55:bc:be:13: 94:1a:0b:ff:34:1d:05:b3:72:4c:8b:1d:92:03:0c:89:19:78: d7:4d:d3:3f:11:61:07:f5:84:fb:0e:a6:27:dd:60:b8:3c:a3: 1b:ed:dc:37:0f:b8:8e:d6:c5:69:11:1d:fd:80:94:b6:f2:6b: c5:f7:5d:0d:c6:df:88:ec:63:bd:8b:d7:ae:bb:1e:c3:d6:0a: e2:da:fe:d3:ee:0f:b1:67:36:07:15:2b:e2:41:0c:9b:72:9b: db:5b:54:fe:c3:33:a0:b7:34:15:22:cc:aa:aa:ff:ce:77:f6: a0:56:ec:f4:52:8a:0a:22:7e:4d:22:e8:84:8a:0b:e4:d7:74: 22:4f:36:22:ce:dd:cd:d9:d4:58:73:ba:82:10:1f:9b:de:b0: fc:3a:78:88:87:4c:5f:e1:88:b6:c5:ae:03:34:35:7c:8a:1d: 12:77:d6:79:34:f2:38:86:5a:89:c3:cb:2d:fd:18:9d:ea:97: 54:ac:a4:69:1d:14:2b:92:30:d9:a0:c0:93:43:00:81:85:12: 51:1f:25:8b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6W1ua0PDHr07aY1LaRwMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTQxYTQwNmZkZmZlZTI1OTM4NDk2YmU1YWM5YTUzZTFiYjljNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDTOx+GCIZucUeX3YOHYVMwnKM93 vZ54QhuHG/A/NkAU5GFSng4K9CCot9DGde010xkGQFn+jRcFhWnvKNDZbfupTTtY inUBBPKsV1e9N+nGSf/igEXStscs1Q9iuZBYdayInJUR4xjQhru0EP7kfIm6QziP 7Od2WY/yYWkh56oH12ishw5TMcs2GsuLiyVY245xjdltGX4eQLGVVVJm4j/eDYcE JHUdseF2TCUc+nFurAwulLUwi7cHgViBArRDGvAlNDsvUtrSlzap7e3k1v34YXGt gLarnRLxhAHZWngKC8q+NjvCPxF7qMhrMDG0DHdbcmJfUPWX98PGbgj50wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFlBpAb9/+4lk4SWvlrJpT4bucZZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzg0ZjU4 OS1iNmFhLTQ1NDktYTYyZS05YjRmZmQwOGUwNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvODRmNTg5 LWI2YWEtNDU0OS1hNjJlLTliNGZmZDA4ZTA0OC8xL1dVR2tCdjNfN2lXVGhKYS1X c21sUGh1NXhsay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwclTMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM12jANBgkqhkiG9w0BAQsFAAOCAQEAHE2kfX0jMKi/Zvbrp//sZBYuDFDWrREm JrE45Rkr0yZRMwVnpuH5MfaV6v671pilq49VvL4TlBoL/zQdBbNyTIsdkgMMiRl4 103TPxFhB/WE+w6mJ91guDyjG+3cNw+4jtbFaREd/YCUtvJrxfddDcbfiOxjvYvX rrsew9YK4tr+0+4PsWc2BxUr4kEMm3Kb21tU/sMzoLc0FSLMqqr/znf2oFbs9FKK CiJ+TSLohIoL5Nd0Ik82Is7dzdnUWHO6ghAfm96w/Dp4iIdMX+GItsWuAzQ1fIod EnfWeTTyOIZaicPLLf0YneqXVKykaR0UK5Iw2aDAk0MAgYUSUR8liw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:59 2026 by rpki-client