This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer File: Wh1F7dft3pqLhipzmtqOeLfcgrk.cer (raw, json) Hash identifier: cF1jDlGtW93VgZEq4O4yAi3xJkvc5Pyj/zO+myBNuWE= Subject key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A286265687D0F81F764DD2F7538829 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211113 IP: 2.58.116.0/22 IP: 5.61.212.0/22 IP: 37.25.40.0/22 IP: 94.101.102.0/24 IP: 185.89.28.0/22 IP: 2a06:ea80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:86:26:56:87:d0:f8:1f:76:4d:d2:f7:53:88:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:e4:c8:d5:92:06:eb:7f:5b:fc:68:3c:8d: 11:8b:99:90:4e:b1:0f:09:55:2e:be:ab:14:3c:1c: cd:bb:e5:7a:2e:d8:16:a9:d8:46:5d:25:bb:52:ef: b9:1f:62:2b:66:13:8b:39:0c:46:61:94:59:9e:f7: ea:90:dd:b6:c7:f0:4b:eb:a0:d7:fa:00:be:36:06: ff:6f:da:69:14:f5:92:db:64:86:0a:f5:44:63:8d: 90:0a:b2:f8:b0:cd:af:6c:be:22:a5:dc:3b:22:69: 26:87:2b:ef:9c:c4:ad:d2:bb:8c:eb:13:fb:22:f9: d4:5b:1d:cc:4f:de:83:a2:c6:88:6d:72:a8:ed:0d: 12:e3:0e:fd:ee:24:be:28:b9:5c:69:76:90:42:ea: cb:51:02:ed:8a:ff:59:e4:26:ba:31:1e:af:a5:28: 4d:68:ac:86:6c:d7:d6:71:05:00:2a:39:86:4c:3b: 8f:2a:f5:65:23:93:ff:ab:c1:71:ee:d6:ac:84:51: 13:3f:bc:c8:e4:11:d2:59:91:4a:c5:82:30:25:ac: cb:c2:3d:23:6c:6c:de:8c:91:16:45:c9:04:99:77: 20:18:01:88:52:57:c2:89:57:82:73:36:dc:d9:6b: 42:37:be:d7:55:9e:ed:20:e9:eb:5e:7d:fd:17:99: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.116.0/22 5.61.212.0/22 37.25.40.0/22 94.101.102.0/24 185.89.28.0/22 IPv6: 2a06:ea80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211113 Signature Algorithm: sha256WithRSAEncryption 4b:97:2a:9f:3c:31:82:fa:43:ac:b7:0c:bb:f7:30:e6:5b:8c: e8:93:3a:56:41:8c:d3:e0:d9:41:e7:29:7a:3c:e3:76:14:e5: 03:7f:ca:4c:f1:76:d2:a6:1b:1d:29:f1:74:9b:57:c1:2f:11: 7c:69:56:0c:29:52:41:a8:78:28:bb:dd:6a:b5:d5:15:b6:9a: 2e:48:ba:33:7d:9a:08:0f:7d:cc:af:f0:63:c7:15:8d:bc:b5: 0a:b0:02:59:23:2d:ac:88:63:ff:4d:49:33:23:01:14:93:65: 36:8f:f5:4e:84:01:d2:32:4d:5f:b7:62:af:b3:cf:d0:1e:15: 70:62:5d:98:d3:88:5a:ba:9d:0a:62:56:7b:ff:19:34:e0:2b: 61:19:e2:b8:dd:b9:b8:29:96:5b:e8:28:95:40:7d:61:8d:cd: f1:62:fb:c4:e0:bb:e8:23:98:a8:7a:cc:e1:69:17:56:42:19: 7f:33:4f:a9:95:10:62:c4:1a:f6:91:b7:4a:fe:13:06:ad:0a: 4b:f2:0e:ef:d5:3b:5a:f5:b2:68:26:1c:4a:05:cc:44:85:3f: 67:5c:77:05:3c:dc:02:65:2e:f8:5a:dd:db:74:4b:f9:38:72: 71:eb:53:26:0d:1e:87:07:e7:7f:17:52:d2:1e:f6:d9:84:d8: ae:c6:0f:bd -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt4ooYmVofQ+B92TdL3U4gpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTFkNDVlZGQ3ZWRkZTlhOGI4NjJhNzM5YWRhOGU3OGI3ZGM4MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sjkyNWSBut/W/xoPI0Ri5mQTrEP CVUuvqsUPBzNu+V6LtgWqdhGXSW7Uu+5H2IrZhOLOQxGYZRZnvfqkN22x/BL66DX +gC+Ngb/b9ppFPWS22SGCvVEY42QCrL4sM2vbL4ipdw7ImkmhyvvnMSt0ruM6xP7 IvnUWx3MT96DosaIbXKo7Q0S4w797iS+KLlcaXaQQurLUQLtiv9Z5Ca6MR6vpShN aKyGbNfWcQUAKjmGTDuPKvVlI5P/q8Fx7tashFETP7zI5BHSWZFKxYIwJazLwj0j bGzejJEWRckEmXcgGAGIUlfCiVeCczbc2WtCN77XVZ7tIOnrXn39F5kfvQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFFodRe3X7d6ai4Yqc5rajni33IK5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzM3M2Vj YS1jYTQzLTRkNjItYTEwZi1iYzdmYzcxOWQzMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMzczZWNh LWNhNDMtNGQ2Mi1hMTBmLWJjN2ZjNzE5ZDMxYi8xL1doMUY3ZGZ0M3BxTGhpcHpt dHFPZUxmY2dyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCAjp0AwQCBT3UAwQCJRkoAwQAXmVmAwQCuVkc MA0EAgACMAcDBQMqBuqAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM4qTANBgkq hkiG9w0BAQsFAAOCAQEAS5cqnzwxgvpDrLcMu/cw5luM6JM6VkGM0+DZQecpejzj dhTlA3/KTPF20qYbHSnxdJtXwS8RfGlWDClSQah4KLvdarXVFbaaLki6M32aCA99 zK/wY8cVjby1CrACWSMtrIhj/01JMyMBFJNlNo/1ToQB0jJNX7dir7PP0B4VcGJd mNOIWrqdCmJWe/8ZNOArYRniuN25uCmWW+golUB9YY3N8WL7xOC76COYqHrM4WkX VkIZfzNPqZUQYsQa9pG3Sv4TBq0KS/IO79U7WvWyaCYcSgXMRIU/Z1x3BTzcAmUu +Frd23RL+ThycetTJg0ehwfnfxdS0h722YTYrsYPvQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:40 2026 by rpki-client