This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer File: w8YbUevIQYDwprIy6H351hyQ-qs.cer (raw, json) Hash identifier: DAJhxgOvASuWEG1pUU/tijWGLmVUG/lgqtl7aRw8wag= Subject key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA62234ED6075F696075E165C9C242A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44279 AS: 52142 IP: 46.174.176.0/21 IP: 91.210.128.0/22 IP: 185.16.144.0/22 IP: 195.69.80.0/22 IP: 2a03:c940::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:22:34:ed:60:75:f6:96:07:5e:16:5c:9c:24:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:39:35:9a:53:f0:a4:dc:53:e8:4b:83:38: 54:d1:c3:41:9f:b0:3a:3c:1d:e8:a3:1d:f2:da:2f: bc:c7:74:21:3d:d3:ef:82:ca:e5:07:7d:6c:34:aa: c3:9d:c4:69:bc:79:c2:9b:c8:93:fd:9b:55:17:42: 77:99:35:c6:fa:52:2e:62:d8:1d:f6:b4:89:26:0d: 91:53:d1:b3:e1:d3:53:6f:5f:57:09:30:ed:67:f0: bb:69:60:1d:fc:bf:bc:1d:e6:aa:02:9c:91:1b:c3: 02:59:e5:1d:63:d7:43:32:10:2d:de:0c:59:88:09: fa:9e:e7:3b:6b:a2:88:bf:32:f8:c6:53:f6:67:2f: 56:a2:23:56:f3:18:d8:53:2d:12:4e:27:6d:03:fd: 5d:7e:c5:19:10:c3:36:cb:a5:9e:92:af:08:84:76: d4:36:e0:f6:a0:b0:e7:0b:3e:08:5f:0f:92:b5:d1: e9:00:b9:41:ae:b9:ed:13:ac:83:f2:47:7d:66:f7: 36:0b:4e:b3:5b:dc:51:6c:6b:dc:50:71:18:50:7c: be:2e:28:84:08:f1:6c:99:57:f9:e3:e4:8b:cb:60: 3b:93:78:1c:cf:3f:13:ce:a0:a6:ee:63:3c:cc:d0: fd:05:7c:22:0d:53:46:81:15:6d:2f:95:2a:64:8e: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.176.0/21 91.210.128.0/22 185.16.144.0/22 195.69.80.0/22 IPv6: 2a03:c940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44279 52142 Signature Algorithm: sha256WithRSAEncryption 3b:e2:4f:78:8a:af:8f:72:fc:a5:a1:83:93:c2:73:66:a5:09: 79:bd:60:a9:be:8c:0c:f9:7c:3b:45:47:bc:e3:95:ab:6c:fe: 21:9e:aa:83:6f:9c:f9:af:b7:03:5e:6e:18:63:26:cc:36:57: d0:be:1b:c2:9f:6d:79:e7:9c:f8:96:76:ca:db:27:2a:7e:b8: 89:4e:75:bc:58:f1:49:25:69:2f:a6:4d:73:83:62:56:f1:90: e3:77:29:d7:a4:31:c7:5c:da:58:c6:45:36:da:a9:59:7b:14: 29:63:d0:8d:25:45:8b:5e:4f:4a:3b:8a:7c:40:40:d5:cf:2a: 4b:7d:22:8d:65:96:89:c3:9b:5a:da:e0:11:79:72:51:d9:5a: fe:14:f3:f0:aa:76:b9:fe:41:81:4c:80:1d:b8:4e:15:4f:ff: 85:4a:11:77:17:e5:31:6f:b8:0b:72:cc:7a:74:00:51:9f:d6: 0c:e0:e0:3d:65:31:dd:e6:8a:11:6c:e1:b5:ec:ba:cd:26:12: a4:71:d3:b6:4b:8c:6c:fe:c0:ff:fc:d8:5b:b1:4f:a9:9b:18: 64:1d:c3:ab:5a:52:87:a0:94:c3:01:9a:c5:cd:dd:ee:78:c8: e7:c2:6a:d9:30:08:bf:88:31:97:63:4f:18:82:e0:e3:61:00: d6:67:46:4f -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt+piI07WB19pYHXhZcnCQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2M2MWI1MWViYzg0MTgwZjBhNmIyMzJlODdkZjlkNjFjOTBmYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPk5NZpT8KTcU+hLgzhU0cNBn7A6 PB3oox3y2i+8x3QhPdPvgsrlB31sNKrDncRpvHnCm8iT/ZtVF0J3mTXG+lIuYtgd 9rSJJg2RU9Gz4dNTb19XCTDtZ/C7aWAd/L+8HeaqApyRG8MCWeUdY9dDMhAt3gxZ iAn6nuc7a6KIvzL4xlP2Zy9WoiNW8xjYUy0STidtA/1dfsUZEMM2y6Wekq8IhHbU NuD2oLDnCz4IXw+StdHpALlBrrntE6yD8kd9Zvc2C06zW9xRbGvcUHEYUHy+LiiE CPFsmVf54+SLy2A7k3gczz8TzqCm7mM8zND9BXwiDVNGgRVtL5UqZI7d0QIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFMPGG1HryEGA8KayMuh9+dYckPqrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzdhYWRh Yi05NTlhLTQ2NjMtYjkzNS04Zjk4MjczNDQ3OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvN2FhZGFi LTk1OWEtNDY2My1iOTM1LThmOTgyNzM0NDc5MC8xL3c4WWJVZXZJUVlEd3BySXk2 SDM1MWh5US1xcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDLq6wAwQCW9KAAwQCuRCQAwQCw0VQMA0EAgAC MAcDBQAqA8lAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCs9wIDAMuuMA0GCSqG SIb3DQEBCwUAA4IBAQA74k94iq+PcvyloYOTwnNmpQl5vWCpvowM+Xw7RUe845Wr bP4hnqqDb5z5r7cDXm4YYybMNlfQvhvCn21555z4lnbK2ycqfriJTnW8WPFJJWkv pk1zg2JW8ZDjdynXpDHHXNpYxkU22qlZexQpY9CNJUWLXk9KO4p8QEDVzypLfSKN ZZaJw5ta2uAReXJR2Vr+FPPwqna5/kGBTIAduE4VT/+FShF3F+Uxb7gLcsx6dABR n9YM4OA9ZTHd5ooRbOG17LrNJhKkcdO2S4xs/sD//NhbsU+pmxhkHcOrWlKHoJTD AZrFzd3ueMjnwmrZMAi/iDGXY08YguDjYQDWZ0ZP -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:24 2026 by rpki-client