This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer File: WXSHRy03y9cmGB-fOiA4bwObO6g.cer (raw, json) Hash identifier: W7nr7ODymYnW9DdZI94rnAbVsmaZb7ScpSRmB8Rsehk= Subject key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2327E3DF1157E2EF5E56AD4E67A69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.76.2.0 -- 194.76.7.255 IP: 2001:67c:424::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:32:7e:3d:f1:15:7e:2e:f5:e5:6a:d4:e6:7a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=597487472d37cbd726181f9f3a20386f039b3ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:20:4c:a0:8d:27:57:63:da:51:38:8f:33: da:de:34:b7:cd:79:62:c8:60:8e:90:8f:45:14:57: 93:5a:f8:10:5e:d1:31:ea:e2:61:13:ff:81:94:0f: 43:d8:6b:d2:e2:41:8d:6b:ed:c7:31:3f:ec:b4:8c: 90:d7:1c:ad:dd:59:a7:9d:33:a1:a8:d8:10:da:b8: 84:5a:fe:8c:b8:ad:95:57:f4:4b:11:01:2a:00:0f: 61:c6:1f:2b:2e:a8:12:95:28:3a:ce:42:80:1f:67: b6:28:f1:09:fc:e7:d3:70:c0:86:8f:40:9d:0f:8e: b9:52:8b:cb:b0:21:dc:aa:ed:a0:37:fe:64:a8:98: 71:f4:ce:dd:a2:e5:57:42:58:bf:3b:8b:05:5c:c6: ea:92:bc:9e:14:2e:1c:41:c9:62:f3:14:90:c8:ba: 5f:8e:5a:87:b7:53:43:bd:1a:b5:84:57:e0:d0:20: 98:e8:47:ec:13:99:78:bd:bd:4a:3f:e0:2f:6b:f2: ae:30:e6:cd:fe:95:f1:c3:ce:bd:90:e1:11:66:cc: 48:52:e0:04:4a:1a:74:0f:a2:5a:43:61:b8:7c:ea: f9:4f:b9:0d:bf:25:28:90:e7:e5:5f:c7:fa:e4:b4: fa:bc:2c:07:c9:61:f4:c2:35:14:4c:fe:57:5f:42: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.2.0-194.76.7.255 IPv6: 2001:67c:424::/48 Signature Algorithm: sha256WithRSAEncryption 20:56:30:30:a6:b5:a9:1c:55:ac:b1:a6:a9:bb:c7:d4:5f:72: 59:5a:13:58:c8:f3:d8:5b:d3:d2:a5:a8:7e:2e:f3:13:c4:8b: 47:62:14:65:55:94:25:f5:6e:26:08:18:50:b7:ea:ec:98:d6: 05:79:49:9d:48:ee:96:14:d4:8c:c0:5d:f9:b7:92:20:9d:f2: 4f:1c:77:2a:96:4a:31:49:32:43:d7:2d:4f:e9:5f:7b:da:09: 4e:69:98:74:b5:0e:46:93:66:cd:b6:0f:25:09:8c:22:a9:44: b5:b0:6f:87:ea:4a:ee:eb:43:8b:ee:e0:ad:56:d8:0b:00:30: fb:4d:6d:65:2d:72:ed:80:66:3f:95:b0:3b:4b:e9:2b:69:22: 6f:00:a8:80:3a:61:30:08:e0:8c:0b:be:9e:e7:90:8c:55:67: 09:90:00:07:9e:cc:18:32:16:26:8b:c2:de:44:8d:da:13:f8: 53:b2:55:b0:a4:33:de:85:d6:b6:4e:43:c9:38:49:f9:80:a2: 25:02:8e:f1:82:39:2c:a3:2b:df:bd:1c:5e:1d:83:eb:05:50: 84:61:00:45:d7:aa:85:5e:dc:4d:d1:52:34:b9:a4:ba:f7:cd: 96:71:1e:96:75:1c:32:7e:2a:be:9e:64:22:37:24:6c:ab:a7: ac:b0:b0:b1 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgISAZt4ojJ+PfEVfi715WrU5nppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTc0ODc0NzJkMzdjYmQ3MjYxODFmOWYzYTIwMzg2ZjAzOWIzYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2cgTKCNJ1dj2lE4jzPa3jS3zXli yGCOkI9FFFeTWvgQXtEx6uJhE/+BlA9D2GvS4kGNa+3HMT/stIyQ1xyt3VmnnTOh qNgQ2riEWv6MuK2VV/RLEQEqAA9hxh8rLqgSlSg6zkKAH2e2KPEJ/OfTcMCGj0Cd D465UovLsCHcqu2gN/5kqJhx9M7douVXQli/O4sFXMbqkryeFC4cQcli8xSQyLpf jlqHt1NDvRq1hFfg0CCY6EfsE5l4vb1KP+Ava/KuMObN/pXxw869kOERZsxIUuAE Shp0D6JaQ2G4fOr5T7kNvyUokOflX8f65LT6vCwHyWH0wjUUTP5XX0J6+wIDAQAB o4ICnTCCApkwHQYDVR0OBBYEFFl0h0ctN8vXJhgfnzogOG8DmzuoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2VhMjdm My1kYjc0LTQ5NjMtYTE4Yy0wMzUyODEyODliYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvZWEyN2Yz LWRiNzQtNDk2My1hMThjLTAzNTI4MTI4OWJiMC8xL1dYU0hSeTAzeTljbUdCLWZP aUE0YndPYk82Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF BwEHAQH/BCkwJzAUBAIAATAOMAwDBAHCTAIDBAPCTAAwDwQCAAIwCQMHACABBnwE JDANBgkqhkiG9w0BAQsFAAOCAQEAIFYwMKa1qRxVrLGmqbvH1F9yWVoTWMjz2FvT 0qWofi7zE8SLR2IUZVWUJfVuJggYULfq7JjWBXlJnUjulhTUjMBd+beSIJ3yTxx3 KpZKMUkyQ9ctT+lfe9oJTmmYdLUORpNmzbYPJQmMIqlEtbBvh+pK7utDi+7grVbY CwAw+01tZS1y7YBmP5WwO0vpK2kibwCogDphMAjgjAu+nueQjFVnCZAAB57MGDIW JovC3kSN2hP4U7JVsKQz3oXWtk5DyThJ+YCiJQKO8YI5LKMr370cXh2D6wVQhGEA RdeqhV7cTdFSNLmkuvfNlnEelnUcMn4qvp5kIjckbKunrLCwsQ== -----END CERTIFICATE-----Generated at Wed Jan 21 13:53:00 2026 by rpki-client