This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer File: WxweBiQDm9HxqUbLUTyTOG-raxk.cer (raw, json) Hash identifier: abywylLsntmACnzCkZz9KNqxgg74M2dVBeLMHgBmxVo= Subject key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C13611657C23B6669709A8EF10861B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29374 AS: 31545 IP: 193.16.109.0/24 IP: 195.149.94.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:61:16:57:c2:3b:66:69:70:9a:8e:f1:08:61:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:0d:22:9f:1d:c1:8c:f1:ce:a4:c8:fa:8d: 7b:97:2a:1a:27:c0:95:0c:5a:0e:61:89:7a:b1:33: 7a:54:a0:da:43:68:17:27:fb:63:c1:93:09:80:52: a9:1d:fe:c8:12:d9:8d:d3:2a:b7:22:5e:63:ed:d4: 0b:ec:4d:44:d3:a5:e6:cf:d8:cf:0d:6f:d5:01:21: 06:f3:38:2e:9d:78:1b:4c:88:df:aa:20:25:e4:54: f7:31:c2:94:c6:5d:01:e9:33:2d:9f:66:4c:b0:57: 5b:23:e2:5c:03:1a:a6:ac:c8:c1:c9:7b:96:66:e4: d8:a4:20:c7:e0:79:c3:df:f1:58:4e:73:72:92:a7: 02:97:16:d3:f1:65:61:38:4e:e8:8a:2c:79:f5:07: de:63:ed:f4:97:6c:5b:47:4b:37:e9:3e:88:26:07: 57:18:7d:9c:a3:51:ff:b4:54:73:2d:d2:bc:34:b8: b8:bb:30:96:7e:5e:ba:0d:e7:e1:dc:d4:32:3f:32: 08:3a:42:e1:df:4d:be:78:43:89:33:ec:6b:68:c7: af:1e:a9:b1:a3:07:38:ba:70:35:e5:2e:6a:88:f8: ad:07:e0:bc:e3:60:02:2f:d4:37:92:18:8e:1e:be: e2:42:29:bc:bc:94:e8:ea:ea:ce:69:e1:87:f5:12: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.109.0/24 195.149.94.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29374 31545 Signature Algorithm: sha256WithRSAEncryption 0f:e1:0c:82:bc:a8:04:b4:17:c8:c1:38:e3:20:8d:a9:d9:3b: 5b:a5:c1:18:b4:dc:2f:e5:8c:de:4f:fd:5c:2f:4b:8c:f2:ac: 18:62:8d:4e:32:8b:88:c0:1c:07:81:13:12:4a:de:63:45:04: 70:ba:47:c8:42:98:fe:cf:9e:93:c6:b0:98:20:d1:ed:26:e4: 56:7a:58:c3:eb:13:d4:16:3a:19:fd:19:5f:23:c9:d9:d4:dd: 80:4c:b9:40:54:ed:ca:1b:51:9a:17:6d:18:15:2b:e9:8a:37: db:cc:c4:87:be:ff:9f:e8:9f:76:5e:d8:bd:57:3b:05:d1:24: ff:e1:ab:2e:53:51:8a:16:56:df:ac:a8:9b:49:81:85:95:cb: ce:b0:45:78:c5:87:93:d5:98:d5:17:40:74:4e:af:7e:1a:b6: fd:fb:cb:5e:eb:0a:7d:b9:c4:f4:2c:62:f5:30:0a:85:78:c8: 4f:d4:eb:72:23:f6:d2:7c:b9:73:61:e5:e8:a0:a1:3a:75:34: f0:a8:0c:ac:4a:33:a2:22:75:c1:62:4d:61:2b:67:53:32:67: b1:36:23:74:48:17:46:65:57:8c:e2:2e:9e:cd:74:29:7e:c5: 4e:9e:6e:d2:93:84:98:af:49:e0:0e:07:06:81:a0:86:3e:aa: be:34:8f:78 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgISAZt8E2EWV8I7Zmlwmo7xCGG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjFjMWUwNjI0MDM5YmQxZjFhOTQ2Y2I1MTNjOTMzODZmYWI2YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCENIp8dwYzxzqTI+o17lyoaJ8CV DFoOYYl6sTN6VKDaQ2gXJ/tjwZMJgFKpHf7IEtmN0yq3Il5j7dQL7E1E06Xmz9jP DW/VASEG8zgunXgbTIjfqiAl5FT3McKUxl0B6TMtn2ZMsFdbI+JcAxqmrMjByXuW ZuTYpCDH4HnD3/FYTnNykqcClxbT8WVhOE7oiix59QfeY+30l2xbR0s36T6IJgdX GH2co1H/tFRzLdK8NLi4uzCWfl66Defh3NQyPzIIOkLh302+eEOJM+xraMevHqmx owc4unA15S5qiPitB+C842ACL9Q3khiOHr7iQim8vJTo6urOaeGH9RJKTwIDAQAB o4ICqTCCAqUwHQYDVR0OBBYEFFscHgYkA5vR8alGy1E8kzhvq2sZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzE4NDAz ZC03NzkyLTRmOWQtOTM2OC1iZmI2Y2YwZjA4MzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvMTg0MDNk LTc3OTItNGY5ZC05MzY4LWJmYjZjZjBmMDgzNS8xL1d4d2VCaVFEbTlIeHFVYkxV VHlUT0ctcmF4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwRBtAwQAw5VeMB0GCCsGAQUFBwEIAQH/BA4w DKAKMAgCAnK+AgJ7OTANBgkqhkiG9w0BAQsFAAOCAQEAD+EMgryoBLQXyME44yCN qdk7W6XBGLTcL+WM3k/9XC9LjPKsGGKNTjKLiMAcB4ETEkreY0UEcLpHyEKY/s+e k8awmCDR7SbkVnpYw+sT1BY6Gf0ZXyPJ2dTdgEy5QFTtyhtRmhdtGBUr6Yo328zE h77/n+ifdl7YvVc7BdEk/+GrLlNRihZW36yom0mBhZXLzrBFeMWHk9WY1RdAdE6v fhq2/fvLXusKfbnE9Cxi9TAKhXjIT9TrciP20ny5c2Hl6KChOnU08KgMrEozoiJ1 wWJNYStnUzJnsTYjdEgXRmVXjOIuns10KX7FTp5u0pOEmK9J4A4HBoGghj6qvjSP eA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:24 2026 by rpki-client