This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer File: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer (raw, json) Hash identifier: e3TuW8ZrFoO6J91B7xs4BdXElRUc2xpHgDpNZ+jAtlo= Subject key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA718DEA657605619B66F86EDAEE136 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35710 AS: 52038 AS: 61381 IP: 45.84.32.0/22 IP: 91.132.200.0/22 IP: 185.168.151.0/24 IP: 193.111.100.0/22 IP: 2a09:d180::/29 IP: 2a0e:9580::/29 IP: 2a12:13c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:18:de:a6:57:60:56:19:b6:6f:86:ed:ae:e1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:23:ec:21:9a:2c:fb:53:68:95:0a:fd:56: c4:45:64:1f:29:5e:9b:5e:b5:80:8f:49:09:66:54: 8d:c5:8b:b0:4f:90:31:6c:b3:be:9c:fd:fb:ca:1b: c4:99:d5:f7:d0:cb:e5:46:cb:60:fd:b2:a7:b6:28: 2c:6b:75:a5:c3:5e:01:79:b2:ae:eb:7a:74:a3:c4: 14:7f:67:92:9b:d2:46:33:9f:ec:08:ca:27:57:13: f5:65:9d:d8:ae:cf:3a:09:d9:28:93:6a:fe:f0:c2: 8c:e4:56:d9:d9:4a:1e:a5:61:72:f3:9e:2d:a0:92: e8:4a:b2:4e:21:ba:1d:8d:94:94:b4:93:f6:1b:e6: 22:b1:4a:f1:90:a8:2a:ba:ea:d5:e9:1d:38:24:7c: 08:1c:ca:80:41:0f:b7:86:80:00:18:e6:39:cc:c6: 81:91:3f:3f:65:37:bc:48:6c:8f:34:da:34:8f:35: 28:fc:af:b6:08:44:7f:0b:89:20:78:d2:0a:10:b4: ec:d1:27:39:78:42:f0:30:d8:04:f6:2e:4b:e1:dd: d8:18:55:86:f9:97:6d:62:83:ff:75:4a:d2:da:53: 94:04:90:d7:d3:6b:24:24:ed:3b:a3:42:79:93:ab: 93:bd:6e:00:38:e9:d6:b1:d0:f4:f3:89:09:6a:28: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.32.0/22 91.132.200.0/22 185.168.151.0/24 193.111.100.0/22 IPv6: 2a09:d180::/29 2a0e:9580::/29 2a12:13c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35710 52038 61381 Signature Algorithm: sha256WithRSAEncryption 2f:2f:eb:19:a7:61:83:d3:ab:3d:84:17:ae:a4:dd:35:65:27: 2f:24:d9:54:fd:47:53:ad:b7:c5:64:00:d2:2a:fc:20:c2:6d: af:1f:82:5d:44:54:f4:9e:da:f9:4a:c1:9e:11:37:c7:d7:ed: 51:45:a8:8b:87:84:0c:d6:61:90:5d:7b:07:06:ca:5d:a7:e1: 1c:6b:96:ec:7d:2f:1d:1c:b0:af:0c:b2:b1:20:6b:11:68:df: a5:5f:0b:b1:78:c4:74:a1:dc:aa:00:5f:d1:de:04:ae:fd:2f: 46:b4:d5:b4:81:0e:90:99:1b:b8:66:74:62:20:a0:be:5d:f6: 56:42:26:4e:29:45:b0:55:23:69:15:4a:5c:3e:19:85:0a:89: d2:ae:b6:78:20:ff:48:75:de:55:2a:8d:27:d0:7f:cf:ce:7c: ae:eb:ee:f6:a4:04:c6:41:0a:14:1f:f1:1b:38:a3:9a:ad:b0: e6:72:ce:c5:30:74:20:dd:b0:7b:99:9f:36:f5:d8:35:6c:05: 79:83:85:9a:7a:87:2c:82:0c:e1:4e:1b:54:e9:06:32:14:6e: 61:0d:fb:19:36:07:51:44:64:35:ba:e3:3b:11:ed:65:13:d7: 81:52:dd:39:4c:2c:93:6d:ba:9c:05:80:38:73:d1:a5:aa:81: f4:0b:2d:aa -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt+pxjepldgVhm2b4btruE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTU0YzdiN2U2ZGY3NTc4NDY2ZDgyYjUyNzE1Y2IyMDlmN2YyMWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswYj7CGaLPtTaJUK/VbERWQfKV6b XrWAj0kJZlSNxYuwT5AxbLO+nP37yhvEmdX30MvlRstg/bKntigsa3Wlw14BebKu 63p0o8QUf2eSm9JGM5/sCMonVxP1ZZ3Yrs86Cdkok2r+8MKM5FbZ2UoepWFy854t oJLoSrJOIbodjZSUtJP2G+YisUrxkKgquurV6R04JHwIHMqAQQ+3hoAAGOY5zMaB kT8/ZTe8SGyPNNo0jzUo/K+2CER/C4kgeNIKELTs0Sc5eELwMNgE9i5L4d3YGFWG +ZdtYoP/dUrS2lOUBJDX02skJO07o0J5k6uTvW4AOOnWsdD084kJaij8sQIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFFlUx7fm33V4Rm2CtScVyyCffyHFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2U0NWZk MC1lNjliLTRlMzItYTQyNy04YjEwNTJmZmNmNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvZTQ1ZmQw LWU2OWItNGUzMi1hNDI3LThiMTA1MmZmY2Y2ZC8xL1dWVEh0LWJmZFhoR2JZSzFK eFhMSUo5X0ljVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQCLVQgAwQCW4TIAwQAuaiXAwQCwW9kMBsEAgAC MBUDBQMqCdGAAwUDKg6VgAMFAyoSE8AwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwID AIt+AgMAy0YCAwDvxTANBgkqhkiG9w0BAQsFAAOCAQEALy/rGadhg9OrPYQXrqTd NWUnLyTZVP1HU623xWQA0ir8IMJtrx+CXURU9J7a+UrBnhE3x9ftUUWoi4eEDNZh kF17BwbKXafhHGuW7H0vHRywrwyysSBrEWjfpV8LsXjEdKHcqgBf0d4Erv0vRrTV tIEOkJkbuGZ0YiCgvl32VkImTilFsFUjaRVKXD4ZhQqJ0q62eCD/SHXeVSqNJ9B/ z858ruvu9qQExkEKFB/xGzijmq2w5nLOxTB0IN2we5mfNvXYNWwFeYOFmnqHLIIM 4U4bVOkGMhRuYQ37GTYHUURkNbrjOxHtZRPXgVLdOUwsk226nAWAOHPRpaqB9Ast qg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:35 2026 by rpki-client