This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer (raw, json) Hash identifier: pQUs0Nv/G+rxWeLIilNsbPegnUPLw2yo379FSOr67Dw= Subject key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F850DBC801D50AC5B74C480A32905C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12315 IP: 185.215.40.0/22 IP: 193.254.214.0/23 IP: 213.34.32.0/19 IP: 2a04:c580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0d:bc:80:1d:50:ac:5b:74:c4:80:a3:29:05:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:ee:d4:b6:44:97:79:2b:c8:c3:8a:fe:d8: 58:84:f9:98:d8:f2:02:55:af:06:4c:55:9c:67:82: 2c:b0:1a:14:e2:93:10:14:e3:73:c6:0a:37:2b:15: f7:72:b1:a5:7b:15:3d:27:e4:28:6b:02:d4:49:4f: f8:30:95:31:5a:6b:67:da:01:17:d2:da:c3:11:ff: f9:21:81:66:f2:b3:6b:b6:1d:60:b0:3b:18:9b:c4: a0:81:0f:cf:7d:0e:e6:0b:e8:76:ed:30:26:3d:64: 1e:1a:44:cc:34:4e:ea:ab:25:ae:69:47:26:ed:6c: 56:27:75:1d:37:9c:28:9f:26:c8:65:96:13:25:25: 3e:6e:c2:2e:1c:72:f0:21:0f:52:53:65:c2:e2:e8: e7:14:f3:1e:8b:72:2e:12:a9:3a:dd:91:26:be:c0: 3c:ff:28:7a:14:2b:e1:c1:de:fe:0e:5f:64:ae:65: 6d:94:ad:49:4b:47:50:4e:73:2c:69:ac:8c:64:d3: 97:75:92:9c:3a:ee:b9:58:02:29:f2:db:35:45:26: 49:c1:f2:e5:87:55:ee:21:c0:f6:09:ab:20:04:df: 88:69:ea:01:b3:c3:ac:7e:d3:c6:08:f1:8b:69:c9: 54:62:0b:c0:0c:de:ce:f6:fa:9f:1f:a9:12:95:32: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.40.0/22 193.254.214.0/23 213.34.32.0/19 IPv6: 2a04:c580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12315 Signature Algorithm: sha256WithRSAEncryption 40:c4:c9:b7:61:7b:a7:5b:ad:a7:34:4c:a4:6c:7c:88:ba:1f: 4c:9b:42:21:34:54:52:63:fc:e6:01:16:3e:16:a1:25:5a:3f: ca:42:32:c0:8d:55:69:40:18:bb:ba:74:92:d7:9a:2c:76:b5: 9c:bf:f8:8e:9e:a8:1b:48:a0:b8:87:55:33:0f:63:ae:07:53: 67:fd:33:87:4c:7d:e6:a1:2f:f3:66:58:d4:d8:15:4f:2a:1c: ce:10:f5:2b:73:9c:07:7b:41:34:cd:e0:32:48:4a:ad:54:8f: d4:9c:6e:40:32:bb:3c:4d:4e:7c:7f:c8:0a:ec:c8:e5:3a:5b: b1:67:7c:f1:c9:35:c4:23:9b:ef:08:51:72:4e:27:e1:80:85: 37:26:f9:5f:8f:d4:6e:13:b5:4f:31:2b:46:b9:87:83:46:bf: 34:2d:ec:06:58:e8:f3:70:31:b8:3e:28:6f:62:bf:3c:77:c5: 94:d2:70:30:1c:f6:00:2c:fd:f4:01:9b:2c:b0:9f:f6:f4:e6: f3:0f:42:e0:19:d8:b3:f3:9d:71:70:48:af:13:db:0c:d0:4a: ab:67:35:b2:6f:e6:6d:14:ad:fe:5c:6d:97:29:96:8d:14:31: f4:dd:77:1e:c7:6f:04:90:0d:57:ab:85:4c:51:de:95:64:f3: db:e5:de:58 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt/hQ28gB1QrFt0xICjKQXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTA1MzJlOGZkYTRiMjdhNTYxNWFlYmI4ZDdmZDBmY2FmYTlmNjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGru1LZEl3kryMOK/thYhPmY2PIC Va8GTFWcZ4IssBoU4pMQFONzxgo3KxX3crGlexU9J+QoawLUSU/4MJUxWmtn2gEX 0trDEf/5IYFm8rNrth1gsDsYm8SggQ/PfQ7mC+h27TAmPWQeGkTMNE7qqyWuaUcm 7WxWJ3UdN5wonybIZZYTJSU+bsIuHHLwIQ9SU2XC4ujnFPMei3IuEqk63ZEmvsA8 /yh6FCvhwd7+Dl9krmVtlK1JS0dQTnMsaayMZNOXdZKcOu65WAIp8ts1RSZJwfLl h1XuIcD2CasgBN+IaeoBs8OsftPGCPGLaclUYgvADN7O9vqfH6kSlTJiXwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFFoFMuj9pLJ6VhWuu41/0PyvqfYQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2IyNjZi Yi0xYTNkLTRlNDktODU3Yy1lZjM4OTE0YThhYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvYjI2NmJi LTFhM2QtNGU0OS04NTdjLWVmMzg5MTRhOGFiMC8xL1dnVXk2UDJrc25wV0ZhNjdq WF9RX0stcDloQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCudcoAwQBwf7WAwQF1SIgMA0EAgACMAcDBQMq BMWAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjAbMA0GCSqGSIb3DQEBCwUAA4IB AQBAxMm3YXunW62nNEykbHyIuh9Mm0IhNFRSY/zmARY+FqElWj/KQjLAjVVpQBi7 unSS15osdrWcv/iOnqgbSKC4h1UzD2OuB1Nn/TOHTH3moS/zZljU2BVPKhzOEPUr c5wHe0E0zeAySEqtVI/UnG5AMrs8TU58f8gK7MjlOluxZ3zxyTXEI5vvCFFyTifh gIU3Jvlfj9RuE7VPMStGuYeDRr80LewGWOjzcDG4PihvYr88d8WU0nAwHPYALP30 AZsssJ/29ObzD0LgGdiz851xcEivE9sM0EqrZzWyb+ZtFK3+XG2XKZaNFDH03Xce x28EkA1Xq4VMUd6VZPPb5d5Y -----END CERTIFICATE-----Generated at Tue Jan 27 07:15:47 2026 by rpki-client