This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer File: w27RUSe_ywvNemOGi0mck8szURM.cer (raw, json) Hash identifier: Za0B9zIOHGU1gDQ2zB/cei3x0Im8KWI5TMERvFcSA80= Subject key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F84ACF80C7D07D1521DE71A872FE372 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2115 IP: 91.223.68.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ac:f8:0c:7d:07:d1:52:1d:e7:1a:87:2f:e3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ed:c9:d1:f6:f6:f9:0d:c8:cd:07:77:0a:de: d7:80:b2:37:09:8f:47:c3:99:32:3c:ea:90:c5:dc: cb:d9:c5:c2:0a:f7:35:ca:37:50:9d:8a:d8:3d:4a: 4a:0c:99:7a:83:d6:bc:1e:60:5a:34:8a:41:36:5c: bc:50:07:82:ed:57:fa:cb:01:d1:a3:cf:a9:2b:65: 21:d1:ba:a6:d1:f1:5a:19:ef:b8:69:a9:e7:1b:77: 33:60:40:16:52:07:57:65:c0:c4:71:a7:95:13:20: 9b:f3:bc:80:9b:b2:f6:b0:5d:ec:58:65:c7:0c:eb: 4a:60:df:17:ac:2c:99:2c:f3:44:35:fe:e3:5a:0a: a3:8b:86:27:e4:ec:42:58:f1:c4:1a:8c:04:31:eb: 4a:b4:f6:20:0e:26:e8:53:59:5c:59:9a:08:41:d6: 28:c8:50:48:8f:ab:8c:e8:e9:7f:0c:1e:34:b3:7f: 1f:9d:c4:01:49:e6:ce:d6:10:64:a7:60:3f:c0:8e: ae:56:09:f0:73:4b:70:d1:2c:67:95:20:ee:3f:c6: 9c:5d:25:1e:57:35:10:3e:65:22:d5:ea:67:36:3d: 08:50:70:53:e9:84:73:20:b1:bf:3c:ce:de:d5:b9: 6d:2f:01:18:a9:be:6d:d3:05:af:db:d9:53:0b:82: 7a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.68.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2115 Signature Algorithm: sha256WithRSAEncryption a0:7a:10:80:81:49:d9:0d:1d:6d:e3:9c:74:44:6d:b0:30:40: 1c:6d:b3:af:24:73:b4:d8:ba:3b:a3:21:ed:01:45:f0:fe:73: 7d:b5:dd:56:31:89:78:cd:c5:80:29:29:8b:7a:68:a9:b5:3a: 15:6e:8b:8a:63:69:49:ca:87:0b:d0:30:3b:95:a5:c9:5a:b7: 1a:ed:60:27:f1:8c:ac:f6:f5:8e:29:21:e1:de:ed:ab:3a:ef: 2d:c5:f9:d2:0f:0e:37:05:09:a6:ec:f3:ad:b4:1f:bf:13:97: bf:31:2b:1a:ee:3e:fc:84:02:87:89:28:5d:1e:f9:f0:0a:4f: 3c:5a:22:2f:58:71:c4:ec:70:f6:0c:19:b6:cb:4b:6c:46:c8: ca:3c:4b:dd:a0:49:28:ee:cf:71:78:94:96:55:3d:d2:b4:10: 59:aa:2a:d3:82:30:53:bd:0c:27:cb:6b:8e:0e:a0:60:33:28: b7:ab:be:87:35:d7:48:b3:3c:63:65:32:2b:be:f6:32:cc:cc: 9b:f3:c5:91:c1:e5:5e:15:e0:68:39:d9:00:de:ed:6d:cb:e4: f1:85:f0:2d:f6:38:41:66:cd:3c:d6:6f:57:c4:d4:c5:96:cf: 78:1f:dc:f3:b4:aa:57:c4:88:f6:6d:89:6d:cb:2a:15:cd:a4: 9c:63:45:4d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/hKz4DH0H0VId5xqHL+NyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzZlZDE1MTI3YmZjYjBiY2Q3YTYzODY4YjQ5OWM5M2NiMzM1MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8O3J0fb2+Q3IzQd3Ct7XgLI3CY9H w5kyPOqQxdzL2cXCCvc1yjdQnYrYPUpKDJl6g9a8HmBaNIpBNly8UAeC7Vf6ywHR o8+pK2Uh0bqm0fFaGe+4aannG3czYEAWUgdXZcDEcaeVEyCb87yAm7L2sF3sWGXH DOtKYN8XrCyZLPNENf7jWgqji4Yn5OxCWPHEGowEMetKtPYgDiboU1lcWZoIQdYo yFBIj6uM6Ol/DB40s38fncQBSebO1hBkp2A/wI6uVgnwc0tw0SxnlSDuP8acXSUe VzUQPmUi1epnNj0IUHBT6YRzILG/PM7e1bltLwEYqb5t0wWv29lTC4J6GQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFMNu0VEnv8sLzXpjhotJnJPLM1ETMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2RhN2Zl MS00NjI3LTQ4M2QtODgzMi0yNjlhNmI4MjNiN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvZGE3ZmUx LTQ2MjctNDgzZC04ODMyLTI2OWE2YjgyM2I3ZS8xL3cyN1JVU2VfeXd2TmVtT0dp MG1jazhzelVSTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW99EMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AghDMA0GCSqGSIb3DQEBCwUAA4IBAQCgehCAgUnZDR1t45x0RG2wMEAcbbOvJHO0 2Lo7oyHtAUXw/nN9td1WMYl4zcWAKSmLemiptToVbouKY2lJyocL0DA7laXJWrca 7WAn8Yys9vWOKSHh3u2rOu8txfnSDw43BQmm7POttB+/E5e/MSsa7j78hAKHiShd HvnwCk88WiIvWHHE7HD2DBm2y0tsRsjKPEvdoEko7s9xeJSWVT3StBBZqirTgjBT vQwny2uODqBgMyi3q76HNddIszxjZTIrvvYyzMyb88WRweVeFeBoOdkA3u1ty+Tx hfAt9jhBZs081m9XxNTFls94H9zztKpXxIj2bYltyyoVzaScY0VN -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:57 2026 by rpki-client