This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer File: wIi1a9ngFvm8Uhr03CSebRJWsd8.cer (raw, json) Hash identifier: KAegB7buWl5Bu/0aZPx/b2QYUt10tJNn0XoqFieG7NA= Subject key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15609394B30DDEB99C33DD5D26592A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15388 IP: 185.62.64.0/22 IP: 212.77.224.0/19 IP: 2a02:2800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:60:93:94:b3:0d:de:b9:9c:33:dd:5d:26:59:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:1c:46:c4:d5:e2:ea:f0:dc:2b:75:c6:86: 5f:ca:b2:57:cf:c7:1e:81:b1:46:37:03:97:b2:72: a5:f9:02:5a:99:97:2f:3d:33:f3:2b:2e:49:7f:54: 0a:e7:21:8e:8c:4b:c2:6a:9b:25:18:52:50:4c:d5: ea:e6:e0:ab:1a:f8:9b:75:30:d0:67:44:95:b2:ea: 2a:40:79:1d:b2:de:08:e6:69:45:6f:e9:60:02:4a: dc:14:80:a0:16:9a:7b:d2:4b:c5:98:7a:32:06:f1: 9f:cf:3c:3f:22:50:aa:79:76:6a:bf:61:77:66:fd: 7a:0c:d7:4a:e6:8d:55:ab:d6:51:7c:c2:94:fc:d3: c5:c4:ab:7d:af:2e:64:38:05:7c:21:0b:a9:bd:90: b9:7f:cf:3d:d7:3d:d9:69:f4:83:f1:40:fa:d2:15: f2:bf:7a:4f:de:60:52:cf:ef:fa:26:20:aa:f7:d7: 8b:a3:0e:7e:ef:fa:af:36:37:30:53:ca:6a:69:77: 30:6e:b7:26:cd:45:b0:69:fb:fe:18:5d:24:ae:95: 5e:57:d7:40:8f:c5:bf:13:7c:25:2a:1d:a9:90:7b: 2e:1b:8d:04:a9:b1:7d:6c:1b:3a:b5:7a:81:8c:41: c7:50:30:6a:4d:a3:52:e9:12:88:39:ba:37:8d:92: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.64.0/22 212.77.224.0/19 IPv6: 2a02:2800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15388 Signature Algorithm: sha256WithRSAEncryption 00:77:bd:04:4d:ff:b0:fd:ff:7d:80:c4:cc:b0:08:4c:34:c2: f1:67:3b:57:21:ef:4f:ad:4b:a1:45:8d:02:6b:c8:02:3a:94: ba:30:94:76:c1:9a:e0:3d:cb:1d:15:a0:a6:ad:40:6c:b3:64: 04:d9:a9:e1:cf:19:8d:2d:c3:22:c4:e3:a3:41:56:58:15:17: d0:82:12:44:a9:75:3a:e3:ac:26:b8:ee:13:69:94:25:f8:30: 64:48:57:4b:b5:94:50:b2:2b:d0:e6:5d:b2:07:79:35:a8:62: d2:ff:17:b0:3d:87:19:b9:a4:93:af:70:be:95:55:83:6c:5e: 03:71:a3:b1:e7:76:b4:57:1e:36:ff:24:69:cd:ef:24:b3:8a: 49:ef:7b:03:ac:56:40:cc:bf:5a:5a:94:3b:b7:38:a3:0c:cc: 2a:fb:11:c7:45:4e:c8:39:18:1d:03:17:6b:55:a7:63:b3:7c: 28:72:34:9b:af:aa:e3:5a:d7:5c:d3:a1:81:c6:88:70:32:37: f3:02:15:c2:35:2a:5e:c5:9b:cd:12:1d:44:0d:42:a7:73:08: b1:24:98:3a:73:94:06:38:6e:7f:ad:e1:f2:cf:9a:93:87:9c: fd:7c:80:a8:85:58:e3:0d:d0:57:44:a9:30:d9:04:d8:00:49: aa:3b:4c:81 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt/FWCTlLMN3rmcM91dJlkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDg4YjU2YmQ5ZTAxNmY5YmM1MjFhZjRkYzI0OWU2ZDEyNTZiMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XIcRsTV4urw3Ct1xoZfyrJXz8ce gbFGNwOXsnKl+QJamZcvPTPzKy5Jf1QK5yGOjEvCapslGFJQTNXq5uCrGvibdTDQ Z0SVsuoqQHkdst4I5mlFb+lgAkrcFICgFpp70kvFmHoyBvGfzzw/IlCqeXZqv2F3 Zv16DNdK5o1Vq9ZRfMKU/NPFxKt9ry5kOAV8IQupvZC5f8891z3ZafSD8UD60hXy v3pP3mBSz+/6JiCq99eLow5+7/qvNjcwU8pqaXcwbrcmzUWwafv+GF0krpVeV9dA j8W/E3wlKh2pkHsuG40EqbF9bBs6tXqBjEHHUDBqTaNS6RKIObo3jZJ1YQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFMCItWvZ4Bb5vFIa9Nwknm0SVrHfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2Y1YWM0 Ni00YzU5LTRiM2UtYjcxZS1iZWNmMTI4NjI0OTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZjVhYzQ2 LTRjNTktNGIzZS1iNzFlLWJlY2YxMjg2MjQ5Ny8xL3dJaTFhOW5nRnZtOFVocjAz Q1NlYlJKV3NkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuT5AAwQF1E3gMA0EAgACMAcDBQMqAigAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjwcMA0GCSqGSIb3DQEBCwUAA4IBAQAAd70E Tf+w/f99gMTMsAhMNMLxZztXIe9PrUuhRY0Ca8gCOpS6MJR2wZrgPcsdFaCmrUBs s2QE2anhzxmNLcMixOOjQVZYFRfQghJEqXU646wmuO4TaZQl+DBkSFdLtZRQsivQ 5l2yB3k1qGLS/xewPYcZuaSTr3C+lVWDbF4DcaOx53a0Vx42/yRpze8ks4pJ73sD rFZAzL9aWpQ7tzijDMwq+xHHRU7IORgdAxdrVadjs3wocjSbr6rjWtdc06GBxohw MjfzAhXCNSpexZvNEh1EDUKncwixJJg6c5QGOG5/reHyz5qTh5z9fICohVjjDdBX RKkw2QTYAEmqO0yB -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:17 2026 by rpki-client