This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer File: WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer (raw, json) Hash identifier: VR4HRGknc75nG4C1/mTSUlECcPP9f9ypgAbrrzGC8Ig= Subject key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B364BF8EAD825434F3AB22B94FA1317 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16328 IP: 193.108.32.0/23 IP: 193.178.222.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4b:f8:ea:d8:25:43:4f:3a:b2:2b:94:fa:13:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bc:2d:91:70:96:8b:75:02:5f:d4:9a:61:3a: 02:99:00:cf:07:24:4c:10:98:b7:a5:be:46:11:18: 6a:99:3d:46:a2:b5:de:bc:88:ad:65:8b:b7:c5:ca: ae:2b:01:a7:65:04:41:de:5e:9a:43:97:cf:9b:29: 31:db:28:b1:f3:9a:22:06:5a:18:0a:cf:c0:76:95: 73:6b:ec:2b:21:45:49:38:4f:a7:73:63:00:91:61: 1f:39:8b:48:4a:e8:4d:af:3e:2d:c9:fc:f9:28:0f: 51:70:25:00:ef:cc:cf:52:ba:ac:6e:84:50:b0:3e: 93:dd:c5:2a:4d:37:69:15:80:ee:d9:6b:04:fe:19: 8e:f6:51:57:51:9c:4c:46:84:48:a7:fd:46:82:51: e0:60:e3:84:04:ba:c5:e9:df:5a:44:c8:cb:87:55: 0f:b3:34:7d:93:1c:0a:1a:be:bb:06:18:b6:ce:1b: 75:cd:e3:ae:c2:7f:1a:b0:ec:e6:c1:7d:1c:11:66: 80:28:7f:45:32:62:58:d4:10:7f:7d:b2:e3:21:58: 16:c1:d0:0f:3c:dd:fc:12:62:59:de:2c:7c:18:2f: 14:84:be:d7:f0:f3:06:74:53:e2:69:27:c2:ae:75: a9:15:d5:77:09:29:c9:26:56:f0:2f:bf:8e:d2:ca: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.32.0/23 193.178.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16328 Signature Algorithm: sha256WithRSAEncryption 06:4a:00:d6:9f:f0:8f:e2:91:27:9f:56:8f:6d:27:77:1a:2c: 06:c9:ea:8b:db:85:81:db:8b:d3:6d:42:4f:57:6a:90:81:fe: 1d:4c:2b:20:04:2c:c6:13:14:39:9c:15:8d:18:84:de:ec:60: 03:d1:27:ce:0e:cf:28:2f:56:be:ab:a2:b9:c9:d7:5a:2c:c7: 97:a3:c2:c2:b2:b1:c8:4f:ea:ee:08:85:cc:19:16:04:e3:7f: 4c:c2:14:d5:5c:7e:7f:be:1b:eb:66:d9:b4:c3:5d:3b:ec:d5: 20:e4:da:86:64:06:23:7b:4c:34:15:5a:34:c8:52:91:8e:7b: f0:47:a1:ef:53:ee:a9:9a:d0:d0:89:15:e6:75:57:34:5d:c3: c8:77:3c:5e:68:f5:d8:d3:f2:d5:77:c5:50:91:89:4f:43:5a: cf:b0:ba:5d:d4:b6:02:a9:84:a7:b9:07:39:d0:39:a7:fb:7d: f6:4a:17:88:47:df:5d:2e:05:c0:76:ae:ae:b4:7a:1d:c5:b7: f8:74:66:0b:b9:e0:7b:59:8b:f1:ab:0e:00:00:bd:e9:6b:a7: 85:ce:fb:d4:15:65:4d:0c:7d:0a:92:61:03:41:15:d9:8c:ee: f0:84:fe:69:97:f5:bf:a6:60:d7:6b:be:31:35:41:a9:86:3b: 23:86:ab:9e -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt7Nkv46tglQ086siuU+hMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjM0YjE4NDg2MTEwMDA3MWZlNGRiM2RkYTg0YTgyY2MxYmJjYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17wtkXCWi3UCX9SaYToCmQDPByRM EJi3pb5GERhqmT1GorXevIitZYu3xcquKwGnZQRB3l6aQ5fPmykx2yix85oiBloY Cs/AdpVza+wrIUVJOE+nc2MAkWEfOYtISuhNrz4tyfz5KA9RcCUA78zPUrqsboRQ sD6T3cUqTTdpFYDu2WsE/hmO9lFXUZxMRoRIp/1GglHgYOOEBLrF6d9aRMjLh1UP szR9kxwKGr67Bhi2zht1zeOuwn8asOzmwX0cEWaAKH9FMmJY1BB/fbLjIVgWwdAP PN38EmJZ3ix8GC8UhL7X8PMGdFPiaSfCrnWpFdV3CSnJJlbwL7+O0sopdwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFFs0sYSGEQAHH+TbPdqEqCzBu8xiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2E4ZGU1 Ni1lZGNjLTQwYjEtYjg3Zi00YTA3Zjk3ZTk4YTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvYThkZTU2 LWVkY2MtNDBiMS1iODdmLTRhMDdmOTdlOThhOS8xL1d6U3hoSVlSQUFjZjVOczky b1NvTE1HN3pHSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwWwgAwQAwbLeMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAj/IMA0GCSqGSIb3DQEBCwUAA4IBAQAGSgDWn/CP4pEnn1aPbSd3GiwG yeqL24WB24vTbUJPV2qQgf4dTCsgBCzGExQ5nBWNGITe7GAD0SfODs8oL1a+q6K5 yddaLMeXo8LCsrHIT+ruCIXMGRYE439MwhTVXH5/vhvrZtm0w1077NUg5NqGZAYj e0w0FVo0yFKRjnvwR6HvU+6pmtDQiRXmdVc0XcPIdzxeaPXY0/LVd8VQkYlPQ1rP sLpd1LYCqYSnuQc50Dmn+332SheIR99dLgXAdq6utHodxbf4dGYLueB7WYvxqw4A AL3pa6eFzvvUFWVNDH0KkmEDQRXZjO7whP5pl/W/pmDXa74xNUGphjsjhque -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:52 2026 by rpki-client