This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer File: WhsazyJvPC_8McHrK2pRlLULUvQ.cer (raw, json) Hash identifier: 2uUvQaPR2bz9LfV8Vs/vQc+efCLyDkKF3w5W9oOasYc= Subject key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAD83CF052A957396621D30E7656BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.239.20.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d8:3c:f0:52:a9:57:39:66:21:d3:0e:76:56:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:4a:75:8d:2b:a1:56:67:62:6e:14:ec:04: ca:5d:b9:ff:7e:52:0e:6c:47:bc:e3:3b:be:b8:25: ad:75:7f:bd:c7:24:cc:45:ce:9d:a7:02:af:68:a8: 50:80:ac:0c:a1:f2:c9:ed:aa:ec:38:f1:45:28:2f: 96:7e:cb:4e:b6:4a:fb:d7:93:99:7a:0b:a6:f6:7d: 55:48:d2:d3:57:76:d6:00:11:34:30:dc:04:11:69: 9c:76:38:8e:d9:c8:91:09:b8:64:3a:68:24:bd:4d: 3c:7a:0c:8b:63:87:bc:f0:a0:70:ea:f8:bd:4f:b6: 2d:5d:a6:f0:a4:1a:6e:ac:9f:64:e5:2b:4f:8c:20: 58:79:57:7c:89:de:7c:13:59:01:c8:a7:dc:14:0a: 47:f9:af:ce:07:85:9b:31:6c:29:77:a1:c7:cd:0b: 94:8c:c1:32:e0:f8:72:86:57:0c:44:9b:b6:48:1e: 10:12:e6:47:8b:21:79:c2:aa:a7:8f:bc:36:2a:09: 92:aa:62:dc:a0:14:40:70:b0:55:d8:aa:6a:4e:dd: 30:b3:39:d7:6c:c4:81:5f:4a:78:56:b9:43:33:5b: 6d:18:21:ec:82:9e:ef:a0:58:5f:c1:48:9a:2c:79: 1e:52:35:b7:e4:9a:59:cf:a7:5d:b9:d1:ec:b6:34: f2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.20.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:69:87:e1:ea:e1:7a:75:df:60:ee:1e:08:d0:f3:18:09:e2: b7:ac:bf:59:3b:4b:9d:fa:e2:95:9d:ac:fa:ef:9b:82:6f:e3: 5d:94:73:ff:ce:dd:8d:27:09:9b:9c:3b:14:d7:93:44:70:57: 16:db:a2:af:84:d4:eb:5b:56:e9:64:cd:3d:10:0c:3c:54:1e: 97:43:09:5e:da:49:6a:a9:4a:ee:34:8f:51:2b:d1:79:28:95: c7:2d:28:6b:8a:e1:e3:1d:94:0a:ad:96:6a:f0:aa:4c:12:ca: ec:a4:49:69:26:30:7b:97:b3:68:f2:e5:f5:43:3f:eb:1b:d1: 3f:fd:29:f9:a1:85:00:21:60:10:9e:f8:e8:cf:67:8d:ac:17: b3:21:b3:73:f9:b4:9c:dd:18:6d:86:0d:e2:33:5c:f8:3d:d7: 65:d7:ef:28:1f:e4:bf:29:01:8f:5e:14:88:81:25:4e:9d:28: 62:ab:60:2b:2f:a1:73:41:fc:aa:24:72:99:3b:f7:6b:2a:76: 48:86:4a:a2:c3:fe:5b:83:1f:89:95:f5:9e:12:8e:52:3b:19: 81:42:39:70:97:3c:9a:0c:a4:08:f6:42:d8:7b:16:a3:c6:dc: f9:9f:fc:bd:d2:2e:37:e1:e5:ae:ca:8b:a6:0e:9d:2e:9a:b7: b2:7a:98:a1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt26tg88FKpVzlmIdMOdla+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTFiMWFjZjIyNmYzYzJmZmMzMWMxZWIyYjZhNTE5NGI1MGI1MmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooxKdY0roVZnYm4U7ATKXbn/flIO bEe84zu+uCWtdX+9xyTMRc6dpwKvaKhQgKwMofLJ7arsOPFFKC+WfstOtkr715OZ egum9n1VSNLTV3bWABE0MNwEEWmcdjiO2ciRCbhkOmgkvU08egyLY4e88KBw6vi9 T7YtXabwpBpurJ9k5StPjCBYeVd8id58E1kByKfcFApH+a/OB4WbMWwpd6HHzQuU jMEy4PhyhlcMRJu2SB4QEuZHiyF5wqqnj7w2KgmSqmLcoBRAcLBV2KpqTt0wsznX bMSBX0p4VrlDM1ttGCHsgp7voFhfwUiaLHkeUjW35JpZz6ddudHstjTyIQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFobGs8ibzwv/DHB6ytqUZS1C1L0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzIzYjVm OS04ODgwLTRiNTQtYWQwOC03MzFkZGIxYzA3ZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvMjNiNWY5 LTg4ODAtNGI1NC1hZDA4LTczMWRkYjFjMDdlZC8xL1doc2F6eUp2UENfOE1jSHJL MnBSbExVTFV2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwe8UMA0GCSqGSIb3DQEBCwUAA4IBAQBKaYfh 6uF6dd9g7h4I0PMYCeK3rL9ZO0ud+uKVnaz675uCb+NdlHP/zt2NJwmbnDsU15NE cFcW26KvhNTrW1bpZM09EAw8VB6XQwle2klqqUruNI9RK9F5KJXHLShriuHjHZQK rZZq8KpMEsrspElpJjB7l7No8uX1Qz/rG9E//Sn5oYUAIWAQnvjoz2eNrBezIbNz +bSc3Rhthg3iM1z4Pddl1+8oH+S/KQGPXhSIgSVOnShiq2ArL6FzQfyqJHKZO/dr KnZIhkqiw/5bgx+JlfWeEo5SOxmBQjlwlzyaDKQI9kLYexajxtz5n/y90i434eWu youmDp0umreyepih -----END CERTIFICATE-----Generated at Tue Jan 27 02:11:30 2026 by rpki-client