This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer File: w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer (raw, json) Hash identifier: fxIHFXu0ACLKStw1tJDWgKOEV77sZ3qxjjzyz678tz4= Subject key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5A9471B715BCC4B1080D089A3E9BB7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15611 IP: 62.60.128.0/17 IP: 185.83.76.0/22 IP: 213.176.0.0/17 IP: 2001:790::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:94:71:b7:15:bc:c4:b1:08:0d:08:9a:3e:9b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:34:b1:8f:26:2b:ee:de:46:00:11:65:de: 63:92:90:5a:8c:98:06:0d:d0:46:9d:ae:4c:83:04: 4c:28:93:a4:c6:dc:b1:c6:6c:4d:2e:69:eb:e4:84: 9f:63:95:71:22:02:42:f6:88:cb:19:8a:db:a8:40: 10:3f:71:2e:f3:26:82:8d:0a:45:5b:ca:80:72:53: 7d:71:9b:f4:38:71:53:be:19:9a:e5:9b:9d:07:5f: 36:1c:95:b5:89:3e:fc:db:29:b9:e3:28:b6:5e:a3: e4:ed:81:43:fe:c7:56:56:34:51:e4:1f:4d:39:7e: 6f:85:98:65:ab:5e:38:e3:04:b6:81:27:77:b7:32: 37:e2:63:18:08:88:aa:8a:01:c5:57:9b:70:b6:76: 14:22:15:e2:11:89:71:29:0a:93:02:a8:06:8e:c5: 64:75:c6:d4:65:53:7a:26:9b:42:ac:0b:b8:74:da: 35:0f:92:37:e7:87:58:34:a0:dc:1d:b6:c6:a0:35: df:01:d0:73:8f:2c:82:df:3e:a0:ae:f0:dd:3a:df: a4:d7:15:28:3a:1a:8d:78:89:0d:73:6b:55:7e:c3: 77:14:41:31:b2:81:c1:cd:da:f9:75:01:c9:41:b4: 1d:71:7c:0a:32:7c:13:f1:f1:8b:c6:31:d1:87:10: 38:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.128.0/17 185.83.76.0/22 213.176.0.0/17 IPv6: 2001:790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15611 Signature Algorithm: sha256WithRSAEncryption 6e:1d:86:4d:56:bf:04:65:45:5b:49:0e:8a:f8:bf:a6:e2:06: 30:84:ca:92:97:52:8c:e2:12:8b:8f:42:f6:32:9f:32:f7:d5: d6:4d:bb:be:d3:7f:2f:df:ea:c5:1e:48:4f:23:93:2d:88:5c: bf:06:95:6a:a9:70:31:b4:79:ce:72:c5:9f:0a:9a:ad:c8:fa: 69:05:8b:db:c2:b0:44:89:70:ea:a8:c2:17:5c:68:cb:31:4f: 60:60:fb:b7:df:47:54:f8:a4:ff:53:ad:fb:0f:24:c4:b7:ad: 37:ec:49:78:fe:39:80:d3:10:50:47:16:2f:58:c5:56:6b:3b: 5d:21:e3:6b:f8:91:9e:cf:17:f8:e8:88:3d:25:f7:4b:a2:87: f9:a8:68:53:9d:e8:7f:c3:04:72:79:fc:89:4c:3d:ce:34:40: 5c:8f:c7:b5:5b:36:f1:0c:ec:28:dd:37:89:de:c1:77:dd:21: e0:7b:f9:33:d7:95:01:a7:2d:8b:23:78:17:7e:74:dc:95:1b: df:ee:c4:58:c0:0e:06:2f:de:b1:b8:35:3b:73:2e:9e:8c:73: 40:05:f8:27:08:d9:d8:ab:bf:cd:93:99:09:cb:d7:18:3a:a7: b8:88:27:f4:24:6b:97:14:36:9c:91:90:75:40:05:68:5f:ad: 3e:17:c5:93 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt9WpRxtxW8xLEIDQiaPpu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2MxODUyN2UzYTIwNmFmMjg0MjAyOGQ5NWFlYzQxMzM4ZThkYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7M0sY8mK+7eRgARZd5jkpBajJgG DdBGna5MgwRMKJOkxtyxxmxNLmnr5ISfY5VxIgJC9ojLGYrbqEAQP3Eu8yaCjQpF W8qAclN9cZv0OHFTvhma5ZudB182HJW1iT782ym54yi2XqPk7YFD/sdWVjRR5B9N OX5vhZhlq1444wS2gSd3tzI34mMYCIiqigHFV5twtnYUIhXiEYlxKQqTAqgGjsVk dcbUZVN6JptCrAu4dNo1D5I354dYNKDcHbbGoDXfAdBzjyyC3z6grvDdOt+k1xUo OhqNeIkNc2tVfsN3FEExsoHBzdr5dQHJQbQdcXwKMnwT8fGLxjHRhxA4MwIDAQAB o4ICujCCArYwHQYDVR0OBBYEFMPBhSfjogavKEICjZWuxBM46Nr4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3LzEzMzlk Zi04ZTA2LTQxZGUtOTRmMy0wY2JhMzNlZmM1YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvMTMzOWRm LThlMDYtNDFkZS05NGYzLTBjYmEzM2VmYzViYi8xL3c4R0ZKLU9pQnE4b1FnS05s YTdFRXpqbzJ2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQHPjyAAwQCuVNMAwQH1bAAMA0EAgACMAcDBQAg AQeQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjz7MA0GCSqGSIb3DQEBCwUAA4IB AQBuHYZNVr8EZUVbSQ6K+L+m4gYwhMqSl1KM4hKLj0L2Mp8y99XWTbu+038v3+rF HkhPI5MtiFy/BpVqqXAxtHnOcsWfCpqtyPppBYvbwrBEiXDqqMIXXGjLMU9gYPu3 30dU+KT/U637DyTEt6037El4/jmA0xBQRxYvWMVWaztdIeNr+JGezxf46Ig9JfdL oof5qGhTneh/wwRyefyJTD3ONEBcj8e1WzbxDOwo3TeJ3sF33SHge/kz15UBpy2L I3gXfnTclRvf7sRYwA4GL96xuDU7cy6ejHNABfgnCNnYq7/Nk5kJy9cYOqe4iCf0 JGuXFDackZB1QAVoX60+F8WT -----END CERTIFICATE-----Generated at Wed Jan 21 09:12:08 2026 by rpki-client