This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer File: WoZV6_lEUAAlpfB1unveZBWE_aY.cer (raw, json) Hash identifier: IT8MQYjg30HVJxI5YnN6urRfcGRXfcfYL1AANmNFGek= Subject key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED9B8CF502CFD387F9D06FB2484DDD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212274 IP: 195.144.16.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9b:8c:f5:02:cf:d3:87:f9:d0:6f:b2:48:4d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a8655ebf944500025a5f075ba7bde641584fda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:0f:14:54:fc:e9:77:60:f0:38:98:ed:91: 20:2c:cf:ed:aa:76:a0:a2:86:c7:10:63:bc:cc:da: 74:8a:ed:c2:c2:c0:c6:0d:68:59:e2:47:18:df:46: 1d:9e:77:f7:e6:b1:2a:67:c8:bd:41:c9:36:3e:cc: 63:65:bf:b0:2a:14:6a:23:53:15:45:9d:56:ce:28: 5c:4e:04:9e:5c:3e:b2:98:64:d3:48:a6:ae:ef:b3: 8b:e9:dc:30:ce:f2:0f:e4:2a:5a:de:ed:32:59:3c: 04:c0:38:09:38:2e:99:3b:46:db:8e:20:5a:1b:9b: dc:0a:af:8b:71:2a:20:05:6d:e5:16:37:be:db:4f: d1:33:98:ad:7c:9d:8e:b4:ec:3d:e9:f4:48:a1:d7: ad:2f:09:a9:7b:2c:8e:5d:97:92:e5:68:b4:45:a2: db:e6:b7:d3:43:6d:9e:db:08:d1:08:4f:fd:be:e8: fa:4d:2e:d2:48:ce:f7:e3:6d:45:9e:9a:36:b6:89: aa:8a:c4:02:a0:71:ea:73:bb:7f:12:d0:e2:61:28: 81:17:3e:8b:f8:46:e1:b7:be:e9:e4:06:1d:8a:b2: 18:70:70:bd:83:8e:38:90:8b:5b:5a:41:e2:a5:01: 08:ba:ca:0d:cb:09:bb:74:75:00:16:ad:d2:42:d9: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.16.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212274 Signature Algorithm: sha256WithRSAEncryption 5f:d2:bb:d6:f0:24:d8:38:49:5e:da:c2:54:4b:cc:22:02:bc: 64:81:23:53:d6:15:5e:77:f3:83:cd:0d:a6:e0:4c:31:a7:06: be:44:06:77:a6:0e:c2:3f:e8:94:ff:50:dc:a4:0c:27:47:d9: 1e:b3:2d:da:db:77:2e:89:8a:9c:58:3b:d6:ad:30:88:e4:f7: a0:f2:ce:47:5a:21:fa:24:b1:3b:4c:3e:9b:6a:83:0d:f6:0a: a0:57:41:96:13:1c:fc:6f:a2:93:81:36:c3:3d:93:56:f9:2c: 4e:e0:c5:ca:5a:9b:53:25:cc:a0:e8:fe:e3:54:9d:cb:b0:77: 33:2d:14:4f:4f:09:7e:01:68:66:8d:4a:24:7c:d9:03:16:82: 71:31:78:47:71:47:8f:88:a1:d0:10:38:33:31:d8:af:17:0c: 90:b3:de:c1:ca:0c:90:a6:d4:19:91:41:ed:52:19:c9:b7:82: ae:ff:72:42:a8:16:85:22:b0:84:cf:a9:f7:2d:31:13:ba:35: 7a:d6:36:45:7e:e9:0d:26:f5:88:d9:ab:78:a1:8c:d3:3d:01: 10:34:17:37:26:f4:c1:02:65:5c:f5:44:43:22:37:0e:aa:e4: ee:a3:28:3d:47:f8:1e:97:13:35:cc:33:40:56:1f:87:06:50: bf:cc:d6:1b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87ZuM9QLP04f50G+ySE3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTg2NTVlYmY5NDQ1MDAwMjVhNWYwNzViYTdiZGU2NDE1ODRmZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvcPFFT86Xdg8DiY7ZEgLM/tqnag oobHEGO8zNp0iu3CwsDGDWhZ4kcY30Ydnnf35rEqZ8i9Qck2PsxjZb+wKhRqI1MV RZ1WzihcTgSeXD6ymGTTSKau77OL6dwwzvIP5Cpa3u0yWTwEwDgJOC6ZO0bbjiBa G5vcCq+LcSogBW3lFje+20/RM5itfJ2OtOw96fRIodetLwmpeyyOXZeS5Wi0RaLb 5rfTQ22e2wjRCE/9vuj6TS7SSM73421Fnpo2tomqisQCoHHqc7t/EtDiYSiBFz6L +Ebht77p5AYdirIYcHC9g444kItbWkHipQEIusoNywm7dHUAFq3SQtkzYwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFqGVev5RFAAJaXwdbp73mQVhP2mMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzU0ZmQ4 NC02ZTk2LTQ3YjItOTdhNS1mMmI1NTZlZDY5OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNTRmZDg0 LTZlOTYtNDdiMi05N2E1LWYyYjU1NmVkNjk5MC8xL1dvWlY2X2xFVUFBbHBmQjF1 bnZlWkJXRV9hWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw5AQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM9MjANBgkqhkiG9w0BAQsFAAOCAQEAX9K71vAk2DhJXtrCVEvMIgK8ZIEjU9YV Xnfzg80NpuBMMacGvkQGd6YOwj/olP9Q3KQMJ0fZHrMt2tt3LomKnFg71q0wiOT3 oPLOR1oh+iSxO0w+m2qDDfYKoFdBlhMc/G+ik4E2wz2TVvksTuDFylqbUyXMoOj+ 41Sdy7B3My0UT08JfgFoZo1KJHzZAxaCcTF4R3FHj4ih0BA4MzHYrxcMkLPewcoM kKbUGZFB7VIZybeCrv9yQqgWhSKwhM+p9y0xE7o1etY2RX7pDSb1iNmreKGM0z0B EDQXNyb0wQJlXPVEQyI3Dqrk7qMoPUf4HpcTNcwzQFYfhwZQv8zWGw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:11 2026 by rpki-client