This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer File: pWGJNurjnydAQKDTMnz4gQLITG8.cer (raw, json) Hash identifier: aPTk6okemtbqXGX/Sm+d2XXU+aMJ3oKXWi75ufSR8Cs= Subject key identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C0040006941804C977D6F6B8D660B6ED9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 27 Jan 2026 16:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51457 IP: 109.232.16.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:40:00:69:41:80:4c:97:7d:6f:6b:8d:66:0b:6e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 27 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5618936eae39f274040a0d3327cf88102c84c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:c2:ef:c6:ad:d8:12:0c:48:28:8c:bc:cb: a8:32:ad:b3:65:12:fb:d3:3c:fa:69:4b:8f:01:f0: 76:e0:7f:97:de:f5:9d:85:db:a3:67:1a:3b:f2:aa: 8e:64:3b:49:c1:bd:bf:18:87:05:a3:61:b2:36:6b: e5:1c:70:72:fb:51:e6:c2:ac:f7:0f:4b:0a:56:e9: 8f:f1:0a:7e:db:9f:7d:e0:29:81:9c:7b:b4:dc:65: 25:ca:59:fb:47:62:31:1f:19:db:01:d8:9b:d1:b7: b7:05:3d:d2:e6:a8:4a:ec:90:4d:28:60:5b:05:cc: bf:16:56:aa:e8:93:bb:3d:03:40:dd:a6:d5:15:92: 25:5c:ab:5a:bf:85:62:10:b3:58:31:72:4a:97:69: f9:5c:c3:8b:7f:24:68:f4:93:39:63:23:4b:22:20: 95:52:d1:48:d4:9c:89:54:db:d4:48:c4:a1:02:7e: c8:35:07:8e:22:a1:e8:cc:c3:88:a2:bc:c7:74:db: 3c:d8:1f:8f:45:68:97:6d:fe:fa:5c:c4:6d:7b:a5: 49:98:9b:a6:c3:82:9f:dc:98:5c:b2:e1:eb:86:db: ae:f3:74:a3:6e:55:53:60:94:5a:ba:7a:30:ee:bd: 5f:9a:ba:37:a0:b7:42:40:20:2c:9d:d6:44:a2:45: 0c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.232.16.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51457 Signature Algorithm: sha256WithRSAEncryption ae:79:d3:f0:1f:24:20:27:70:31:dc:85:51:d6:20:a1:81:05: 98:9f:be:cc:76:65:03:6f:64:d6:45:6c:41:2e:2d:a8:f5:0e: f7:03:3e:fd:04:2f:d2:ed:ec:fd:b6:c1:1c:b0:9a:bb:63:8d: 5e:17:8a:42:b4:24:36:ac:d5:d9:af:38:ae:27:59:e2:53:54: 82:df:1f:19:17:ef:46:a3:a6:43:c8:2d:4d:f2:f5:d1:47:c9: 21:9b:1f:43:04:fb:da:b3:af:38:ee:0a:65:43:37:16:46:ca: 1d:df:d9:b6:17:57:a5:88:ae:94:eb:1c:5a:df:1a:27:10:7c: 28:bb:40:39:cc:34:3b:82:33:84:da:39:32:f3:19:2d:89:e5: 59:5f:07:c6:92:be:11:d1:d6:95:e6:eb:92:6e:21:ba:e1:07: 7c:65:37:34:35:90:f2:35:ae:58:b0:27:02:80:08:58:ca:2b: e9:82:2c:7f:93:b8:0c:62:a3:24:1f:f4:70:88:dd:ae:08:1c: 4f:bf:3c:d3:27:ab:8a:05:0a:f1:aa:2e:fd:6d:7a:1b:7e:e5: 34:18:f0:1e:cd:62:2e:45:1e:d0:23:03:3c:8a:f8:fa:b6:68: 9e:08:81:47:87:63:7e:8f:59:13:8f:28:35:28:1c:d8:ef:05: bf:b0:5e:7b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZwAQABpQYBMl31va41mC27ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI3MTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTYxODkzNmVhZTM5ZjI3NDA0MGEwZDMzMjdjZjg4MTAyYzg0YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTvC78at2BIMSCiMvMuoMq2zZRL7 0zz6aUuPAfB24H+X3vWdhdujZxo78qqOZDtJwb2/GIcFo2GyNmvlHHBy+1Hmwqz3 D0sKVumP8Qp+25994CmBnHu03GUlyln7R2IxHxnbAdib0be3BT3S5qhK7JBNKGBb Bcy/Flaq6JO7PQNA3abVFZIlXKtav4ViELNYMXJKl2n5XMOLfyRo9JM5YyNLIiCV UtFI1JyJVNvUSMShAn7INQeOIqHozMOIorzHdNs82B+PRWiXbf76XMRte6VJmJum w4Kf3JhcsuHrhtuu83SjblVTYJRaunow7r1fmro3oLdCQCAsndZEokUMKQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKVhiTbq458nQECg0zJ8+IECyExvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzliZWQy Ni0xOGZiLTRlY2YtYTJhMi1lNGEzMWU3OWM5Y2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvOWJlZDI2 LTE4ZmItNGVjZi1hMmEyLWU0YTMxZTc5YzljZS8xL3BXR0pOdXJqbnlkQVFLRFRN bno0Z1FMSVRHOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDbegQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDJATANBgkqhkiG9w0BAQsFAAOCAQEArnnT8B8kICdwMdyFUdYgoYEFmJ++zHZl A29k1kVsQS4tqPUO9wM+/QQv0u3s/bbBHLCau2ONXheKQrQkNqzV2a84ridZ4lNU gt8fGRfvRqOmQ8gtTfL10UfJIZsfQwT72rOvOO4KZUM3FkbKHd/ZthdXpYiulOsc Wt8aJxB8KLtAOcw0O4IzhNo5MvMZLYnlWV8HxpK+EdHWlebrkm4huuEHfGU3NDWQ 8jWuWLAnAoAIWMor6YIsf5O4DGKjJB/0cIjdrggcT7880yerigUK8aou/W16G37l NBjwHs1iLkUe0CMDPIr4+rZongiBR4djfo9ZE48oNSgc2O8Fv7Beew== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:35 2026 by rpki-client