This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer File: WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer (raw, json) Hash identifier: 3MpKZN7lgOgIs+vfQz4dbeilEolXiq4QlX6tO6G0/8E= Subject key identifier: 59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5F9AADCFE860A5D996076E6DEE69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51141 IP: 91.216.166.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5f:9a:ad:cf:e8:60:a5:d9:96:07:6e:6d:ee:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:e7:9d:82:77:22:55:a6:6f:da:f4:98:cd: 3b:93:cd:2a:aa:22:07:44:27:48:3a:f0:7e:7e:f8: 65:2e:9c:e7:88:87:7f:b5:52:bf:9a:65:89:91:61: 56:e7:3b:5e:84:f9:be:8d:a0:38:b7:c3:3c:22:59: 1a:ca:32:56:4d:0e:16:f5:4c:1a:f6:64:44:bf:f4: 23:aa:42:f3:22:c8:94:ff:93:9c:40:b5:15:2a:8a: cd:13:66:94:83:f9:73:c4:70:6a:37:e1:7e:37:6b: 6f:31:f7:87:ee:e8:92:64:89:e0:91:5d:42:3a:c9: c8:79:26:6d:79:33:4c:d3:3a:56:9b:4c:32:ff:0e: 57:45:09:24:b1:09:45:c4:d9:5a:78:23:3f:8f:16: b1:4a:20:27:0f:d1:78:bb:ca:7c:58:cd:61:70:fa: 9b:72:94:fc:f4:d9:3a:68:7d:41:66:8d:7a:bb:c5: 40:a2:f6:6d:9d:19:8e:70:ea:bf:a2:c7:07:f5:94: 46:0b:f6:46:4f:62:42:27:87:76:13:85:d9:87:2c: 4e:80:35:1e:07:51:f7:64:28:12:0e:80:93:b1:18: af:4f:20:f0:b6:fc:ae:8e:f0:46:bd:af:f8:ef:87: f7:f5:3a:ba:e6:47:b7:e1:57:b1:b6:7d:d8:94:c0: 49:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.166.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51141 Signature Algorithm: sha256WithRSAEncryption 20:52:32:4f:de:d3:47:54:d3:b9:b9:d7:d8:18:0d:ad:d2:f9: 90:e2:0b:b1:c6:54:a6:a8:e7:7a:36:ae:ee:18:98:1e:cd:c8: 1a:8c:42:ea:de:97:7c:c9:3c:f4:28:0f:e8:4d:1e:98:d9:a1: 87:4a:fc:aa:9e:17:c0:de:fe:2d:3e:9a:8d:bd:ff:be:26:da: ca:c8:c7:98:57:5c:f7:88:02:b2:c6:f8:a4:73:79:7d:44:31: 8d:67:b1:63:cc:a8:98:ee:fe:58:38:15:a4:4f:32:34:c3:e1: be:94:fa:58:22:65:b3:4f:77:9f:f2:9d:85:34:ae:e6:05:1a: fc:91:5b:ca:29:a6:00:b8:f9:64:3b:7c:61:a5:cb:28:26:e7: 53:3a:69:d4:20:7b:1a:28:d9:ac:f1:43:5c:62:05:30:17:7d: 1e:a2:a3:72:b4:f7:2c:bc:7d:a2:57:f8:60:28:b7:e8:69:7f: c6:1b:8b:17:26:f6:83:ab:43:63:2e:66:22:0c:40:0d:bf:09: af:59:8d:2d:c3:46:57:34:40:66:57:09:5f:09:0a:49:6a:17: c2:df:60:6e:31:e5:b5:ea:af:58:c8:01:ec:9d:1a:ee:db:e7: b3:a4:e5:6e:5f:2f:1a:32:07:ae:67:a4:79:da:6a:dd:0c:ec: ad:e2:0f:b4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt261+arc/oYKXZlgdube5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTkzZWZkZDBhMjhmZDNhYjY2YjdhMDViOWI4ZDc3YzU2NjY2MzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4bnnYJ3IlWmb9r0mM07k80qqiIH RCdIOvB+fvhlLpzniId/tVK/mmWJkWFW5ztehPm+jaA4t8M8IlkayjJWTQ4W9Uwa 9mREv/QjqkLzIsiU/5OcQLUVKorNE2aUg/lzxHBqN+F+N2tvMfeH7uiSZIngkV1C OsnIeSZteTNM0zpWm0wy/w5XRQkksQlFxNlaeCM/jxaxSiAnD9F4u8p8WM1hcPqb cpT89Nk6aH1BZo16u8VAovZtnRmOcOq/oscH9ZRGC/ZGT2JCJ4d2E4XZhyxOgDUe B1H3ZCgSDoCTsRivTyDwtvyujvBGva/474f39Tq65ke34Vextn3YlMBJiwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFmT790KKP06tmt6Bbm413xWZmNWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzZkMDlh ZC1hZjVlLTRiZjAtOWZmMi1hOTUyMmIyZDA0OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNmQwOWFk LWFmNWUtNGJmMC05ZmYyLWE5NTIyYjJkMDQ4Yi8xL1daUHYzUW9vX1RxMmEzb0Z1 YmpYZkZabVkxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9imMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDHxTANBgkqhkiG9w0BAQsFAAOCAQEAIFIyT97TR1TTubnX2BgNrdL5kOILscZU pqjnejau7hiYHs3IGoxC6t6XfMk89CgP6E0emNmhh0r8qp4XwN7+LT6ajb3/viba ysjHmFdc94gCssb4pHN5fUQxjWexY8yomO7+WDgVpE8yNMPhvpT6WCJls093n/Kd hTSu5gUa/JFbyimmALj5ZDt8YaXLKCbnUzpp1CB7GijZrPFDXGIFMBd9HqKjcrT3 LLx9olf4YCi36Gl/xhuLFyb2g6tDYy5mIgxADb8Jr1mNLcNGVzRAZlcJXwkKSWoX wt9gbjHlteqvWMgB7J0a7tvns6Tlbl8vGjIHrmekedpq3QzsreIPtA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:37 2026 by rpki-client