This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer File: rwL7VrRZx6IaebaLThGKuHb8lqU.cer (raw, json) Hash identifier: JDw4MhuGVrp7xX8E5D6epjZxBallvmQePZQsVUa8uq0= Subject key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB438A8CA21CCC911E499DF7FF9F74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39460 IP: 195.66.92.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:43:8a:8c:a2:1c:cc:91:1e:49:9d:f7:ff:9f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:2b:19:52:a3:18:8d:9a:0e:d6:e8:ac:4c: ec:30:e6:75:4a:08:c6:d0:07:36:e6:f0:9a:7e:b7: 63:e8:13:03:53:d5:3a:d0:02:aa:f8:62:35:f7:c0: 57:0c:89:21:1a:e8:a7:00:b0:c5:4a:93:4a:51:d6: b1:68:fa:dd:22:7c:28:b3:11:6b:8e:d7:57:f2:85: 97:cf:b5:64:75:e0:a5:2a:07:01:23:76:82:d9:07: 58:69:4f:73:43:c7:a7:c8:8a:90:fe:ce:b9:e3:e9: dd:80:fa:17:28:7c:46:05:3b:74:f4:19:4a:46:7a: 63:ac:0f:60:f1:4a:b7:9a:d6:1a:aa:c1:45:ef:a9: 96:5d:bd:45:bc:96:d4:e3:33:d5:3f:cc:a9:4b:0d: 29:8b:2e:8f:91:64:4e:e4:d3:52:f2:19:9c:c4:09: 98:5b:fe:30:95:25:be:82:0a:c5:3a:b1:77:2b:77: 1e:09:0f:bb:a2:0a:be:05:92:0a:31:07:1a:fe:72: 51:00:aa:50:e4:8f:78:0e:c9:21:85:c1:d3:5f:ea: 85:f8:99:5a:ac:a3:29:41:b0:6d:07:93:97:37:13: 5e:6c:eb:7f:28:9b:9b:d1:75:67:0d:62:dc:69:1f: dc:f2:69:73:69:89:00:22:c8:03:c9:9a:37:ae:c4: 17:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.66.92.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39460 Signature Algorithm: sha256WithRSAEncryption 2e:33:bf:c9:72:ba:1a:5f:72:f6:e9:c2:7a:3b:18:dc:13:7d: c7:4a:3a:0e:bc:88:82:1c:be:f5:57:82:8a:b0:d3:3b:31:92: 0e:20:21:a7:6d:36:19:72:0b:7b:2d:b2:30:d8:b2:96:f7:0d: 50:64:46:73:0a:e9:b5:0c:f5:28:00:45:f6:37:5e:9a:fc:2b: a0:2c:b3:b5:df:f7:a6:a0:d7:11:47:5a:d1:a9:31:30:fd:9d: 82:f7:76:34:d0:06:db:82:55:00:a5:7d:f3:f2:28:37:9f:48: e7:77:46:bd:f8:f4:97:85:e3:89:c3:49:88:84:c2:2d:32:4d: 4c:93:c6:e1:6e:f6:90:de:59:55:40:58:77:71:b4:61:89:b8: 82:8d:f9:df:5c:46:07:b6:97:a5:00:98:78:8a:99:23:e5:30: 58:90:94:6e:ca:c5:30:0c:93:34:1b:4b:67:03:6b:22:a1:a8: 90:3b:e4:61:7a:c7:70:68:ad:19:fd:f9:cb:be:8d:66:2f:ce: 16:74:29:7d:2b:ed:73:5e:63:0b:42:4e:60:77:f9:45:95:ef: ed:63:4c:be:10:98:70:85:d1:03:f1:81:6c:b9:79:b3:9a:c0: 03:97:a5:43:85:9e:0a:b2:c5:7a:9c:d8:cc:8a:b3:11:40:91: 67:57:0c:2b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9y0OKjKIczJEeSZ33/590MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjAyZmI1NmI0NTljN2EyMWE3OWI2OGI0ZTExOGFiODc2ZmM5NmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA8rGVKjGI2aDtborEzsMOZ1SgjG 0Ac25vCafrdj6BMDU9U60AKq+GI198BXDIkhGuinALDFSpNKUdaxaPrdInwosxFr jtdX8oWXz7VkdeClKgcBI3aC2QdYaU9zQ8enyIqQ/s654+ndgPoXKHxGBTt09BlK RnpjrA9g8Uq3mtYaqsFF76mWXb1FvJbU4zPVP8ypSw0piy6PkWRO5NNS8hmcxAmY W/4wlSW+ggrFOrF3K3ceCQ+7ogq+BZIKMQca/nJRAKpQ5I94DskhhcHTX+qF+Jla rKMpQbBtB5OXNxNebOt/KJub0XVnDWLcaR/c8mlzaYkAIsgDyZo3rsQX5wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK8C+1a0WceiGnm2i04Rirh2/JalMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzMzZmI5 MC0xODliLTRlMzEtYjkyYS0wYzE4ZDg1OTczMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvMzNmYjkw LTE4OWItNGUzMS1iOTJhLTBjMThkODU5NzMyOC8xL3J3TDdWclJaeDZJYWViYUxU aEdLdUhiOGxxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw0JcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCaJDANBgkqhkiG9w0BAQsFAAOCAQEALjO/yXK6Gl9y9unCejsY3BN9x0o6DryI ghy+9VeCirDTOzGSDiAhp202GXILey2yMNiylvcNUGRGcwrptQz1KABF9jdemvwr oCyztd/3pqDXEUda0akxMP2dgvd2NNAG24JVAKV98/IoN59I53dGvfj0l4XjicNJ iITCLTJNTJPG4W72kN5ZVUBYd3G0YYm4go3531xGB7aXpQCYeIqZI+UwWJCUbsrF MAyTNBtLZwNrIqGokDvkYXrHcGitGf35y76NZi/OFnQpfSvtc15jC0JOYHf5RZXv 7WNMvhCYcIXRA/GBbLl5s5rAA5elQ4WeCrLFepzYzIqzEUCRZ1cMKw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:26 2026 by rpki-client