This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer (raw, json) Hash identifier: nk/9ygjay7YgZg2nMCasoq1W1rwJY7r78bQCnwllNvo= Subject key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C760244D02815C95123192252A144B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203184 IP: 185.142.148.0/22 IP: 2a07:2e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:60:24:4d:02:81:5c:95:12:31:92:25:2a:14:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a561ccb03741056715a6be4805321662d88e7e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1e:e2:3c:cc:dc:f1:a6:14:a7:bf:78:27:81: df:b9:5d:31:22:e8:7b:75:1d:2d:d8:8f:45:20:79: 71:76:0b:8e:df:a5:1c:f9:bc:5a:e6:0e:0b:97:6a: 24:b8:bb:ab:4e:fc:ea:aa:35:e3:9f:9f:a5:bc:6b: 78:33:7e:a6:35:a3:d9:fd:3b:04:92:df:37:c9:04: e4:5d:d3:91:bf:2c:8d:e6:7b:bf:3c:48:9e:c4:39: 43:cd:97:7e:fc:2e:79:9c:9a:eb:68:af:a5:b0:92: fb:8d:d1:c7:ed:d3:59:2d:8d:17:88:b2:12:69:b1: 33:bb:c9:ed:0b:36:f8:88:c7:3f:a7:84:11:ea:f7: b7:5b:f4:eb:03:2d:d7:74:e1:05:e3:66:c5:56:ee: e6:1b:7e:11:69:21:5b:37:66:c2:2f:60:cf:5c:25: 67:7a:89:13:0c:04:e6:01:0c:d6:b7:14:13:b8:45: 6e:33:fd:70:a8:20:4d:c4:85:1a:a2:d6:cb:81:50: 03:bb:9e:cc:c7:ec:64:32:4a:36:71:03:0d:02:25: d6:b7:ad:52:6c:53:5f:75:b3:66:f7:2e:09:1b:96: 76:ce:f6:82:8b:be:2f:b5:32:c4:9e:2e:5f:f6:0e: d4:33:8a:8f:ef:eb:54:1a:9f:7b:64:fe:8a:ed:9c: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.148.0/22 IPv6: 2a07:2e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203184 Signature Algorithm: sha256WithRSAEncryption 6d:88:8a:83:1b:18:f0:68:b3:08:09:1d:47:cb:d0:64:c2:53: f1:40:86:4f:70:dc:cb:56:f6:fb:59:2d:dc:e2:0c:47:74:9c: b1:ab:c9:56:b5:89:3f:97:cf:e3:b2:39:7d:38:d4:aa:45:80: bb:da:54:f6:fc:0f:07:a4:12:b3:35:17:b2:e3:9e:a1:02:c1: ad:18:be:7f:57:27:bf:6d:e6:1c:cd:3a:ba:0d:5f:52:15:63: 10:22:f4:a9:21:42:45:ab:e9:ad:20:98:84:4f:99:57:06:28: 9e:ba:52:68:e3:d4:34:d9:36:da:fd:f2:74:da:87:a4:22:6b: 37:1f:fc:52:7a:b4:63:d1:c1:01:18:1f:31:fd:7d:20:17:33: 27:28:e3:cc:ec:9a:86:91:cc:e6:8e:e3:05:7b:8b:1a:51:1c: 05:83:50:86:b7:e0:28:d1:9a:59:86:df:d8:c4:68:c4:2a:23: 1e:d1:74:e5:d4:6a:e3:37:90:8b:30:1f:0c:46:dd:73:3a:68: 42:6f:bd:bb:9f:b9:5a:e4:11:47:ed:03:05:d6:51:e0:65:b7: 2c:d8:ca:0f:bc:fb:19:40:a5:ae:ad:a1:cb:47:89:4f:32:5f: 91:ce:4b:30:5f:41:25:6b:2d:78:b7:e7:41:9f:da:95:80:c7: cf:98:ba:2e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3x2AkTQKBXJUSMZIlKhRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTYxY2NiMDM3NDEwNTY3MTVhNmJlNDgwNTMyMTY2MmQ4OGU3ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h7iPMzc8aYUp794J4HfuV0xIuh7 dR0t2I9FIHlxdguO36Uc+bxa5g4Ll2okuLurTvzqqjXjn5+lvGt4M36mNaPZ/TsE kt83yQTkXdORvyyN5nu/PEiexDlDzZd+/C55nJrraK+lsJL7jdHH7dNZLY0XiLIS abEzu8ntCzb4iMc/p4QR6ve3W/TrAy3XdOEF42bFVu7mG34RaSFbN2bCL2DPXCVn eokTDATmAQzWtxQTuEVuM/1wqCBNxIUaotbLgVADu57Mx+xkMko2cQMNAiXWt61S bFNfdbNm9y4JG5Z2zvaCi74vtTLEni5f9g7UM4qP7+tUGp97ZP6K7Zx32QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFKVhzLA3QQVnFaa+SAUyFmLYjn58MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzRiYzdm YS0wNDYyLTRjZjYtOTE4OS1hZTRlNjk4NjY0ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvNGJjN2Zh LTA0NjItNGNmNi05MTg5LWFlNGU2OTg2NjRmMS8xL3BXSE1zRGRCQldjVnByNUlC VElXWXRpT2Zudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuY6UMA0EAgACMAcDBQMqBy4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZsDANBgkqhkiG9w0BAQsFAAOCAQEAbYiKgxsY8Giz CAkdR8vQZMJT8UCGT3Dcy1b2+1kt3OIMR3ScsavJVrWJP5fP47I5fTjUqkWAu9pU 9vwPB6QSszUXsuOeoQLBrRi+f1cnv23mHM06ug1fUhVjECL0qSFCRavprSCYhE+Z VwYonrpSaOPUNNk22v3ydNqHpCJrNx/8Unq0Y9HBARgfMf19IBczJyjjzOyahpHM 5o7jBXuLGlEcBYNQhrfgKNGaWYbf2MRoxCojHtF05dRq4zeQizAfDEbdczpoQm+9 u5+5WuQRR+0DBdZR4GW3LNjKD7z7GUClrq2hy0eJTzJfkc5LMF9BJWsteLfnQZ/a lYDHz5i6Lg== -----END CERTIFICATE-----Generated at Tue Jan 20 11:25:43 2026 by rpki-client