This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer File: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer (raw, json) Hash identifier: CqzeMBWGo2N43xSebaW6TuAzpdwCQJk3xYsebuMOX2Y= Subject key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834D31E903BB1E530522D30DC3A4CF7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196731 IP: 91.212.87.0/24 IP: 2001:67c:db0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d3:1e:90:3b:b1:e5:30:52:2d:30:dc:3a:4c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e1:68:b9:d6:86:7e:e0:c3:53:80:89:59:b8: 72:fc:87:20:26:74:35:90:60:b1:f2:32:5e:13:84: 0f:74:f0:c4:37:d0:5f:98:fe:f8:9d:bf:3f:6d:d4: 2a:b5:ef:45:3e:cd:8b:ad:84:f7:53:6e:3c:d0:ff: 3d:23:28:24:76:6f:84:3b:54:e6:6f:85:a5:af:73: 5c:ae:92:64:01:3e:9c:7a:dc:91:bd:a2:b2:3a:c4: c4:74:27:6f:8d:ae:d4:4b:03:9b:c5:f5:7d:9e:16: 2b:27:2a:4b:c4:13:5e:35:8e:4f:f6:18:ca:a7:81: 9f:0f:2e:bb:f9:b7:bd:c7:85:9f:d5:87:89:5b:d1: e1:9b:bd:10:38:97:68:d6:e9:c3:45:2d:13:1c:ad: 06:9d:98:f5:f5:d2:3a:d6:ca:d0:a5:36:16:7b:15: 6c:be:cc:be:05:de:af:6d:28:ed:eb:57:e0:f0:cb: b2:26:b0:81:87:53:88:af:70:f5:37:4c:85:3b:71: 5f:06:51:ca:22:a9:88:58:b9:05:00:b6:b7:2a:fe: 04:41:09:7f:22:0b:91:88:46:e8:c7:38:18:f1:46: ec:e8:cb:07:0e:a2:30:dd:7a:d0:32:b2:8c:f2:83: 86:05:56:cf:7d:48:b0:9c:4b:76:67:df:aa:a6:b9: 62:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.87.0/24 IPv6: 2001:67c:db0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196731 Signature Algorithm: sha256WithRSAEncryption 4e:10:1b:7c:d2:7b:89:66:e8:07:3d:78:ad:06:62:ea:d1:9c: d8:6e:a4:43:36:51:d2:60:ab:27:a6:02:a4:1c:5e:5e:8c:25: 1d:3c:1e:40:b1:ad:c3:c4:b6:2e:da:84:4c:40:58:d5:7c:ab: ae:17:2e:83:5a:05:68:b4:31:d8:63:83:91:39:b3:1b:14:bb: c4:ce:3c:3d:a1:34:aa:d2:d7:94:cc:31:0c:21:65:03:5e:b3: 1e:37:c3:09:cb:f2:3c:40:c1:9a:20:7f:28:d4:28:43:92:ee: e3:26:92:c6:35:23:e3:a1:17:13:4d:31:d7:05:d3:7b:00:d8: 51:6b:42:81:43:f8:06:36:51:e6:55:ec:c0:6a:fb:4b:40:0d: 19:30:1f:cc:61:db:08:4f:93:4a:03:56:13:0a:e4:28:ad:b2: 35:d0:f1:8e:59:af:02:6d:88:21:7a:09:7a:15:00:55:39:ca: 57:c8:15:4d:40:6e:3e:f1:e9:73:ea:9e:04:8c:e6:54:63:f1: dc:bd:d5:c3:76:6c:3e:7a:f6:36:72:ed:ed:81:35:d4:d0:79: f6:4e:bb:6c:c7:1f:2d:9c:6b:e5:c6:36:74:ed:be:7b:4f:48: db:48:5d:f4:05:7a:60:be:bf:b5:ff:f6:38:58:a8:35:7d:a8: cf:67:19:4c -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt4NNMekDux5TBSLTDcOkz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWM4ZjY4YWM0MTUwNTlkNTZkMTkzOGMzNzVhNTk4NmE2ZmZmNGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteFoudaGfuDDU4CJWbhy/IcgJnQ1 kGCx8jJeE4QPdPDEN9BfmP74nb8/bdQqte9FPs2LrYT3U2480P89Iygkdm+EO1Tm b4Wlr3NcrpJkAT6cetyRvaKyOsTEdCdvja7USwObxfV9nhYrJypLxBNeNY5P9hjK p4GfDy67+be9x4Wf1YeJW9Hhm70QOJdo1unDRS0THK0GnZj19dI61srQpTYWexVs vsy+Bd6vbSjt61fg8MuyJrCBh1OIr3D1N0yFO3FfBlHKIqmIWLkFALa3Kv4EQQl/ IguRiEboxzgY8Ubs6MsHDqIw3XrQMrKM8oOGBVbPfUiwnEt2Z9+qprliBQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFFrI9orEFQWdVtGTjDdaWYam//SxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzY5ZTdl NC1lM2VhLTQ2YTUtOTg2Ny0xYzgxMzJkNWY0YjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNjllN2U0 LWUzZWEtNDZhNS05ODY3LTFjODEzMmQ1ZjRiNC8xL1dzajJpc1FWQloxVzBaT01O MXBaaHFiXzlMRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9RXMA8EAgACMAkDBwAgAQZ8DbAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwB7MA0GCSqGSIb3DQEBCwUAA4IBAQBOEBt80nuJ ZugHPXitBmLq0ZzYbqRDNlHSYKsnpgKkHF5ejCUdPB5Asa3DxLYu2oRMQFjVfKuu Fy6DWgVotDHYY4ORObMbFLvEzjw9oTSq0teUzDEMIWUDXrMeN8MJy/I8QMGaIH8o 1ChDku7jJpLGNSPjoRcTTTHXBdN7ANhRa0KBQ/gGNlHmVezAavtLQA0ZMB/MYdsI T5NKA1YTCuQorbI10PGOWa8CbYghegl6FQBVOcpXyBVNQG4+8elz6p4EjOZUY/Hc vdXDdmw+evY2cu3tgTXU0Hn2Trtsxx8tnGvlxjZ07b57T0jbSF30BXpgvr+1//Y4 WKg1fajPZxlM -----END CERTIFICATE-----Generated at Mon Feb 2 08:10:43 2026 by rpki-client