This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer File: WmEQLtTWbc2VLeATBOCv4ThNAL8.cer (raw, json) Hash identifier: ipUFgTq/wtDzwHOCbxstWPc8df81TRU46YSqstyp0Ws= Subject key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD57CCE31727F848E0049F1761A795292 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 09:01:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12886 IP: 62.204.160.0/19 IP: 94.101.120.0/22 IP: 103.21.236.0/22 IP: 103.51.228.0/22 IP: 103.76.96.0/22 IP: 103.192.160.0/22 IP: 103.234.232.0/22 IP: 128.65.144.0/21 IP: 170.81.52.0/22 IP: 170.84.228.0/22 IP: 185.88.92.0/22 IP: 185.188.18.0/24 IP: 193.23.64.0/19 IP: 212.118.192.0/19 IP: 2a02:f90::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:7c:ce:31:72:7f:84:8e:00:49:f1:76:1a:79:52:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 09:01:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:d2:32:7a:d3:2e:68:1d:a5:53:f4:ab:da: 76:7c:5e:f7:9f:57:08:34:be:72:1f:eb:f7:ab:93: 76:b2:58:ba:5e:11:78:f4:c3:76:fe:f0:3c:61:ce: c1:56:3f:d1:20:0e:2d:47:bc:92:1a:46:88:ad:bc: 7c:5c:4b:16:02:32:de:f1:d6:19:f8:9c:cf:87:cc: d4:55:8a:81:e9:04:07:eb:29:ec:4d:b6:5a:07:68: 37:2f:8d:2f:3a:64:27:73:ff:41:50:7b:d0:30:1e: 54:56:bd:95:bf:5d:a9:67:8d:f7:39:f6:e3:15:c8: a0:11:a7:48:da:41:c9:43:50:8f:74:9c:ef:7d:a2: 6b:da:20:e7:29:ef:64:5f:e1:ea:46:a2:7c:43:15: 1c:85:32:22:1a:45:79:5e:d0:8f:55:a2:8c:17:d6: bf:51:eb:d2:7e:09:ca:62:df:3b:ba:08:45:6e:e9: 4f:72:a4:6a:f4:a0:95:36:ee:37:7c:6b:37:6f:89: bb:dd:41:7d:0e:93:e1:ec:f3:49:da:77:d2:31:b0: c9:d1:95:0f:a8:7d:26:84:0c:d0:bd:cf:91:4d:12: 02:67:b9:5a:af:d8:56:c4:98:b1:02:c1:72:ac:c4: 55:56:04:3e:22:d8:56:54:44:1d:5e:2a:07:63:88: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.204.160.0/19 94.101.120.0/22 103.21.236.0/22 103.51.228.0/22 103.76.96.0/22 103.192.160.0/22 103.234.232.0/22 128.65.144.0/21 170.81.52.0/22 170.84.228.0/22 185.88.92.0/22 185.188.18.0/24 193.23.64.0/19 212.118.192.0/19 IPv6: 2a02:f90::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12886 Signature Algorithm: sha256WithRSAEncryption 86:b5:1f:2d:74:6b:c8:ca:30:27:19:fc:d5:8f:7f:d6:a8:f5: 99:88:2f:16:40:f1:cd:2f:3c:65:71:20:1a:b9:b2:93:90:3b: 4f:20:d0:07:09:56:9a:f8:d4:0f:1b:93:eb:c9:f7:05:bb:e1: 10:ce:c2:88:fc:99:8f:1f:14:42:2f:42:68:88:4a:85:48:af: c9:f6:0c:9b:5e:3d:d8:2e:20:7e:17:7d:bd:0a:6b:9c:0e:34: 60:6e:ca:66:c4:c4:76:7b:8c:b3:0d:5d:c5:63:ca:de:34:ca: e8:b7:31:95:a1:cd:4d:74:b2:fa:71:07:17:2f:f7:8b:89:a9: dc:61:bb:9c:b3:9f:26:84:47:77:d9:03:0f:fc:64:3e:12:50: 6c:9b:9e:26:10:fc:51:01:7e:21:e8:f9:b9:42:d8:db:6d:03: 44:a0:07:67:1a:96:5d:e2:60:67:d6:fc:29:c2:00:5a:8b:ef: 6b:c1:ba:24:57:44:db:3e:06:b1:0d:64:33:e1:de:bd:41:b8: 1d:5f:1e:46:c8:65:0c:a0:9f:52:9f:43:cb:f1:23:9a:2e:72: d1:d5:cc:78:95:d4:6d:fe:0e:f4:ab:18:58:ff:fc:bf:04:cc: 82:6e:1b:8f:9a:32:7b:59:db:8e:40:f3:61:51:0d:20:9d:e9: 43:1c:cf:0a -----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgISAZvVfM4xcn+EjgBJ8XYaeVKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MDkwMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTYxMTAyZWQ0ZDY2ZGNkOTUyZGUwMTMwNGUwYWZlMTM4NGQwMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9PSMnrTLmgdpVP0q9p2fF73n1cI NL5yH+v3q5N2sli6XhF49MN2/vA8Yc7BVj/RIA4tR7ySGkaIrbx8XEsWAjLe8dYZ +JzPh8zUVYqB6QQH6ynsTbZaB2g3L40vOmQnc/9BUHvQMB5UVr2Vv12pZ433Ofbj FcigEadI2kHJQ1CPdJzvfaJr2iDnKe9kX+HqRqJ8QxUchTIiGkV5XtCPVaKMF9a/ UevSfgnKYt87ughFbulPcqRq9KCVNu43fGs3b4m73UF9DpPh7PNJ2nfSMbDJ0ZUP qH0mhAzQvc+RTRICZ7lar9hWxJixAsFyrMRVVgQ+IthWVEQdXioHY4h7IwIDAQAB o4IC/DCCAvgwHQYDVR0OBBYEFFphEC7U1m3NlS3gEwTgr+E4TQC/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzk1ZTc4 YS01N2U3LTRhNTgtOTMxNi0yODhiZDZiOWUwOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvOTVlNzhh LTU3ZTctNGE1OC05MzE2LTI4OGJkNmI5ZTA5Mi8xL1dtRVFMdFRXYmMyVkxlQVRC T0N2NFRoTkFMOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUF BwEHAQH/BG0wazBaBAIAATBUAwQFPsygAwQCXmV4AwQCZxXsAwQCZzPkAwQCZ0xg AwQCZ8CgAwQCZ+roAwQDgEGQAwQCqlE0AwQCqlTkAwQCuVhcAwQAubwSAwQFwRdA AwQF1HbAMA0EAgACMAcDBQAqAg+QMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjJW MA0GCSqGSIb3DQEBCwUAA4IBAQCGtR8tdGvIyjAnGfzVj3/WqPWZiC8WQPHNLzxl cSAaubKTkDtPINAHCVaa+NQPG5PryfcFu+EQzsKI/JmPHxRCL0JoiEqFSK/J9gyb Xj3YLiB+F329CmucDjRgbspmxMR2e4yzDV3FY8reNMrotzGVoc1NdLL6cQcXL/eL iancYbucs58mhEd32QMP/GQ+ElBsm54mEPxRAX4h6Pm5QtjbbQNEoAdnGpZd4mBn 1vwpwgBai+9rwbokV0TbPgaxDWQz4d69QbgdXx5GyGUMoJ9Sn0PL8SOaLnLR1cx4 ldRt/g70qxhY//y/BMyCbhuPmjJ7WduOQPNhUQ0gnelDHM8K -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:02 2026 by rpki-client