This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer File: w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer (raw, json) Hash identifier: QBqDE2e+Gvckl2Ic4EPUQRsjIIpuKOvMVahmPGDDMGI= Subject key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910823F71A3C51795731F469C02C724 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.46.100.0/22 IP: 193.187.247.0/24 IP: 193.187.252.0 -- 193.187.254.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:82:3f:71:a3:c5:17:95:73:1f:46:9c:02:c7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c34bdff88e8e8989871e13408111ad1433b30c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:42:bf:be:12:52:1c:58:50:cd:a4:f5:10:4a: 71:49:3b:78:99:88:4e:42:b7:89:9c:cf:ff:1c:cc: e4:15:52:6f:97:ef:3b:3a:7b:73:41:68:45:3a:81: 5a:1c:5c:81:bb:0c:9e:32:ba:0f:b6:70:4d:1d:b3: a8:58:4f:1e:d9:1c:ce:80:63:97:02:e2:ee:d4:8a: 9e:d8:a6:25:b8:cb:8c:19:2d:d4:4b:b7:c9:70:89: 3b:a0:d6:4e:c4:33:14:fb:a6:05:50:08:e9:8d:20: d5:cf:18:0d:ea:e5:fa:d9:78:57:57:59:a7:d7:9d: c4:79:48:6e:15:ea:66:3e:50:34:6b:a8:af:a8:b5: 3d:77:9f:9a:66:4b:de:c7:d9:97:83:17:0a:0c:87: 60:8d:93:aa:e6:d5:2c:4b:11:24:3e:87:74:ee:ab: 71:4d:fd:fd:83:8a:d6:cc:0b:b4:90:7f:6e:15:25: b6:87:ee:d4:b9:a5:f2:22:a4:23:02:e9:e2:aa:ba: bf:21:71:ef:ea:84:2a:88:11:76:04:ac:52:a8:13: 91:52:63:fa:2a:a5:8a:27:e2:cb:75:fc:b3:03:81: a8:04:2f:24:2e:92:eb:c0:5b:8b:50:2b:bc:ce:f5: 2a:b7:0e:6e:c5:89:17:58:5d:90:6a:b7:08:bc:06: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.100.0/22 193.187.247.0/24 193.187.252.0-193.187.254.255 Signature Algorithm: sha256WithRSAEncryption 65:ec:1f:67:a4:9d:11:1d:b2:d0:85:76:d9:6f:51:31:f2:8a: f3:d1:e2:72:bc:36:a4:71:b0:22:d9:90:93:db:98:27:6f:06: ff:4d:b3:82:cf:64:d1:2f:aa:d2:48:3d:0b:98:5c:02:00:be: a1:b5:94:6f:59:79:2d:8b:60:59:05:ba:c8:09:a9:71:8a:b0: 03:60:47:9f:c0:1f:e6:81:b0:ee:57:1e:c6:77:f2:f7:a1:d1: 73:ac:5e:9e:90:cc:0f:58:65:c7:a8:44:ff:ca:52:3c:a0:de: a4:6e:ad:c9:58:9e:b1:26:38:55:0c:20:4c:51:51:95:34:ac: aa:e8:c1:c0:82:11:c7:e6:b6:87:97:8f:8d:c6:2c:47:1e:6c: ed:ea:d5:fe:9a:2a:4f:76:26:b0:75:6f:a3:21:0f:2a:0e:6e: 7c:52:be:e0:cf:1d:f0:1b:04:7f:35:e6:71:57:fe:4e:49:bd: 39:b7:ce:aa:79:b2:4a:ac:02:12:28:59:35:28:41:9f:63:18: a0:58:c3:11:59:d7:fe:d6:23:a6:86:87:bf:f8:c7:cd:19:c0: 74:78:4e:ac:a7:f6:b6:c3:a8:f8:c3:08:03:2d:8a:88:fc:e2: 27:be:c4:aa:c5:08:98:b1:31:9a:ce:50:74:50:d9:64:d9:f4: e3:63:e8:7b -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt5EII/caPFF5VzH0acAsckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzRiZGZmODhlOGU4OTg5ODcxZTEzNDA4MTExYWQxNDMzYjMwYzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUK/vhJSHFhQzaT1EEpxSTt4mYhO QreJnM//HMzkFVJvl+87OntzQWhFOoFaHFyBuwyeMroPtnBNHbOoWE8e2RzOgGOX AuLu1Iqe2KYluMuMGS3US7fJcIk7oNZOxDMU+6YFUAjpjSDVzxgN6uX62XhXV1mn 153EeUhuFepmPlA0a6ivqLU9d5+aZkvex9mXgxcKDIdgjZOq5tUsSxEkPod07qtx Tf39g4rWzAu0kH9uFSW2h+7UuaXyIqQjAuniqrq/IXHv6oQqiBF2BKxSqBORUmP6 KqWKJ+LLdfyzA4GoBC8kLpLrwFuLUCu8zvUqtw5uxYkXWF2QarcIvAYrbwIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFMNL3/iOjomJhx4TQIERrRQzswxjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzgyNDdh Ni0yYjEyLTQ4M2YtYjFhYy02YWMxZDE1NTU0YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvODI0N2E2 LTJiMTItNDgzZi1iMWFjLTZhYzFkMTU1NTRhYi8xL3cwdmYtSTZPaVltSEhoTkFn Ukd0RkRPekRHTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjAgBAIAATAaAwQCwS5kAwQAwbv3MAwDBALBu/wDBADBu/4wDQYJ KoZIhvcNAQELBQADggEBAGXsH2eknREdstCFdtlvUTHyivPR4nK8NqRxsCLZkJPb mCdvBv9Ns4LPZNEvqtJIPQuYXAIAvqG1lG9ZeS2LYFkFusgJqXGKsANgR5/AH+aB sO5XHsZ38veh0XOsXp6QzA9YZceoRP/KUjyg3qRurclYnrEmOFUMIExRUZU0rKro wcCCEcfmtoeXj43GLEcebO3q1f6aKk92JrB1b6MhDyoObnxSvuDPHfAbBH815nFX /k5JvTm3zqp5skqsAhIoWTUoQZ9jGKBYwxFZ1/7WI6aGh7/4x80ZwHR4Tqyn9rbD qPjDCAMtioj84ie+xKrFCJixMZrOUHRQ2WTZ9ONj6Hs= -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:24 2026 by rpki-client