This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WrJabDkrjmejrSH2D9MxHWt_Hlw.cer File: WrJabDkrjmejrSH2D9MxHWt_Hlw.cer (raw, json) Hash identifier: nrl0RX6EVvrGviW3tjMplQBIQ4eC7GtOHtpiDNdLluc= Subject key identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355B91C544E0CD484354E156EA52EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34799 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5b:91:c5:44:e0:cd:48:43:54:e1:56:ea:52:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab25a6c392b8e67a3ad21f60fd3311d6b7f1e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:3f:14:38:62:fd:04:7d:fa:44:f9:ab:1e: ac:fd:a0:1e:d2:ab:81:88:2f:26:a4:80:50:f7:33: ad:28:94:45:60:1f:17:ac:e6:39:11:80:dd:fc:92: b0:5f:17:9b:c5:d4:a6:5b:cb:cd:ce:70:ea:1f:55: b2:af:64:35:55:8e:fb:76:b5:0e:7a:4e:74:fe:f9: c0:10:e7:6c:ef:e7:9e:a8:b8:8d:01:b0:75:60:23: e4:60:79:6a:77:f5:29:b9:da:c2:38:66:7a:57:26: b6:89:8f:97:6d:86:05:fc:23:20:04:51:b7:08:5e: a6:2d:ec:41:49:7d:35:33:bb:94:b9:d2:8d:fc:4e: 91:c4:6c:22:db:ca:1e:01:2c:6a:d9:fc:58:1a:50: 63:db:1e:8d:74:8c:45:32:89:c4:b5:cb:ca:21:12: ee:ff:9a:2a:1e:a4:bf:eb:7f:05:b9:d9:ac:bd:c5: 78:36:ff:c2:dd:c4:98:93:27:ab:d6:13:14:75:46: f4:5b:5d:78:d0:d1:11:a4:1a:0d:48:73:f8:ec:f2: 2f:0c:78:1f:34:62:ed:33:4d:3b:76:5b:c7:d6:96: 0c:96:be:ec:a2:30:37:ce:c7:3d:b4:a6:f1:0d:36: 7d:5e:62:4a:dd:6b:3f:ca:28:c2:d0:da:f5:ee:88: bc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B2:5A:6C:39:2B:8E:67:A3:AD:21:F6:0F:D3:31:1D:6B:7F:1E:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/81f76f-d878-44a1-82c7-2ccb5f0c5f6b/1/WrJabDkrjmejrSH2D9MxHWt_Hlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 34799 Signature Algorithm: sha256WithRSAEncryption 39:a9:c3:21:31:75:74:0d:cc:a9:fc:19:05:48:7c:44:41:fe: f8:a2:be:05:4b:19:ca:42:48:45:01:da:f0:4f:ed:f7:61:b9: b2:61:6c:9d:7f:51:0a:69:b3:03:2f:a6:f9:13:db:18:b6:12: 72:cd:f4:d3:64:dd:06:63:5b:1f:89:e3:2e:ec:75:4a:fd:5f: a8:36:64:a8:9b:10:66:91:a1:51:30:6c:6f:d4:ec:7a:d3:96: 96:ae:b8:8c:7d:bc:70:2c:34:36:e5:37:40:b3:72:e4:e8:24: f5:f9:fa:6e:79:19:aa:6e:73:c0:f4:38:a6:27:20:b4:ef:19: 4b:d8:f7:cc:f1:b4:2f:df:27:23:a9:83:23:bd:38:4f:9b:2e: c2:b1:87:6d:4a:72:7c:54:46:4c:4d:55:8a:f3:6a:df:14:e3: fc:c1:ae:2a:ab:ce:1d:01:7d:6b:52:37:58:1c:56:ad:30:db: 35:61:c6:4a:0b:21:fb:32:51:3a:56:de:dc:a0:b5:67:9b:6c: aa:00:1a:77:2b:86:d9:fc:70:58:f4:2d:b8:ed:85:a0:a1:56: 4b:1f:cf:ee:8c:73:3f:f4:f7:79:7e:3b:d7:20:44:3c:0a:2e: 95:bf:dd:22:c4:9d:86:ef:6d:21:95:f7:d8:42:65:04:b1:bc: 12:b4:0d:0d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NVuRxUTgzUhDVOFW6lLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWIyNWE2YzM5MmI4ZTY3YTNhZDIxZjYwZmQzMzExZDZiN2YxZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2U/FDhi/QR9+kT5qx6s/aAe0quB iC8mpIBQ9zOtKJRFYB8XrOY5EYDd/JKwXxebxdSmW8vNznDqH1Wyr2Q1VY77drUO ek50/vnAEOds7+eeqLiNAbB1YCPkYHlqd/UpudrCOGZ6Vya2iY+XbYYF/CMgBFG3 CF6mLexBSX01M7uUudKN/E6RxGwi28oeASxq2fxYGlBj2x6NdIxFMonEtcvKIRLu /5oqHqS/638FudmsvcV4Nv/C3cSYkyer1hMUdUb0W1140NERpBoNSHP47PIvDHgf NGLtM007dlvH1pYMlr7sojA3zsc9tKbxDTZ9XmJK3Ws/yijC0Nr17oi8hQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFqyWmw5K45no60h9g/TMR1rfx5cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzgxZjc2 Zi1kODc4LTQ0YTEtODJjNy0yY2NiNWYwYzVmNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvODFmNzZm LWQ4NzgtNDRhMS04MmM3LTJjY2I1ZjBjNWY2Yi8xL1dySmFiRGtyam1lanJTSDJE OU14SFd0X0hsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCH7zANBgkqhkiG9w0BAQsFAAOCAQEAOanDITF1dA3M qfwZBUh8REH++KK+BUsZykJIRQHa8E/t92G5smFsnX9RCmmzAy+m+RPbGLYScs30 02TdBmNbH4njLux1Sv1fqDZkqJsQZpGhUTBsb9TsetOWlq64jH28cCw0NuU3QLNy 5Ogk9fn6bnkZqm5zwPQ4picgtO8ZS9j3zPG0L98nI6mDI704T5suwrGHbUpyfFRG TE1VivNq3xTj/MGuKqvOHQF9a1I3WBxWrTDbNWHGSgsh+zJROlbe3KC1Z5tsqgAa dyuG2fxwWPQtuO2FoKFWSx/P7oxzP/T3eX471yBEPAoulb/dIsSdhu9tIZX32EJl BLG8ErQNDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:30 2026 by rpki-client