This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer (raw, json) Hash identifier: 7I1rOJ7HPFDjxvFgq2w8t+ZGEAAtiY8oSMVMrO7czNk= Subject key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC799BE308F998F9560149673BDC99A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60516 IP: 185.30.4.0/22 IP: 2a00:abe0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:99:be:30:8f:99:8f:95:60:14:96:73:bd:c9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:fa:98:30:f9:b9:ba:50:0e:0c:08:f9:19: 75:7e:a6:33:b4:82:da:9b:2a:a5:b0:79:56:8b:fc: 91:43:bd:00:5f:9b:48:85:4d:8f:f0:04:6c:d1:f2: 9c:07:91:ab:f2:c1:f7:65:bc:74:41:28:55:19:1c: 35:3b:83:30:cb:91:24:f6:ae:cc:48:d3:14:67:4c: 04:71:0a:5e:d8:0c:28:b6:c5:c7:9d:08:c9:ee:96: c4:6a:43:ac:71:a0:6a:0e:83:3f:1c:83:4a:27:7c: b3:b1:2c:1d:b9:3d:de:5c:32:9b:dc:81:5f:35:b3: e9:30:53:c7:f2:eb:ff:63:4f:8a:6f:46:62:90:0c: 4e:66:be:18:76:b8:36:13:89:b2:66:1b:c5:2f:18: 88:6a:c5:cf:8f:e3:4e:dd:3b:fa:1f:3e:c5:9d:9b: 29:7e:72:dc:4b:ae:11:5e:74:52:84:92:da:d9:f0: 34:c1:59:42:80:fa:ce:59:c2:6c:ec:c7:2b:e5:b4: a4:91:8a:0a:86:8f:4c:94:9c:73:e1:19:83:92:71: 5d:35:49:a4:b9:97:b1:a6:00:af:ff:56:92:ba:56: 38:01:2e:1a:0f:b6:4d:a1:2c:9a:f2:3b:25:06:28: 7c:f4:e1:b8:88:c8:a2:9f:78:4e:68:75:4e:03:97: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.4.0/22 IPv6: 2a00:abe0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60516 Signature Algorithm: sha256WithRSAEncryption 5f:e7:12:41:ef:86:37:2b:65:c3:f6:c5:7b:49:f2:55:e0:f0: 11:41:40:02:90:76:0d:f4:0d:cd:eb:04:7e:19:c8:cc:70:9c: a2:ac:3f:4e:cc:f5:19:e3:ab:97:e5:f3:6e:e2:78:d4:fa:85: cc:08:c7:c8:b6:95:d5:2b:ff:f8:ec:c8:87:e9:64:00:6a:ed: ff:ce:d7:77:fe:88:01:42:01:c9:21:ef:78:63:ac:ae:b3:0c: b4:e2:ee:77:4b:5a:80:d6:46:01:44:a8:00:d8:4e:b1:45:bd: 22:a5:b0:7a:8a:d0:7e:a7:72:71:66:52:57:97:00:ad:9d:2c: 52:9a:2e:22:f9:f5:ec:c2:a0:32:fc:37:80:8c:08:a7:8e:0a: ea:79:42:23:28:56:6c:8d:af:47:ec:1d:d9:a2:d5:48:73:cb: 8c:00:2e:12:78:35:f3:2e:d5:06:3a:ec:0a:73:d9:84:53:24: 17:18:ad:2d:ed:63:2b:15:8e:fa:38:49:32:44:1e:89:ec:f4: 0c:f0:34:36:11:8a:6a:c8:03:9a:d5:d5:ea:1c:22:85:58:98: a4:b2:f3:f9:86:86:03:d9:92:cd:1f:dc:80:00:d8:49:07:36: f1:c4:c7:24:25:7c:2c:fd:3e:e8:ba:ec:80:ad:30:64:ce:19: 61:fb:00:ee -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x5m+MI+Zj5VgFJZzvcmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YThkMzg5Mjc4NDg1ZWRkNTBkMzJjZjVjYTg0Y2UyNzI4YzA4Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrf6mDD5ubpQDgwI+Rl1fqYztILa myqlsHlWi/yRQ70AX5tIhU2P8ARs0fKcB5Gr8sH3Zbx0QShVGRw1O4Mwy5Ek9q7M SNMUZ0wEcQpe2AwotsXHnQjJ7pbEakOscaBqDoM/HINKJ3yzsSwduT3eXDKb3IFf NbPpMFPH8uv/Y0+Kb0ZikAxOZr4Ydrg2E4myZhvFLxiIasXPj+NO3Tv6Hz7FnZsp fnLcS64RXnRShJLa2fA0wVlCgPrOWcJs7Mcr5bSkkYoKho9MlJxz4RmDknFdNUmk uZexpgCv/1aSulY4AS4aD7ZNoSya8jslBih89OG4iMiin3hOaHVOA5ecvQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFqNOJJ4SF7dUNMs9cqEzicowIzGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzYwMWQ2 Zi1iMzFhLTQ5MmUtOGVmMC01MmJjY2IwNmFmM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvNjAxZDZm LWIzMWEtNDkyZS04ZWYwLTUyYmNjYjA2YWYzYy8xL1dvMDRrbmhJWHQxUTB5ejF5 b1RPSnlqQWpNWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuR4EMA0EAgACMAcDBQAqAKvgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsZDANBgkqhkiG9w0BAQsFAAOCAQEAX+cSQe+GNytl w/bFe0nyVeDwEUFAApB2DfQNzesEfhnIzHCcoqw/Tsz1GeOrl+XzbuJ41PqFzAjH yLaV1Sv/+OzIh+lkAGrt/87Xd/6IAUIBySHveGOsrrMMtOLud0tagNZGAUSoANhO sUW9IqWweorQfqdycWZSV5cArZ0sUpouIvn17MKgMvw3gIwIp44K6nlCIyhWbI2v R+wd2aLVSHPLjAAuEng18y7VBjrsCnPZhFMkFxitLe1jKxWO+jhJMkQeiez0DPA0 NhGKasgDmtXV6hwihViYpLLz+YaGA9mSzR/cgADYSQc28cTHJCV8LP0+6LrsgK0w ZM4ZYfsA7g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:10 2026 by rpki-client