This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_WNoBU-wqqkSIKGfeHeP6Mhx2bw.cer File: _WNoBU-wqqkSIKGfeHeP6Mhx2bw.cer (raw, json) Hash identifier: fQMgSPSIw3bSvFFzOX5Rrhsw5VOX+5b83ewHqMxLyw0= Subject key identifier: FD:63:68:05:4F:B0:AA:A9:12:20:A1:9F:78:77:8F:E8:C8:71:D9:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D3B4CEB24813A0146C3B155FF01B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e7444556-0eb0-4590-b891-c3155eb1c830/0/FD6368054FB0AAA91220A19F78778FE8C871D9BC.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e7444556-0eb0-4590-b891-c3155eb1c830/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214556 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d3:b4:ce:b2:48:13:a0:14:6c:3b:15:5f:f0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd6368054fb0aaa91220a19f78778fe8c871d9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:2f:3e:ff:1e:0c:3c:5f:06:15:c9:59:9a: 23:17:46:24:6c:e1:a3:ec:83:7e:1e:c7:69:dc:7c: c7:d8:ac:da:ee:45:4f:cf:44:87:99:4c:3e:89:08: fc:91:f5:89:f1:d1:2c:be:33:d9:5c:3e:7c:ca:f6: 8f:ef:91:32:de:67:34:af:55:c3:f5:bb:b1:f4:f5: 13:4b:44:ec:7f:74:ed:94:65:b9:ed:ca:6e:2d:30: 8c:58:2f:16:2e:60:06:23:7e:f6:96:52:95:11:bd: 79:09:67:58:a4:ba:2c:0c:38:ec:80:c0:57:2b:7a: 65:1c:1f:3b:31:c0:8f:db:e5:7b:02:3d:1b:e0:b4: 70:14:64:bc:20:d8:00:10:79:3d:12:8b:1a:dc:30: 51:2b:5d:18:c8:9b:11:3a:7a:bf:9f:eb:2c:fc:c6: 01:a6:ee:81:25:db:c6:d8:05:69:77:73:7b:64:42: 0e:8a:da:e7:f9:ec:90:3e:dc:6a:47:28:6b:df:a6: 97:5c:4b:ad:c2:c6:d9:10:6f:97:1b:17:dc:c8:d4: 48:76:47:65:15:9c:3f:c8:9b:a8:0b:27:97:9e:c9: 13:f9:94:07:72:cf:27:4c:72:21:11:7c:d8:b3:20: 60:11:8f:27:a4:8d:3d:05:07:8b:fd:30:8a:18:e8: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:63:68:05:4F:B0:AA:A9:12:20:A1:9F:78:77:8F:E8:C8:71:D9:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e7444556-0eb0-4590-b891-c3155eb1c830/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e7444556-0eb0-4590-b891-c3155eb1c830/0/FD6368054FB0AAA91220A19F78778FE8C871D9BC.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214556 Signature Algorithm: sha256WithRSAEncryption 2b:29:18:0a:a9:25:4a:f6:2b:22:5c:18:86:17:16:3b:c9:c7: 1b:72:1d:71:6d:85:a8:22:cd:2a:c1:b2:98:00:95:2f:93:18: 96:d8:76:a1:3b:0c:20:1b:62:64:a1:6d:31:20:6b:29:b5:be: a2:36:01:5c:b7:c9:9a:e7:6e:c2:e0:a4:fb:9a:79:72:d5:c2: 9f:90:04:c3:59:81:e1:00:ad:65:3e:ca:79:9b:c6:f5:1c:e8: 79:81:84:32:8a:20:7d:01:10:7e:48:99:98:fc:01:9f:25:a7: f0:03:36:3e:b1:82:81:fc:61:73:a5:7b:30:d4:a6:8d:c0:5b: 44:25:b5:35:f9:9c:bb:19:6c:9f:f1:0b:74:3e:e1:0f:70:ee: d7:e8:66:a0:6b:ea:90:d5:d4:25:9d:a0:7e:60:0c:c5:33:5b: 75:55:c7:90:05:ef:84:44:a4:4e:91:0a:b0:98:05:f7:85:08: 15:0a:f5:38:37:b7:5a:cf:d2:72:ff:78:6f:99:27:e3:80:52: 09:6b:ba:37:0c:49:1f:56:fc:b2:d2:88:16:14:71:a4:67:6b: 35:d5:5b:b8:20:b6:86:de:1b:58:05:fe:83:b0:aa:88:50:bf: cc:5a:9b:f9:65:ea:2e:bf:fe:a3:a1:09:a9:86:0f:4e:a2:0c: 8e:28:3c:cc -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt3WNO0zrJIE6AUbDsVX/AbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDYzNjgwNTRmYjBhYWE5MTIyMGExOWY3ODc3OGZlOGM4NzFkOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMYvPv8eDDxfBhXJWZojF0YkbOGj 7IN+Hsdp3HzH2Kza7kVPz0SHmUw+iQj8kfWJ8dEsvjPZXD58yvaP75Ey3mc0r1XD 9bux9PUTS0Tsf3TtlGW57cpuLTCMWC8WLmAGI372llKVEb15CWdYpLosDDjsgMBX K3plHB87McCP2+V7Aj0b4LRwFGS8INgAEHk9Eosa3DBRK10YyJsROnq/n+ss/MYB pu6BJdvG2AVpd3N7ZEIOitrn+eyQPtxqRyhr36aXXEutwsbZEG+XGxfcyNRIdkdl FZw/yJuoCyeXnskT+ZQHcs8nTHIhEXzYsyBgEY8npI09BQeL/TCKGOhLVQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFP1jaAVPsKqpEiChn3h3j+jIcdm8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U3NDQ0 NTU2LTBlYjAtNDU5MC1iODkxLWMzMTU1ZWIxYzgzMC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTc0 NDQ1NTYtMGViMC00NTkwLWI4OTEtYzMxNTVlYjFjODMwLzAvRkQ2MzY4MDU0RkIw QUFBOTEyMjBBMTlGNzg3NzhGRThDODcxRDlCQy5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRhww DQYJKoZIhvcNAQELBQADggEBACspGAqpJUr2KyJcGIYXFjvJxxtyHXFthagizSrB spgAlS+TGJbYdqE7DCAbYmShbTEgaym1vqI2AVy3yZrnbsLgpPuaeXLVwp+QBMNZ geEArWU+ynmbxvUc6HmBhDKKIH0BEH5ImZj8AZ8lp/ADNj6xgoH8YXOlezDUpo3A W0QltTX5nLsZbJ/xC3Q+4Q9w7tfoZqBr6pDV1CWdoH5gDMUzW3VVx5AF74REpE6R CrCYBfeFCBUK9Tg3t1rP0nL/eG+ZJ+OAUglrujcMSR9W/LLSiBYUcaRnazXVW7gg tobeG1gF/oOwqohQv8xam/ll6i6//qOhCamGD06iDI4oPMw= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:12 2026 by rpki-client