This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer File: Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer (raw, json) Hash identifier: SGqRJmZDG/RJos2Rk80hYYzMXOPAIbZTgz5dVj2XOMU= Subject key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA50EF37F45A4EE813BBBDEA2EE313B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.198.178.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0e:f3:7f:45:a4:ee:81:3b:bb:de:a2:ee:31:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ec:c6:78:51:e1:f4:6d:7a:e8:28:a8:d2:ba: f6:c7:37:ed:dc:7f:fa:e1:7f:b6:0a:ff:b0:e7:ab: 23:10:ab:cb:63:51:80:7e:2f:8f:b1:3d:0e:57:eb: 13:17:da:30:36:ba:c8:dd:49:bb:42:1f:29:df:c8: d1:c4:3f:52:8b:78:15:0d:7e:31:0c:7a:3b:94:94: 57:ef:b6:f0:37:9f:41:8b:8c:58:18:92:c5:48:da: 0f:01:44:bd:57:20:eb:4b:e1:2d:74:a3:04:29:e4: 44:99:3e:49:83:8c:e8:f8:06:f0:95:69:c7:fc:02: 1c:ff:4c:9b:1d:13:1c:80:b0:ce:50:58:0d:43:f7: 5c:0c:41:34:24:81:5b:d7:72:0a:d1:bb:41:39:e7: 14:b4:ef:a0:39:08:fd:08:0e:4a:3c:bd:c7:38:c3: 33:c8:0f:13:f0:c3:cd:f6:01:81:ec:4f:31:99:64: 7c:c0:65:89:26:71:6f:82:d7:45:69:84:9e:2d:c2: d6:f6:cc:d1:27:78:44:80:03:0b:7c:0e:33:60:7e: 62:24:1a:78:00:86:05:f4:75:f3:43:4f:2c:27:37: 44:75:58:b5:c8:e5:1c:24:ef:d9:90:b9:24:79:75: 88:6f:3b:04:e8:cb:70:f8:1c:ec:a5:33:8c:ff:98: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.178.0/24 Signature Algorithm: sha256WithRSAEncryption 32:02:b0:64:c2:b0:8d:9a:46:b6:35:8a:1d:6e:a7:c9:35:9b: 29:1f:5a:43:b0:d8:d6:b7:fb:71:20:d8:c6:df:af:9b:56:a5: fb:db:73:4e:4c:9d:15:df:00:48:1e:53:6b:e3:12:27:63:e8: 9d:0b:0b:a3:1e:b7:cd:bd:c6:52:71:20:30:25:b2:79:30:27: f7:c8:57:fc:92:2e:56:a2:af:94:d1:3c:92:1c:d6:47:57:3b: a6:76:20:93:5d:b7:1b:4c:b9:91:76:22:eb:d3:b5:39:79:4a: d1:14:98:bc:43:ff:95:f6:b5:c9:a4:d8:d6:24:2c:74:2b:94: 02:f1:d2:bf:fc:9a:e1:7e:b7:6a:c2:01:48:91:33:39:d4:31: 6e:78:99:ed:7a:ad:4a:41:5a:7e:e1:a0:27:d0:2d:5e:8c:27: 46:5b:2a:0b:f2:b6:b4:b5:8d:a9:e0:21:e6:df:f1:7f:35:de: 98:c9:0e:25:e0:bf:fc:91:0a:96:3f:a0:69:af:27:d4:93:e7: 30:bc:e7:43:55:2d:1f:85:47:d5:5d:4c:cf:b6:32:02:2f:a4: a2:60:86:02:fb:88:bd:54:18:d7:8c:a5:ec:b2:94:65:17:01: 78:b2:f6:c8:92:78:02:3c:08:48:22:95:ee:96:6e:99:a4:b5: fd:5f:f3:a8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7pQ7zf0Wk7oE7u96i7jE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTg3ZmNjODVjYjQ5OTQxOWExYjFlYzJmMzIwOWMyYTQzNWZiOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uzGeFHh9G166Cio0rr2xzft3H/6 4X+2Cv+w56sjEKvLY1GAfi+PsT0OV+sTF9owNrrI3Um7Qh8p38jRxD9Si3gVDX4x DHo7lJRX77bwN59Bi4xYGJLFSNoPAUS9VyDrS+EtdKMEKeREmT5Jg4zo+AbwlWnH /AIc/0ybHRMcgLDOUFgNQ/dcDEE0JIFb13IK0btBOecUtO+gOQj9CA5KPL3HOMMz yA8T8MPN9gGB7E8xmWR8wGWJJnFvgtdFaYSeLcLW9szRJ3hEgAMLfA4zYH5iJBp4 AIYF9HXzQ08sJzdEdVi1yOUcJO/ZkLkkeXWIbzsE6Mtw+BzspTOM/5iPewIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFqH/MhctJlBmhsewvMgnCpDX7ktMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzY4NWYy ZC1iZGU0LTQ5ZmQtYTE0My05OTRiYjYyOGJiYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvNjg1ZjJk LWJkZTQtNDlmZC1hMTQzLTk5NGJiNjI4YmJhNS8xL1dvZjh5RnkwbVVHYUd4N0M4 eUNjS2tOZnVTMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8ayMA0GCSqGSIb3DQEBCwUAA4IBAQAyArBk wrCNmka2NYodbqfJNZspH1pDsNjWt/txINjG36+bVqX723NOTJ0V3wBIHlNr4xIn Y+idCwujHrfNvcZScSAwJbJ5MCf3yFf8ki5Woq+U0TySHNZHVzumdiCTXbcbTLmR diLr07U5eUrRFJi8Q/+V9rXJpNjWJCx0K5QC8dK//JrhfrdqwgFIkTM51DFueJnt eq1KQVp+4aAn0C1ejCdGWyoL8ra0tY2p4CHm3/F/Nd6YyQ4l4L/8kQqWP6BpryfU k+cwvOdDVS0fhUfVXUzPtjICL6SiYIYC+4i9VBjXjKXsspRlFwF4svbIkngCPAhI IpXulm6ZpLX9X/Oo -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:12 2026 by rpki-client