This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer File: w49sR0pKRBSpySd75Naqrivt6ks.cer (raw, json) Hash identifier: TMIQJNjb0ncHBLbYhEKfvsG3Yf9dFKgopa2j/YxIlM4= Subject key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783535E04E65EC025E345C31C6B9BF58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203691 IP: 194.180.248.0/24 IP: 2a13:ff40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:35:e0:4e:65:ec:02:5e:34:5c:31:c6:b9:bf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:4a:79:d9:f4:19:0a:57:77:0e:60:5c:c7: 45:78:b5:97:67:a4:3f:04:b9:a3:0a:5f:72:f4:78: e8:89:3a:60:53:7f:bc:0f:67:bb:e2:fc:95:f4:3a: 83:f2:da:af:77:25:6c:75:e4:06:45:5e:ff:87:a0: 0b:26:fa:58:49:74:21:14:62:c0:bc:48:b9:fc:ba: 57:f2:6e:05:d8:fd:cf:6a:af:2d:98:4f:f7:04:1e: fa:f7:77:78:3f:0d:b9:60:e8:93:58:6a:16:e7:fc: 3b:d1:99:65:42:57:4e:42:a8:61:f6:4e:a9:f6:d9: 71:bd:fd:ac:1f:78:24:c3:0b:70:4c:82:e1:56:9c: c2:71:af:72:79:84:f2:d7:f4:b4:83:03:50:02:e9: 80:19:d6:77:ed:07:8d:11:19:77:e0:c7:07:f9:9e: 5b:f3:af:16:84:ad:66:56:9e:f8:7a:b7:bd:9d:b9: eb:a0:58:ac:43:06:11:12:76:15:0b:66:15:74:cb: 50:cc:54:bb:f2:de:fb:a3:2b:60:93:93:b8:d9:6b: 68:9a:18:ab:98:85:33:11:14:67:dd:9a:46:87:13: c3:ca:f0:fd:d3:e2:5d:c8:98:62:53:fa:2c:15:79: 7a:c9:97:7d:fa:37:f8:4f:d4:09:bf:9a:f6:44:b0: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.248.0/24 IPv6: 2a13:ff40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203691 Signature Algorithm: sha256WithRSAEncryption 84:b4:a6:e2:d8:9d:ce:7d:98:27:3a:13:d1:ab:b5:a8:9d:7d: ee:09:ed:33:90:38:e0:e5:9d:af:2c:7c:66:22:5d:99:84:f0: d2:bf:e2:0e:27:46:42:c6:6d:6e:e0:81:4d:23:7d:bb:e9:91: 9c:2c:6a:c6:a7:97:9c:7f:24:41:de:b6:d3:4d:3c:6f:76:a2: 84:a8:65:4d:db:98:be:dc:f1:00:29:ee:5a:d9:44:ec:78:ad: a8:c0:b5:11:3d:79:30:1d:0a:34:94:3d:b1:19:e1:0d:ab:27: 4b:de:fb:8f:5c:e1:3d:30:6f:f2:8d:af:66:c3:48:47:a2:17: d1:e0:a4:13:50:3a:f7:b1:94:43:95:df:d5:00:8a:ce:a8:33: fb:6c:27:1f:60:8d:52:4c:96:80:18:f9:0a:00:a7:61:8f:cf: b7:77:1f:ab:d8:e8:c7:1d:d5:cd:cb:f3:f0:63:40:fe:af:50: 81:93:68:64:ee:b4:70:10:8c:ea:da:cc:1d:f1:52:b7:1e:a5: 8c:47:ec:de:a3:12:6e:45:d9:bc:52:0c:34:1f:d2:52:a9:1c: fc:0b:a9:2d:e3:06:9f:00:8d:69:b4:57:ab:df:e8:48:3b:83: 14:9b:50:57:eb:1a:27:62:59:97:fa:ab:d5:23:65:10:cb:99: 8f:57:c9:fe -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NTXgTmXsAl40XDHGub9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzhmNmM0NzRhNGE0NDE0YTljOTI3N2JlNGQ2YWFhZTJiZWRlYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4pKedn0GQpXdw5gXMdFeLWXZ6Q/ BLmjCl9y9HjoiTpgU3+8D2e74vyV9DqD8tqvdyVsdeQGRV7/h6ALJvpYSXQhFGLA vEi5/LpX8m4F2P3Paq8tmE/3BB7693d4Pw25YOiTWGoW5/w70ZllQldOQqhh9k6p 9tlxvf2sH3gkwwtwTILhVpzCca9yeYTy1/S0gwNQAumAGdZ37QeNERl34McH+Z5b 868WhK1mVp74ere9nbnroFisQwYREnYVC2YVdMtQzFS78t77oytgk5O42Wtomhir mIUzERRn3ZpGhxPDyvD90+JdyJhiU/osFXl6yZd9+jf4T9QJv5r2RLCA8QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMOPbEdKSkQUqckne+TWqq4r7epLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzhkOTlj NS1iN2M4LTQ4OTUtYWYxOC1hZTg0MDAyOGY2YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvOGQ5OWM1 LWI3YzgtNDg5NS1hZjE4LWFlODQwMDI4ZjZiMS8xL3c0OXNSMHBLUkJTcHlTZDc1 TmFxcml2dDZrcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwrT4MA0EAgACMAcDBQMqE/9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbqzANBgkqhkiG9w0BAQsFAAOCAQEAhLSm4tidzn2Y JzoT0au1qJ197gntM5A44OWdryx8ZiJdmYTw0r/iDidGQsZtbuCBTSN9u+mRnCxq xqeXnH8kQd620008b3aihKhlTduYvtzxACnuWtlE7HitqMC1ET15MB0KNJQ9sRnh DasnS977j1zhPTBv8o2vZsNIR6IX0eCkE1A697GUQ5Xf1QCKzqgz+2wnH2CNUkyW gBj5CgCnYY/Pt3cfq9joxx3Vzcvz8GNA/q9QgZNoZO60cBCM6trMHfFStx6ljEfs 3qMSbkXZvFIMNB/SUqkc/AupLeMGnwCNabRXq9/oSDuDFJtQV+saJ2JZl/qr1SNl EMuZj1fJ/g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:26 2026 by rpki-client