This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer File: WVt4mYk7niSL5hVd9EX2MK5daHI.cer (raw, json) Hash identifier: pAaCCwVxmtM0ZOMLY95BINNcQseONhGlOClDJIsHCTA= Subject key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C130CF3171CC1BBB09E3348527409BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21369 IP: 157.203.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0c:f3:17:1c:c1:bb:b0:9e:33:48:52:74:09:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=595b7899893b9e248be6155df445f630ae5d6872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:10:4d:97:b7:b0:36:26:ba:79:21:fc:95: d6:05:74:4e:0d:4a:a1:7f:01:f8:2b:2c:1d:9b:a8: 66:69:58:47:18:f6:89:82:d3:bc:5a:b5:b1:ac:2e: 5a:34:b0:a8:3e:50:81:65:95:9c:14:97:41:50:ba: e2:62:1f:c4:8b:98:19:bb:59:36:bf:c8:cb:de:ab: 11:b2:10:8b:eb:b8:37:3a:e2:6a:cd:ec:72:ef:f7: 30:41:87:23:59:69:df:47:c7:b8:f6:43:dc:6d:b4: 47:46:c9:ee:ca:98:bf:18:bb:fd:f1:76:10:52:08: 44:e9:61:ad:db:99:83:aa:56:e2:71:23:ca:b0:53: f2:78:a6:1e:6e:44:73:b8:2c:93:77:ef:08:af:7f: 75:70:7a:96:ff:8e:7d:6d:9a:b5:de:48:6a:91:22: 82:46:9d:76:49:8a:40:70:ed:c9:4c:e9:ac:d8:c6: 80:0f:11:d0:6a:42:7b:7f:50:e0:f9:55:d3:b0:02: ec:6f:3c:00:ef:2f:0a:59:54:d6:35:0d:d8:55:03: c1:6b:7f:f8:a0:ab:1f:b5:00:74:81:f4:66:3b:01: 24:cf:a9:0a:a3:e0:14:1b:79:c6:7b:9a:4b:95:4b: 97:fd:8b:8c:ec:a4:1c:0b:aa:7e:cc:3e:43:58:11: ed:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.203.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21369 Signature Algorithm: sha256WithRSAEncryption 96:f6:91:83:d3:6b:a8:d4:f5:62:2c:12:e3:c9:32:d6:8c:19: 6b:83:fb:4c:07:6b:5b:a6:74:0b:53:8b:8a:26:c3:2d:a9:ef: 23:7c:05:d5:05:a4:75:d6:20:48:c9:67:a3:aa:9a:f6:b4:42: ad:f2:6b:b1:29:86:12:7c:3b:e9:8b:13:6a:28:df:f5:16:91: 5e:7d:02:9f:7f:30:60:0d:ce:59:35:8e:bb:80:83:bd:71:e5: c1:a6:94:94:2a:da:1b:16:d7:f0:65:4c:6a:b9:14:1a:69:0f: e7:3f:32:06:bc:92:39:5f:43:c6:cb:67:fa:e4:32:aa:95:8e: b7:ba:62:bb:95:7a:31:54:23:f5:66:d7:ae:d7:38:fd:77:41: 81:ad:a1:d5:ef:51:da:c3:5c:31:24:ca:07:a6:af:5e:5d:78: dd:9b:a2:b7:3c:8a:20:b7:67:04:20:82:7c:ec:14:e1:e3:94: 29:c9:ed:05:cb:83:9c:dc:53:34:e9:2a:48:d6:10:7c:f1:9d: 43:38:c0:a1:c6:94:c4:ad:c6:9f:ca:1f:44:17:92:75:04:8a: c2:2f:64:4d:c8:ca:b7:5a:e0:a7:11:3f:b4:97:29:07:76:95: cf:c6:7a:db:cb:e8:4a:4d:8c:66:5d:88:14:3b:c4:f2:34:41: d5:b1:01:eb -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt8EwzzFxzBu7CeM0hSdAm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTViNzg5OTg5M2I5ZTI0OGJlNjE1NWRmNDQ1ZjYzMGFlNWQ2ODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpIQTZe3sDYmunkh/JXWBXRODUqh fwH4Kywdm6hmaVhHGPaJgtO8WrWxrC5aNLCoPlCBZZWcFJdBULriYh/Ei5gZu1k2 v8jL3qsRshCL67g3OuJqzexy7/cwQYcjWWnfR8e49kPcbbRHRsnuypi/GLv98XYQ UghE6WGt25mDqlbicSPKsFPyeKYebkRzuCyTd+8Ir391cHqW/459bZq13khqkSKC Rp12SYpAcO3JTOms2MaADxHQakJ7f1Dg+VXTsALsbzwA7y8KWVTWNQ3YVQPBa3/4 oKsftQB0gfRmOwEkz6kKo+AUG3nGe5pLlUuX/YuM7KQcC6p+zD5DWBHtxwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFFlbeJmJO54ki+YVXfRF9jCuXWhyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzc5Yjdh MS1iM2M4LTQ1YTYtYjk5MS03Yzc4ZWI1YjJkOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvNzliN2Ex LWIzYzgtNDVhNi1iOTkxLTdjNzhlYjViMmQ5NC8xL1dWdDRtWWs3bmlTTDVoVmQ5 RVgyTUs1ZGFISS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAncswGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC U3kwDQYJKoZIhvcNAQELBQADggEBAJb2kYPTa6jU9WIsEuPJMtaMGWuD+0wHa1um dAtTi4omwy2p7yN8BdUFpHXWIEjJZ6Oqmva0Qq3ya7EphhJ8O+mLE2oo3/UWkV59 Ap9/MGANzlk1jruAg71x5cGmlJQq2hsW1/BlTGq5FBppD+c/Mga8kjlfQ8bLZ/rk MqqVjre6YruVejFUI/Vm167XOP13QYGtodXvUdrDXDEkygemr15deN2borc8iiC3 ZwQggnzsFOHjlCnJ7QXLg5zcUzTpKkjWEHzxnUM4wKHGlMStxp/KH0QXknUEisIv ZE3Iyrda4KcRP7SXKQd2lc/GetvL6EpNjGZdiBQ7xPI0QdWxAes= -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:07 2026 by rpki-client