This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer File: WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer (raw, json) Hash identifier: urA5fmjzxCjjb+HqcEmVt+I1RC8W6XT7xAGwCf3bhzU= Subject key identifier: 5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38B8407BDF10CC335712FD935E1E42 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.139.4.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b8:40:7b:df:10:cc:33:57:12:fd:93:5e:1e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b192aa28315f5942d4105d52ebfd6d328f0f405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:a4:01:d0:d6:46:c4:16:cf:57:a6:2f:52: 08:b0:01:03:4a:06:dc:91:a2:31:6d:ac:d3:96:ae: a8:e9:04:1c:4b:23:a0:75:04:6c:7d:7b:b6:92:1e: e1:a7:14:4a:75:c5:99:5d:08:44:d5:b6:14:7b:41: d0:28:32:65:92:9c:51:d9:df:28:b3:9d:9f:b9:a9: 9d:81:de:db:7b:33:c3:49:9c:92:43:19:eb:cf:a3: 00:1c:45:ea:db:61:87:98:04:0a:ea:23:67:b5:27: cb:96:57:4c:f3:65:dc:3f:1e:f1:5b:64:d7:8f:e9: c3:9d:02:98:92:72:fe:c1:99:db:48:94:be:e5:e6: 02:7e:1d:a2:a4:4a:73:46:d0:c7:e1:b0:31:4f:7f: d3:27:2c:1a:c4:c8:a0:25:16:b7:4e:4f:ba:b7:71: 3c:59:14:78:48:15:2f:8a:3a:f7:f5:85:5b:35:71: 46:02:88:7b:25:15:ee:96:67:bb:49:25:37:2d:3a: 19:72:dd:ea:5b:b5:77:4c:4c:16:a9:a2:58:5d:0c: 80:e0:83:30:de:73:c1:33:c9:f1:aa:72:18:07:a4: 59:d0:a9:a6:fa:75:c7:a0:ff:d1:98:a9:ca:94:25: 9e:a5:8b:59:d1:9d:00:d1:be:c0:6a:a5:5b:a5:d7: e3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.4.0/24 Signature Algorithm: sha256WithRSAEncryption 02:8c:1f:de:c2:a1:9e:5e:20:eb:78:f3:a0:41:e3:c6:04:37: 58:d2:0e:7a:41:9b:be:18:8d:35:a3:6c:63:93:de:1a:3f:43: 15:ed:86:64:f4:cd:e4:01:c4:b2:50:19:27:5c:70:f1:85:eb: b0:05:bc:ec:a0:a8:31:b7:12:75:f4:43:11:65:b0:5c:26:90: 9f:67:3c:b4:86:79:4c:93:53:02:cf:6f:ff:4a:f0:e1:67:89: 21:bf:47:33:06:2d:0d:aa:36:00:1e:96:cc:96:1f:80:50:86: b8:3f:0c:85:68:85:6f:15:05:f7:c9:f3:12:62:4c:f7:be:b3: f9:24:40:ea:50:47:00:95:28:58:32:8d:df:34:2c:fa:8f:f2: a5:e9:09:c9:85:bf:a5:8d:36:cc:79:75:97:39:b2:7b:f8:77: 06:14:90:77:78:ac:22:43:85:ca:6b:65:d3:87:ec:36:69:51: 11:09:34:83:b3:ed:e1:7b:41:53:f3:e5:e4:25:ef:66:82:df: 04:57:01:bf:77:aa:74:db:f4:17:44:8e:a8:d4:5b:5b:b1:b7: e5:3e:e7:53:fe:19:68:ed:09:37:df:71:75:08:07:12:59:d2: a8:b3:e0:19:f3:a1:7d:93:e0:08:d4:88:de:ef:84:a2:9b:41: fe:9a:6e:3a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+OLhAe98QzDNXEv2TXh5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjE5MmFhMjgzMTVmNTk0MmQ0MTA1ZDUyZWJmZDZkMzI4ZjBmNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSGkAdDWRsQWz1emL1IIsAEDSgbc kaIxbazTlq6o6QQcSyOgdQRsfXu2kh7hpxRKdcWZXQhE1bYUe0HQKDJlkpxR2d8o s52fuamdgd7bezPDSZySQxnrz6MAHEXq22GHmAQK6iNntSfLlldM82XcPx7xW2TX j+nDnQKYknL+wZnbSJS+5eYCfh2ipEpzRtDH4bAxT3/TJywaxMigJRa3Tk+6t3E8 WRR4SBUvijr39YVbNXFGAoh7JRXulme7SSU3LToZct3qW7V3TEwWqaJYXQyA4IMw 3nPBM8nxqnIYB6RZ0Kmm+nXHoP/RmKnKlCWepYtZ0Z0A0b7AaqVbpdfjQwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFsZKqKDFfWULUEF1S6/1tMo8PQFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhL2VlMzNk My1mZjM4LTRhOGQtYTJkYi0zZmJjNzk1YTZiZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvZWUzM2Qz LWZmMzgtNGE4ZC1hMmRiLTNmYmM3OTVhNmJlNS8xL1d4a3Fvb01WOVpRdFFRWFZM cl9XMHlqdzlBVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuYsEMA0GCSqGSIb3DQEBCwUAA4IBAQACjB/e wqGeXiDrePOgQePGBDdY0g56QZu+GI01o2xjk94aP0MV7YZk9M3kAcSyUBknXHDx heuwBbzsoKgxtxJ19EMRZbBcJpCfZzy0hnlMk1MCz2//SvDhZ4khv0czBi0NqjYA HpbMlh+AUIa4PwyFaIVvFQX3yfMSYkz3vrP5JEDqUEcAlShYMo3fNCz6j/Kl6QnJ hb+ljTbMeXWXObJ7+HcGFJB3eKwiQ4XKa2XTh+w2aVERCTSDs+3he0FT8+XkJe9m gt8EVwG/d6p02/QXRI6o1FtbsbflPudT/hlo7Qk333F1CAcSWdKos+AZ86F9k+AI 1Ije74Sim0H+mm46 -----END CERTIFICATE-----Generated at Mon Jan 26 21:11:36 2026 by rpki-client