This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer File: Wu3LM00555eBfi60dwPAGLTcSdU.cer (raw, json) Hash identifier: FdoAzfIFhc3VLR2RRGmM+J95mwa+BH7eBDWZCy5YuUw= Subject key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36B34D5FCBE930D61C23146FCAB528 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39767 AS: 51983 AS: 61427 IP: 78.158.72.0 -- 78.158.95.255 IP: 185.90.140.0/22 IP: 194.88.6.0/23 IP: 194.88.12.0/23 IP: 194.104.123.0/24 IP: 2a05:e200::/29 IP: 2a13:6500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b3:4d:5f:cb:e9:30:d6:1c:23:14:6f:ca:b5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:e8:5b:71:a6:64:0d:c0:9b:6a:0b:d7:64: 8e:2a:fe:dd:d4:72:f7:d8:82:17:94:d3:73:e5:89: bf:ea:e5:99:bb:d8:0f:be:8f:ba:5e:73:3d:5c:4d: d0:e9:fb:c2:93:7e:18:3c:49:22:4c:34:76:92:0b: 33:9b:f2:29:10:d0:36:db:68:0d:61:2a:26:20:4a: c8:6b:f1:9f:22:23:e2:19:40:c2:3b:1c:07:46:4b: 6f:6a:ab:12:13:94:45:4c:57:06:8c:44:3c:2a:97: 16:08:22:f6:15:cb:e9:2a:f4:9c:19:4c:2c:a4:31: 13:f7:f8:7c:46:8d:2d:96:d6:9c:02:8b:87:c9:68: 31:bf:9f:01:b1:f3:01:25:26:ac:b1:f2:38:73:a8: 15:33:4e:40:2e:a5:7b:8a:0e:bc:ec:60:8d:ac:63: 2a:66:ec:e0:39:4b:a3:0d:75:1b:77:5c:c3:fa:a7: ec:53:f0:4b:49:eb:b1:53:76:87:e3:7d:93:a3:db: 84:8f:d4:56:40:f0:95:a2:01:30:44:27:26:55:20: 89:1c:ed:65:ee:e8:0c:3f:38:30:67:5a:47:8c:89: e0:d6:b3:c0:3f:03:b0:bc:51:8a:93:f2:9a:a1:12: f6:a8:0e:1a:9a:f0:e8:7d:9a:4c:33:67:16:72:35: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.158.72.0-78.158.95.255 185.90.140.0/22 194.88.6.0/23 194.88.12.0/23 194.104.123.0/24 IPv6: 2a05:e200::/29 2a13:6500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39767 51983 61427 Signature Algorithm: sha256WithRSAEncryption a6:c7:28:cf:ca:af:d3:6c:93:3e:55:12:4f:9a:08:03:9f:23: 86:f6:20:14:d4:b8:6f:a7:4e:d6:5e:c4:4d:4f:0e:1e:ba:23: 17:4e:b8:e3:05:4a:3e:6b:c8:ec:df:49:71:d3:f4:48:8a:09: d3:96:74:4d:b9:ec:7c:f6:ef:d8:4e:31:25:ce:9e:a2:59:47: 1b:4f:18:07:bb:ae:3d:67:2d:79:04:46:d6:95:8f:10:d9:fc: 22:3c:86:20:cd:ec:0b:fb:34:9f:ac:4e:3f:b8:9e:ca:2b:e1: 83:dd:7a:5b:52:1c:c7:15:22:d0:21:c8:b4:be:d1:b6:b2:2a: 3c:97:c3:a2:77:95:ab:63:2a:6f:58:f7:dc:14:66:b4:57:a1: 8e:6d:a7:f3:dc:76:fc:4c:93:13:e5:d0:fa:3a:ff:be:50:65: 66:72:aa:71:74:d4:ee:5c:e8:0a:97:23:f6:d1:ff:90:8c:b4: bc:a2:61:6a:93:94:87:29:fd:92:09:e9:37:60:5c:c0:84:7d: 7f:37:b9:8f:16:cb:d2:9f:c5:5c:bd:65:24:ec:01:d0:c8:ef: af:af:16:ef:0b:87:0e:19:2b:a4:28:7e:38:9a:78:0f:32:6e: d8:83:c6:3a:c4:cc:a9:fc:6c:96:78:06:62:a5:48:19:47:a9: 1e:04:a6:26 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZt7NrNNX8vpMNYcIxRvyrUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWVkY2IzMzRkMzllNzk3ODE3ZTJlYjQ3NzAzYzAxOGI0ZGM0OWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPHoW3GmZA3Am2oL12SOKv7d1HL3 2IIXlNNz5Ym/6uWZu9gPvo+6XnM9XE3Q6fvCk34YPEkiTDR2kgszm/IpENA222gN YSomIErIa/GfIiPiGUDCOxwHRktvaqsSE5RFTFcGjEQ8KpcWCCL2FcvpKvScGUws pDET9/h8Ro0tltacAouHyWgxv58BsfMBJSassfI4c6gVM05ALqV7ig687GCNrGMq ZuzgOUujDXUbd1zD+qfsU/BLSeuxU3aH432To9uEj9RWQPCVogEwRCcmVSCJHO1l 7ugMPzgwZ1pHjIng1rPAPwOwvFGKk/KaoRL2qA4amvDofZpMM2cWcjXWHQIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFFrtyzNNOeeXgX4utHcDwBi03EnVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2I5NWNh MC04NTNmLTQ4YWItOWI0MS1lMGFlZTFiYmY5ZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvYjk1Y2Ew LTg1M2YtNDhhYi05YjQxLWUwYWVlMWJiZjllMy8xL1d1M0xNMDA1NTVlQmZpNjBk d1BBR0xUY1NkVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAsBAIAATAmMAwDBANOnkgDBAVOnkADBAK5WowDBAHCWAYDBAHC WAwDBADCaHswFAQCAAIwDgMFAyoF4gADBQMqE2UAMCQGCCsGAQUFBwEIAQH/BBUw E6ARMA8CAwCbVwIDAMsPAgMA7/MwDQYJKoZIhvcNAQELBQADggEBAKbHKM/Kr9Ns kz5VEk+aCAOfI4b2IBTUuG+nTtZexE1PDh66IxdOuOMFSj5ryOzfSXHT9EiKCdOW dE257Hz279hOMSXOnqJZRxtPGAe7rj1nLXkERtaVjxDZ/CI8hiDN7Av7NJ+sTj+4 nsor4YPdeltSHMcVItAhyLS+0bayKjyXw6J3latjKm9Y99wUZrRXoY5tp/PcdvxM kxPl0Po6/75QZWZyqnF01O5c6AqXI/bR/5CMtLyiYWqTlIcp/ZIJ6TdgXMCEfX83 uY8Wy9KfxVy9ZSTsAdDI76+vFu8Lhw4ZK6QofjiaeA8ybtiDxjrEzKn8bJZ4BmKl SBlHqR4EpiY= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:13 2026 by rpki-client