This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer (raw, json) Hash identifier: ud1L3Ido2FikKXmxzM8hklffaPt9MqBVLy+UGkZI2gI= Subject key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A27A83B2BB6BBCA22015F58F124796 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41897 IP: 45.158.16.0/22 IP: 46.40.0.0/18 IP: 46.251.8.0/22 IP: 80.245.96.0/22 IP: 81.24.240.0/21 IP: 85.222.176.0/20 IP: 89.147.80.0/20 IP: 91.102.224.0/21 IP: 91.147.240.0/21 IP: 94.248.184.0/21 IP: 94.248.232.0/21 IP: 95.85.128.0/18 IP: 178.20.200.0/22 IP: 185.6.188.0/22 IP: 185.10.204.0/22 IP: 185.37.168.0/22 IP: 185.141.196.0/22 IP: 185.156.152.0/22 IP: 185.169.248.0/22 IP: 185.231.128.0/22 IP: 195.192.244.0/22 IP: 217.17.96.0/20 IP: 2a00:ad00::/29 IP: 2a03:df00::/29 IP: 2a04:f040::/29 IP: 2a0c:6300::/29 IP: 2a0f:7bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7a:83:b2:bb:6b:bc:a2:20:15:f5:8f:12:47:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:1b:a2:f6:eb:48:c4:90:b4:8e:41:39:c2: 58:29:d8:f2:eb:12:46:84:03:48:eb:81:b5:62:04: 34:86:31:3b:56:44:7a:8b:50:69:5b:41:cd:4b:e6: 63:43:50:4f:66:4b:90:e7:b8:b8:1a:dc:f5:c5:66: 19:02:9a:fc:e8:97:c5:b9:46:f9:cd:60:a1:42:f3: 08:ef:da:5e:4a:31:af:51:08:b5:ca:1d:51:51:1c: 4c:6f:a5:fd:6c:c5:5c:49:3f:a3:fa:f2:2f:1c:32: 6f:71:32:2e:e7:74:4d:89:82:45:fb:fd:2d:e6:85: 9f:d2:b3:45:7e:04:cb:ac:b9:36:43:87:33:bb:43: 83:b3:61:37:79:9a:d9:0d:b2:d9:35:c4:10:62:f0: 64:49:15:48:e5:90:f5:b3:d9:36:f9:41:35:47:33: 41:03:3b:bb:97:e0:a2:6a:25:f0:d7:99:04:b6:4b: f7:4a:17:d1:92:be:e0:1a:ab:e2:2b:93:c0:80:d1: a3:0b:05:44:36:bf:7b:34:7d:d5:e6:31:96:92:f0: 1a:d4:b7:2b:75:2a:06:73:78:8e:98:3b:4b:78:37: 93:70:c7:e3:e7:dd:cc:28:a0:57:e3:34:23:2b:58: 2f:1c:ee:f0:09:4f:7a:57:76:96:09:12:5e:67:a3: 77:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.16.0/22 46.40.0.0/18 46.251.8.0/22 80.245.96.0/22 81.24.240.0/21 85.222.176.0/20 89.147.80.0/20 91.102.224.0/21 91.147.240.0/21 94.248.184.0/21 94.248.232.0/21 95.85.128.0/18 178.20.200.0/22 185.6.188.0/22 185.10.204.0/22 185.37.168.0/22 185.141.196.0/22 185.156.152.0/22 185.169.248.0/22 185.231.128.0/22 195.192.244.0/22 217.17.96.0/20 IPv6: 2a00:ad00::/29 2a03:df00::/29 2a04:f040::/29 2a0c:6300::/29 2a0f:7bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41897 Signature Algorithm: sha256WithRSAEncryption 4e:f2:f5:1c:25:d1:16:cd:fa:b4:8d:f8:30:03:3f:2b:42:2e: c3:0f:95:9c:39:13:2c:01:c9:f7:08:c1:c7:9e:06:47:0d:43: f1:06:8a:17:2f:d8:d7:e2:51:6c:19:09:a5:67:a1:b1:d4:f0: e4:30:45:d1:14:ca:ec:4f:ea:53:b7:cc:38:cb:08:2d:ac:93: 92:5a:e5:30:be:b7:07:87:2b:00:50:1c:3c:bf:f4:e2:9b:d7: f7:e3:ba:64:64:df:d9:43:59:25:2c:a4:9b:aa:76:d5:61:31: c0:1f:f9:63:e1:ae:0f:1a:11:17:e9:9e:21:ae:ce:c2:18:3d: 28:d9:12:95:66:31:c8:20:e5:97:73:dc:74:19:29:38:af:ac: 83:13:82:b5:fd:60:65:e1:6d:54:70:f7:7b:07:0f:f0:4d:53: e9:37:fc:99:95:28:c7:44:e9:7a:dc:49:38:f3:42:4d:47:8d: 37:eb:72:43:65:7f:6e:65:b5:53:e5:d2:62:16:5d:4d:7c:62: da:2e:c9:7b:7d:9f:b6:73:bd:46:8a:c4:c1:50:b3:e4:5e:3e: e2:d8:f8:c7:90:f0:a1:9b:ee:05:e9:9b:1c:c9:4b:6f:ca:fb: 85:2b:46:d0:0b:77:36:ae:45:72:d6:ca:56:e1:3d:4a:79:bb: 3c:8d:58:3a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgISAZt4onqDsrtrvKIgFfWPEkeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWRkYTc1ZjgxMTA3NDNkMjUwYzMwNjhhMzU2Y2U2YWNmMWM0ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzysbovbrSMSQtI5BOcJYKdjy6xJG hANI64G1YgQ0hjE7VkR6i1BpW0HNS+ZjQ1BPZkuQ57i4Gtz1xWYZApr86JfFuUb5 zWChQvMI79peSjGvUQi1yh1RURxMb6X9bMVcST+j+vIvHDJvcTIu53RNiYJF+/0t 5oWf0rNFfgTLrLk2Q4czu0ODs2E3eZrZDbLZNcQQYvBkSRVI5ZD1s9k2+UE1RzNB Azu7l+CiaiXw15kEtkv3ShfRkr7gGqviK5PAgNGjCwVENr97NH3V5jGWkvAa1Lcr dSoGc3iOmDtLeDeTcMfj593MKKBX4zQjK1gvHO7wCU96V3aWCRJeZ6N3EwIDAQAB o4IDTjCCA0owHQYDVR0OBBYEFFndp1+BEHQ9JQwwaKNWzmrPHE/iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2ViZjNm Ny1lM2FiLTRmOGMtODZlOC03MDg3ZTNmZTJhNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZWJmM2Y3 LWUzYWItNGY4Yy04NmU4LTcwODdlM2ZlMmE1ZC8xL1dkMm5YNEVRZEQwbEREQm9v MWJPYXM4Y1QtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHMBggrBgEF BQcBBwEB/wSBvDCBuTCBiwQCAAEwgYQDBAItnhADBAYuKAADBAIu+wgDBAJQ9WAD BANRGPADBARV3rADBARZk1ADBANbZuADBANbk/ADBANe+LgDBANe+OgDBAZfVYAD BAKyFMgDBAK5BrwDBAK5CswDBAK5JagDBAK5jcQDBAK5nJgDBAK5qfgDBAK554AD BALDwPQDBATZEWAwKQQCAAIwIwMFAyoArQADBQMqA98AAwUDKgTwQAMFAyoMYwAD BQMqD3vAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCjqTANBgkqhkiG9w0BAQsF AAOCAQEATvL1HCXRFs36tI34MAM/K0Iuww+VnDkTLAHJ9wjBx54GRw1D8QaKFy/Y 1+JRbBkJpWehsdTw5DBF0RTK7E/qU7fMOMsILayTklrlML63B4crAFAcPL/04pvX 9+O6ZGTf2UNZJSykm6p21WExwB/5Y+GuDxoRF+meIa7Owhg9KNkSlWYxyCDll3Pc dBkpOK+sgxOCtf1gZeFtVHD3ewcP8E1T6Tf8mZUox0TpetxJOPNCTUeNN+tyQ2V/ bmW1U+XSYhZdTXxi2i7Je32ftnO9RorEwVCz5F4+4tj4x5DwoZvuBembHMlLb8r7 hStG0At3Nq5FctbKVuE9Snm7PI1YOg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:38 2026 by rpki-client