This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer File: wBZuIWw2DDbg91sNORI9utQiZOk.cer (raw, json) Hash identifier: V3yTNNAPuNwU1roiYJdZFTO/NjrA6ob2DUlaRgiuwOo= Subject key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78350D78887F02F65654FEB008AFD2A1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209075 IP: 2001:678:a5c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0d:78:88:7f:02:f6:56:54:fe:b0:08:af:d2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0166e216c360c36e0f75b0d39123dbad42264e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2e:00:a1:bd:9a:e2:8d:05:9a:98:28:01:11: 8f:20:07:81:97:33:fd:e1:0e:de:f0:8f:54:37:f8: 9d:56:0a:a0:24:7c:ce:48:86:d3:66:92:72:df:7e: 48:c0:e0:73:48:a6:5a:18:c3:5b:41:dd:fb:0b:ed: fe:93:c5:27:de:6b:f1:b0:9d:7d:31:bb:d4:9c:a6: 71:22:99:c7:90:47:30:61:51:92:05:72:1d:d6:c1: 2d:41:44:83:ff:90:76:8d:b0:21:68:66:2e:12:77: 31:5f:76:d4:8e:84:08:34:09:b7:4e:f8:2f:20:49: 73:44:1a:d6:05:22:e7:0d:0e:f2:78:61:ae:50:9b: 1a:3c:55:d2:28:ff:b7:71:5f:da:9b:e3:2c:a3:43: f9:be:af:87:60:25:71:a2:65:73:41:b0:cf:53:09: 4b:48:e8:f6:1e:cd:ad:08:84:47:d7:34:59:ce:99: 6e:d7:5c:12:5a:79:52:b4:e3:7c:3c:57:76:62:54: fd:dd:ea:67:28:ef:20:47:a8:c8:a3:2c:e3:91:bb: a5:48:f3:f0:42:cc:bf:c9:d9:2a:bf:47:fa:b4:3f: e2:6d:a9:59:dd:4b:0b:5c:6e:6c:d8:58:58:d0:92: 69:1a:79:33:a0:e5:7a:17:46:d0:68:9d:de:f4:85: 92:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:a5c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209075 Signature Algorithm: sha256WithRSAEncryption 39:92:dd:3d:87:8d:fe:3d:04:a5:b0:e0:fb:90:ed:9b:e3:25: 58:d6:d0:ab:ec:f2:d7:f7:8e:a2:8b:0c:37:7a:b7:e2:63:e4: 11:2e:a1:36:75:da:44:71:4b:fc:7f:4c:80:27:17:e2:20:9d: a1:65:c2:a4:3f:40:fc:e3:e9:14:f3:1a:a0:6b:8b:3d:ea:ea: 7e:96:fd:28:e7:2d:89:82:65:85:ee:03:bd:be:40:0d:46:a8: d3:99:71:a8:bc:40:ac:7d:5d:bb:06:52:5c:50:cd:ef:89:06: 36:ee:69:92:67:08:28:bf:73:32:f3:2a:11:64:85:2d:fe:9f: 28:9c:27:3d:7a:9d:04:83:75:68:8a:7b:15:2b:86:d1:8e:2b: d8:18:ed:56:b4:51:e9:e0:28:3c:e4:ac:e7:b8:bf:97:2b:31: fb:c1:7e:f8:84:2e:43:26:5d:78:a5:c7:85:68:98:7c:97:25: 49:3b:4f:4c:ea:23:ee:a0:60:13:b1:6e:87:56:d3:41:10:d9: f7:93:2a:21:47:7a:26:b9:10:79:8b:ac:13:08:1c:3d:31:a8: c0:d8:f3:92:60:68:bb:91:c0:0e:66:ee:68:69:01:d4:75:ec: 01:e7:5e:40:5d:60:e7:ed:3d:33:97:33:fb:03:bb:e6:80:29: d2:33:1b:ff -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4NQ14iH8C9lZU/rAIr9KhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDE2NmUyMTZjMzYwYzM2ZTBmNzViMGQzOTEyM2RiYWQ0MjI2NGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy4Aob2a4o0FmpgoARGPIAeBlzP9 4Q7e8I9UN/idVgqgJHzOSIbTZpJy335IwOBzSKZaGMNbQd37C+3+k8Un3mvxsJ19 MbvUnKZxIpnHkEcwYVGSBXId1sEtQUSD/5B2jbAhaGYuEncxX3bUjoQINAm3Tvgv IElzRBrWBSLnDQ7yeGGuUJsaPFXSKP+3cV/am+Mso0P5vq+HYCVxomVzQbDPUwlL SOj2Hs2tCIRH1zRZzplu11wSWnlStON8PFd2YlT93epnKO8gR6jIoyzjkbulSPPw Qsy/ydkqv0f6tD/ibalZ3UsLXG5s2FhY0JJpGnkzoOV6F0bQaJ3e9IWSSQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMAWbiFsNgw24PdbDTkSPbrUImTpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2JiMTli Yy04ZGExLTQ3MjktODY4Ni1mY2NlMTQ3YzMyN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvYmIxOWJj LThkYTEtNDcyOS04Njg2LWZjY2UxNDdjMzI3YS8xL3dCWnVJV3cyRERiZzkxc05P Ukk5dXRRaVpPay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeApcMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMwszANBgkqhkiG9w0BAQsFAAOCAQEAOZLdPYeN/j0EpbDg+5Dtm+MlWNbQ q+zy1/eOoosMN3q34mPkES6hNnXaRHFL/H9MgCcX4iCdoWXCpD9A/OPpFPMaoGuL Perqfpb9KOctiYJlhe4Dvb5ADUao05lxqLxArH1duwZSXFDN74kGNu5pkmcIKL9z MvMqEWSFLf6fKJwnPXqdBIN1aIp7FSuG0Y4r2BjtVrRR6eAoPOSs57i/lysx+8F+ +IQuQyZdeKXHhWiYfJclSTtPTOoj7qBgE7Fuh1bTQRDZ95MqIUd6JrkQeYusEwgc PTGowNjzkmBou5HADmbuaGkB1HXsAedeQF1g5+09M5cz+wO75oAp0jMb/w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:49 2026 by rpki-client