This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer File: wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer (raw, json) Hash identifier: 6h2esUwcJSHbjUHaLIiFcywNOUKtvGFFRRwOuIeFeWc= Subject key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B86FD718791759680772F42A887C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197293 IP: 46.31.248.0/21 IP: 178.248.144.0/21 IP: 185.15.160.0/22 IP: 2a03:c1c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:86:fd:71:87:91:75:96:80:77:2f:42:a8:87:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c013d0505d07aa10d9117ac2fd56266d4890518f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:e7:fb:41:09:3b:79:36:e9:da:94:c4:d2: a5:74:70:01:1d:58:58:10:35:d4:f3:8b:02:20:2c: 74:5f:ba:d0:66:8f:1f:c0:96:91:c4:d1:6f:9d:13: f3:d2:8f:41:07:98:5a:76:dd:fb:0b:16:a3:a1:f8: 25:81:40:42:c2:05:8a:53:57:32:33:c1:ea:62:4e: 96:75:c2:16:a1:42:fa:ba:26:a6:15:91:5c:e3:eb: 97:fa:86:7d:57:47:73:84:50:11:d5:72:a4:19:e4: c2:ca:e6:3a:31:65:49:8c:ed:c4:b3:55:c5:55:26: 5f:fc:56:21:9a:64:2d:bc:1b:36:66:13:28:c3:f5: c0:72:29:fe:cb:41:c5:f8:43:05:32:9e:9f:f4:6a: de:8a:3d:b2:56:5b:08:d7:7f:27:98:6a:09:68:3b: 5c:78:86:63:74:32:84:49:dc:a1:ce:0f:e0:d4:8f: 78:d3:4d:35:ca:45:b6:6c:96:f5:2a:f5:31:61:44: ff:85:a3:3f:24:37:76:73:e3:cd:3c:e0:51:ec:ca: de:f9:40:00:68:38:82:7b:3f:8d:3b:49:e9:a5:d8: f3:d3:de:c5:c6:ab:33:a6:22:02:cc:a7:ed:21:27: 04:4b:a1:5c:18:c2:35:bd:3f:0e:14:e0:3b:b5:02: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.248.0/21 178.248.144.0/21 185.15.160.0/22 IPv6: 2a03:c1c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197293 Signature Algorithm: sha256WithRSAEncryption 87:12:94:95:85:50:58:2c:02:c1:01:e4:6f:4a:db:b6:88:01: 54:22:eb:1c:6b:d0:39:18:69:78:b1:02:09:0d:b0:e0:e8:4f: 1c:14:92:c6:84:da:6a:d2:b9:72:62:7c:b8:c9:e1:a7:1b:5f: d2:31:39:4d:39:77:5e:57:bc:ac:74:b4:49:bc:ff:8a:94:3b: ee:f2:8b:f8:9a:60:8b:74:64:f9:8c:ae:01:3f:8f:31:50:0d: 99:3e:22:d7:c3:9f:4c:ab:fc:db:29:df:99:3d:0a:5b:9f:e3: 0a:78:ba:27:2f:b0:67:c3:c1:73:df:56:d8:99:1d:c8:87:0a: 80:4c:aa:07:3e:0e:f8:38:85:e7:d1:44:e4:f6:c4:24:b9:43: 6c:70:6b:ed:cf:10:5c:7f:13:70:65:63:d6:f0:86:1a:53:ca: e7:35:b0:58:a5:3f:08:00:96:95:ee:78:1e:89:91:0a:2f:10: 2f:31:b5:f1:56:74:b7:1b:b3:be:11:fe:48:7a:a5:ad:33:8d: ba:c2:40:8f:6a:36:25:b2:f9:91:52:bb:25:f7:27:2c:e8:93: 1c:a5:0d:a9:35:a7:bc:1f:3c:da:55:70:fd:3c:22:b2:c8:98: 59:8c:22:09:b8:b4:4d:9d:d1:6c:b3:a0:d6:96:b6:81:78:9a: d4:14:f5:80 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt6W4b9cYeRdZaAdy9CqIfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDEzZDA1MDVkMDdhYTEwZDkxMTdhYzJmZDU2MjY2ZDQ4OTA1MThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTXn+0EJO3k26dqUxNKldHABHVhY EDXU84sCICx0X7rQZo8fwJaRxNFvnRPz0o9BB5hadt37CxajofglgUBCwgWKU1cy M8HqYk6WdcIWoUL6uiamFZFc4+uX+oZ9V0dzhFAR1XKkGeTCyuY6MWVJjO3Es1XF VSZf/FYhmmQtvBs2ZhMow/XAcin+y0HF+EMFMp6f9Greij2yVlsI138nmGoJaDtc eIZjdDKESdyhzg/g1I940001ykW2bJb1KvUxYUT/haM/JDd2c+PNPOBR7Mre+UAA aDiCez+NO0nppdjz097FxqszpiICzKftIScES6FcGMI1vT8OFOA7tQKXtwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFMAT0FBdB6oQ2RF6wv1WJm1IkFGPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzE5ODM5 Ni1mNDhlLTRhMmMtYmE1YS02ZDIxMGZkNDJkNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMTk4Mzk2 LWY0OGUtNGEyYy1iYTVhLTZkMjEwZmQ0MmQ3Ny8xL3dCUFFVRjBIcWhEWkVYckNf VlltYlVpUVVZOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDLh/4AwQDsviQAwQCuQ+gMA0EAgACMAcDBQAq A8HAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCrTANBgkqhkiG9w0BAQsFAAOC AQEAhxKUlYVQWCwCwQHkb0rbtogBVCLrHGvQORhpeLECCQ2w4OhPHBSSxoTaatK5 cmJ8uMnhpxtf0jE5TTl3Xle8rHS0Sbz/ipQ77vKL+Jpgi3Rk+YyuAT+PMVANmT4i 18OfTKv82ynfmT0KW5/jCni6Jy+wZ8PBc99W2JkdyIcKgEyqBz4O+DiF59FE5PbE JLlDbHBr7c8QXH8TcGVj1vCGGlPK5zWwWKU/CACWle54HomRCi8QLzG18VZ0txuz vhH+SHqlrTONusJAj2o2JbL5kVK7JfcnLOiTHKUNqTWnvB882lVw/TwissiYWYwi Cbi0TZ3RbLOg1pa2gXia1BT1gA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:36 2026 by rpki-client