This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer File: wDJJW4nc6BsMf4ht38NgS94G2KY.cer (raw, json) Hash identifier: O2EA2VFEQiSqCaPo85ccqiYhzucNrkXjgdTG30aL8tY= Subject key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F4135BCADDF567DAAC0205C059EDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41785 IP: 193.161.140.0/22 IP: 2a0c:9f40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:41:35:bc:ad:df:56:7d:aa:c0:20:5c:05:9e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:37:82:49:4a:be:86:9d:28:c5:e0:91:65: 86:31:64:2c:f0:e0:48:f2:6c:46:8e:1c:53:62:85: 87:73:c9:c1:b9:94:dd:ca:20:fb:24:20:89:c1:7e: 5f:b1:1e:7c:a9:92:86:b2:fa:50:46:04:5e:0d:e4: eb:eb:07:5d:fc:d6:e0:7c:08:d0:22:5d:90:dd:06: 35:e4:f8:51:cd:62:e2:3e:44:87:e0:85:07:77:a6: 7a:23:a4:59:83:8b:6b:bc:4e:2b:2a:ba:15:03:60: d4:99:26:9e:de:ec:9f:0c:f2:6b:57:7a:14:72:56: 47:58:fe:73:60:b4:37:5c:e9:5b:11:23:43:ff:ae: 82:22:3c:c2:f4:7c:70:f9:82:93:19:ed:c2:44:1c: 1a:b2:fb:69:5a:9c:41:5f:e1:10:60:85:06:df:d7: 10:a5:b6:3e:02:6c:a3:ac:4f:20:c1:d3:d5:6c:84: 25:54:6b:a4:9b:7b:45:b6:47:12:e5:63:3b:8a:ea: 18:4b:c8:33:8f:ff:d7:62:97:63:ef:8e:f8:de:1f: dc:87:de:a1:70:17:e0:53:71:41:74:7a:12:cc:9c: 67:9a:80:8d:07:26:aa:c7:8d:cb:da:00:86:8e:ea: c0:6c:aa:d2:a1:73:58:b7:e2:02:5d:da:a0:9e:eb: da:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.140.0/22 IPv6: 2a0c:9f40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41785 Signature Algorithm: sha256WithRSAEncryption 8c:f5:58:15:7c:90:65:b7:b4:e4:32:65:63:37:6f:49:2f:68: bb:4a:66:06:9b:82:48:55:cc:49:69:3b:90:27:f9:bd:04:de: 54:9c:c9:19:00:64:ab:0c:62:04:81:42:62:dc:34:20:38:ff: ba:c3:21:de:38:56:f4:72:29:f2:37:70:d4:eb:5f:0f:e0:56: 1b:22:9f:3d:76:67:9d:df:4b:d0:69:93:28:ad:ef:8f:6f:54: 38:47:5f:f7:bf:59:b4:53:b2:03:3c:4e:be:23:ac:be:b6:c7: 6d:fc:37:c2:4f:17:71:37:23:3b:a5:30:72:7c:cb:50:2c:db: 08:71:a4:40:37:cf:15:62:01:43:60:24:4b:49:da:e8:c9:40: aa:04:c0:14:0f:a0:34:d8:e8:1a:f2:89:e7:b8:22:c3:45:9e: 89:da:f8:f0:b0:9a:e9:de:b6:7b:d8:6f:97:a0:ae:fd:2f:90: ca:e2:2d:93:cf:b5:c0:a4:2e:80:db:6d:c6:ee:59:14:1c:7f: 71:c0:58:7b:ee:49:07:cf:77:34:ca:b9:b2:a1:11:8d:79:1c: 7b:77:f2:4d:8d:18:f2:ed:bb:97:8f:e5:4a:12:3f:b4:b2:13: 89:d0:25:53:98:24:42:61:de:82:10:ca:e9:72:67:08:80:5f: 5c:94:4a:cb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f0E1vK3fVn2qwCBcBZ7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDMyNDk1Yjg5ZGNlODFiMGM3Zjg4NmRkZmMzNjA0YmRlMDZkOGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoU3gklKvoadKMXgkWWGMWQs8OBI 8mxGjhxTYoWHc8nBuZTdyiD7JCCJwX5fsR58qZKGsvpQRgReDeTr6wdd/NbgfAjQ Il2Q3QY15PhRzWLiPkSH4IUHd6Z6I6RZg4trvE4rKroVA2DUmSae3uyfDPJrV3oU clZHWP5zYLQ3XOlbESND/66CIjzC9Hxw+YKTGe3CRBwasvtpWpxBX+EQYIUG39cQ pbY+AmyjrE8gwdPVbIQlVGukm3tFtkcS5WM7iuoYS8gzj//XYpdj74743h/ch96h cBfgU3FBdHoSzJxnmoCNByaqx43L2gCGjurAbKrSoXNYt+ICXdqgnuva1QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMAySVuJ3OgbDH+Ibd/DYEveBtimMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzEyZGQy Yy00ZDBjLTQyMGEtOThhNS0wMmU2NDIyYzQxODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMTJkZDJj LTRkMGMtNDIwYS05OGE1LTAyZTY0MjJjNDE4MS8xL3dESkpXNG5jNkJzTWY0aHQz OE5nUzk0RzJLWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwaGMMA0EAgACMAcDBQMqDJ9AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCjOTANBgkqhkiG9w0BAQsFAAOCAQEAjPVYFXyQZbe0 5DJlYzdvSS9ou0pmBpuCSFXMSWk7kCf5vQTeVJzJGQBkqwxiBIFCYtw0IDj/usMh 3jhW9HIp8jdw1OtfD+BWGyKfPXZnnd9L0GmTKK3vj29UOEdf979ZtFOyAzxOviOs vrbHbfw3wk8XcTcjO6UwcnzLUCzbCHGkQDfPFWIBQ2AkS0na6MlAqgTAFA+gNNjo GvKJ57giw0Weidr48LCa6d62e9hvl6Cu/S+QyuItk8+1wKQugNttxu5ZFBx/ccBY e+5JB893NMq5sqERjXkce3fyTY0Y8u27l4/lShI/tLITidAlU5gkQmHeghDK6XJn CIBfXJRKyw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:58 2026 by rpki-client