This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer File: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer (raw, json) Hash identifier: 1sGC1PW5h0Akxi1Ymmead6yemr9hE63I3nJI7LdDArI= Subject key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAC85BFF2A0E2EB6EC24B5CCF0E996 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61345 IP: 185.8.12.0/22 IP: 185.144.76.0/22 IP: 185.144.248.0/22 IP: 2a03:3140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c8:5b:ff:2a:0e:2e:b6:ec:24:b5:cc:f0:e9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7f:77:18:27:6c:0a:f5:af:07:0e:a7:3f:60: e1:f8:5b:9f:3e:e1:c7:f4:ef:7d:fc:f5:da:8c:60: 31:83:dd:80:1d:a4:7d:42:1f:87:2b:f6:3e:bf:7b: b8:56:1d:b8:13:cb:6f:95:0f:8e:19:47:09:a8:35: 09:d2:13:5b:80:ad:01:1d:46:e3:ff:a3:fb:14:e5: 6d:b4:73:cd:a5:55:13:74:28:93:c5:94:4e:74:ab: 2c:84:60:e1:aa:47:b1:40:6b:56:21:d4:34:9a:ff: c2:76:ee:a5:1c:42:c4:c4:d6:3c:67:58:0f:54:7e: a3:f9:cc:d4:ff:95:3f:37:3f:ac:62:cf:aa:57:45: cd:dd:45:22:e4:73:38:d1:43:de:03:c0:b9:4f:9d: c2:88:07:13:a7:88:5a:97:fb:2a:0d:03:04:6b:f0: 5a:74:c5:86:2b:75:be:92:45:38:99:98:c8:ee:29: ca:6b:b1:2d:84:cc:5e:bd:2e:6d:37:0b:02:45:1d: 91:48:38:32:dc:db:33:12:63:71:ce:65:2c:80:e9: 8c:7e:bb:b1:76:9c:04:f5:30:90:57:b1:62:80:be: 5c:65:33:3a:a4:11:b5:90:ff:b8:64:60:9e:ca:ce: 21:3f:cd:08:b6:f5:34:01:08:f8:a2:55:f8:f9:02: b5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.8.12.0/22 185.144.76.0/22 185.144.248.0/22 IPv6: 2a03:3140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61345 Signature Algorithm: sha256WithRSAEncryption 42:aa:da:de:8c:42:6c:07:13:88:e2:65:e1:89:11:21:5f:34: c8:6b:d9:52:6d:4b:43:20:d5:53:5d:be:63:26:67:a9:22:fb: 3e:5f:98:05:f7:c1:3e:a6:b6:ff:0a:c5:c8:cd:94:9f:23:0a: 7b:91:ec:f6:28:35:b9:be:db:ad:b3:6d:47:af:a2:01:0f:3a: 73:da:15:23:c1:34:68:62:96:7f:f4:a2:ac:69:05:1c:76:de: d7:6d:d1:ab:33:c1:3b:81:49:e6:a2:13:af:37:ed:1b:ce:af: 5f:6f:12:2b:e6:36:9a:23:4f:f9:bf:a1:dd:06:d7:5e:d3:90: f0:a0:93:d4:e2:d5:14:0a:1b:81:8c:0a:74:c3:1b:90:7c:86: 6d:64:4c:e9:1b:64:3b:d8:c6:48:6a:50:6d:74:a8:54:b2:d0: c5:c4:81:f3:bc:94:39:3d:7b:6e:62:ac:cd:e4:92:10:d7:d6: 74:c6:bd:5a:75:e3:45:07:f3:97:a7:3b:86:1c:cb:25:2a:70: ef:1c:63:80:d7:25:2c:14:84:d3:b0:64:38:de:8e:30:8e:84: 04:70:e6:8b:c9:dc:1f:72:14:c1:88:9b:24:24:da:24:8a:14: c3:de:51:42:09:f7:a4:77:b8:d7:8f:b9:aa:f6:fc:86:b9:b4: 12:fb:9a:9c -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9yshb/yoOLrbsJLXM8OmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YThmODEzNjZmZmM0M2M3MWY1YmI1MjFmODE1MDE3NjBlYmViMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkn93GCdsCvWvBw6nP2Dh+FufPuHH 9O99/PXajGAxg92AHaR9Qh+HK/Y+v3u4Vh24E8tvlQ+OGUcJqDUJ0hNbgK0BHUbj /6P7FOVttHPNpVUTdCiTxZROdKsshGDhqkexQGtWIdQ0mv/Cdu6lHELExNY8Z1gP VH6j+czU/5U/Nz+sYs+qV0XN3UUi5HM40UPeA8C5T53CiAcTp4hal/sqDQMEa/Ba dMWGK3W+kkU4mZjI7inKa7EthMxevS5tNwsCRR2RSDgy3NszEmNxzmUsgOmMfrux dpwE9TCQV7FigL5cZTM6pBG1kP+4ZGCeys4hP80ItvU0AQj4olX4+QK1KQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFFqPgTZv/EPHH1u1IfgVAXYOvrB0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwL2I4M2Fi NS1jZGIyLTQxNzQtODA5My04MDJkMDljZmM4MzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvYjgzYWI1 LWNkYjItNDE3NC04MDkzLTgwMmQwOWNmYzgzNS8xL1dvLUJObV84UThjZlc3VWgt QlVCZGc2LXNIUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuQgMAwQCuZBMAwQCuZD4MA0EAgACMAcDBQAq AzFAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDvoTANBgkqhkiG9w0BAQsFAAOC AQEAQqra3oxCbAcTiOJl4YkRIV80yGvZUm1LQyDVU12+YyZnqSL7Pl+YBffBPqa2 /wrFyM2UnyMKe5Hs9ig1ub7brbNtR6+iAQ86c9oVI8E0aGKWf/SirGkFHHbe123R qzPBO4FJ5qITrzftG86vX28SK+Y2miNP+b+h3QbXXtOQ8KCT1OLVFAobgYwKdMMb kHyGbWRM6RtkO9jGSGpQbXSoVLLQxcSB87yUOT17bmKszeSSENfWdMa9WnXjRQfz l6c7hhzLJSpw7xxjgNclLBSE07BkON6OMI6EBHDmi8ncH3IUwYibJCTaJIoUw95R Qgn3pHe414+5qvb8hrm0EvuanA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:12 2026 by rpki-client