This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer File: w1re68KNfif9nrnvsjVR2uILHQ8.cer (raw, json) Hash identifier: 165SeyCMXfzOF5IV4ucUpK59kv7pvGR95IcyUmvAXys= Subject key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36108FEC41C5238E1109930293E75B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47951 IP: 194.104.137.0/24 IP: 2a11:5fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:10:8f:ec:41:c5:23:8e:11:09:93:02:93:e7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8c:40:9a:d0:eb:ee:c4:72:6b:20:7f:29:8a: 4e:b5:4d:b2:ce:3d:70:cd:19:69:93:ac:bd:bf:f0: ba:31:73:e7:19:c0:06:34:55:fd:95:c2:49:96:db: fb:7a:67:51:4e:ff:c2:23:2c:f8:1d:3c:68:86:82: 8a:18:b4:72:87:7e:27:06:c1:7c:5e:e7:fe:bb:82: cf:1f:e1:ff:a9:23:07:3e:b0:c5:f5:6a:ff:74:7c: fe:7b:11:65:f9:14:03:61:7d:b6:a4:c8:a3:1e:08: c9:60:07:54:e2:3e:89:cc:e6:19:4c:c1:ec:9a:27: da:43:d8:43:f4:c7:a3:97:1d:3c:8b:b2:f7:b8:6a: b9:5a:f4:c4:f3:1d:19:68:ec:78:52:c4:ad:3f:c3: 3a:ef:d3:47:f1:29:90:5e:2c:2e:c0:a2:1d:f0:bc: 44:86:89:ce:71:4c:02:a3:1e:c0:ab:09:1f:5a:81: b8:b3:35:f7:c0:8c:0c:10:66:ff:84:0c:f9:7a:15: 4f:83:5e:94:f4:67:a7:7d:64:c5:c3:f6:bb:0a:77: cf:60:49:c4:5b:15:12:e4:b6:3e:9a:a0:ee:c4:58: ad:f1:0b:05:15:b8:c4:9a:14:0f:77:5a:71:97:03: a2:b2:f5:26:9d:5f:19:45:4d:f2:8c:64:a8:ec:c1: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.137.0/24 IPv6: 2a11:5fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47951 Signature Algorithm: sha256WithRSAEncryption 75:de:cb:5c:9d:3c:46:5d:c6:c5:b7:fe:da:65:c0:da:42:80: 7e:c3:e5:7e:b4:f9:6d:cc:f4:87:3e:00:54:4d:95:42:e8:66: 4e:7f:4c:49:a6:51:73:55:8f:27:6b:db:4d:d4:19:3e:55:8a: d6:d6:05:77:11:90:7b:d9:22:21:40:a4:8f:3b:b2:bc:7e:d9: 3a:51:24:cc:b3:2d:2d:87:4d:fd:3a:09:39:c7:c3:9d:f9:be: 3b:24:f2:f5:d7:70:6e:c8:13:95:a2:34:18:78:36:12:bb:ed: d1:99:9a:ef:13:9b:5b:a4:dc:53:0d:37:7c:43:ea:2f:07:43: f4:e4:00:f8:40:47:61:3c:98:41:ce:f5:dc:a7:48:60:db:ff: bc:e5:02:9b:ae:8a:24:f5:a3:69:59:a1:8d:34:41:72:cb:b1: 9e:be:c9:18:4e:4b:77:ea:2f:17:eb:15:70:2a:ee:1c:c3:96: fd:83:4c:35:a7:ad:96:21:b9:af:c2:3d:21:be:38:ec:64:50: 87:12:32:30:5e:5b:13:ff:9c:ce:a6:df:cb:70:ef:af:a7:ab: 80:c3:4e:78:9a:3d:4f:ec:e6:8c:b7:37:88:03:e8:6e:2c:82: 69:17:8b:70:5c:b8:43:23:56:d8:6c:ef:b5:61:a9:a0:48:60: 26:0e:a5:8a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NhCP7EHFI44RCZMCk+dbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzVhZGVlYmMyOGQ3ZTI3ZmQ5ZWI5ZWZiMjM1NTFkYWUyMGIxZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYxAmtDr7sRyayB/KYpOtU2yzj1w zRlpk6y9v/C6MXPnGcAGNFX9lcJJltv7emdRTv/CIyz4HTxohoKKGLRyh34nBsF8 Xuf+u4LPH+H/qSMHPrDF9Wr/dHz+exFl+RQDYX22pMijHgjJYAdU4j6JzOYZTMHs mifaQ9hD9Mejlx08i7L3uGq5WvTE8x0ZaOx4UsStP8M679NH8SmQXiwuwKId8LxE honOcUwCox7AqwkfWoG4szX3wIwMEGb/hAz5ehVPg16U9GenfWTFw/a7CnfPYEnE WxUS5LY+mqDuxFit8QsFFbjEmhQPd1pxlwOisvUmnV8ZRU3yjGSo7MHv6QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMNa3uvCjX4n/Z6577I1UdriCx0PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzgzOWQx Yy00ZGIzLTQ1Y2MtYjA0Zi1iNTVkN2Q3ZjJjNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvODM5ZDFj LTRkYjMtNDVjYy1iMDRmLWI1NWQ3ZDdmMmM0OC8xL3cxcmU2OEtOZmlmOW5ybnZz alZSMnVJTEhROC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwmiJMA0EAgACMAcDBQMqEV/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC7TzANBgkqhkiG9w0BAQsFAAOCAQEAdd7LXJ08Rl3G xbf+2mXA2kKAfsPlfrT5bcz0hz4AVE2VQuhmTn9MSaZRc1WPJ2vbTdQZPlWK1tYF dxGQe9kiIUCkjzuyvH7ZOlEkzLMtLYdN/ToJOcfDnfm+OyTy9ddwbsgTlaI0GHg2 Ervt0Zma7xObW6TcUw03fEPqLwdD9OQA+EBHYTyYQc713KdIYNv/vOUCm66KJPWj aVmhjTRBcsuxnr7JGE5Ld+ovF+sVcCruHMOW/YNMNaetliG5r8I9Ib447GRQhxIy MF5bE/+czqbfy3Dvr6ergMNOeJo9T+zmjLc3iAPobiyCaReLcFy4QyNW2GzvtWGp oEhgJg6lig== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:23 2026 by rpki-client