This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer File: wKmyD2ubglk-wH4MuLuHDOEYZdw.cer (raw, json) Hash identifier: ckEbLw2a7YV+V4DAecOgGbL2Zhs/XTYE7x+Dix+4f1I= Subject key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED7D23F3DE5F6BC06C97862ADFE990 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212764 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7d:23:f3:de:5f:6b:c0:6c:97:86:2a:df:e9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:b6:87:7d:6a:7f:ee:28:c1:fa:04:b9:51: 18:bc:58:ec:df:c9:69:a2:af:3b:65:e7:e7:03:25: 66:d6:a4:f6:bd:19:87:95:f4:13:19:25:e5:30:1c: 3b:53:84:24:5f:fd:5a:06:d6:c6:a2:14:5e:5e:8e: 79:27:d6:4a:f8:e2:a8:c4:bd:fa:fd:0c:40:65:b6: 4b:fb:f1:5d:6a:15:8c:a8:da:70:38:ba:9d:32:5e: 6c:9c:7a:1c:f8:ff:d6:6e:1d:dc:10:93:1e:c3:2c: eb:c8:27:71:05:5b:65:4c:2c:57:a8:51:c9:e3:0e: 81:d9:81:3a:b7:e3:52:68:0f:4c:85:18:5c:23:a9: 67:1a:6c:2f:71:fa:fb:89:a6:e0:07:7f:3e:bc:0a: c6:38:fc:07:2f:06:78:20:81:2a:ab:70:95:1f:d0: 5f:67:f6:dc:76:92:ee:2e:a8:f7:6b:31:bb:35:ba: 71:28:8c:57:7c:4b:29:96:55:64:9d:0e:60:a2:c5: b3:f8:70:4d:d7:b2:46:67:69:5e:c2:cf:24:7d:d2: 51:e1:57:18:34:14:f6:93:e0:d0:4e:4e:81:04:e7: f7:70:2c:3d:ff:5c:e8:ff:d7:f6:9d:61:79:a1:8d: b8:b4:f4:a5:13:e8:4b:dc:66:52:1d:35:c2:8c:63: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212764 Signature Algorithm: sha256WithRSAEncryption 60:b5:ea:2e:1f:ab:62:d4:90:ab:9a:35:d7:aa:ea:0f:bc:34: 2e:a1:22:78:d4:a6:fe:78:c2:85:f5:6b:1d:ef:5f:be:02:77: 6d:16:ad:90:00:77:ae:69:e6:b5:c4:d7:51:e7:d5:6a:12:13: be:27:42:f1:5e:74:73:89:e4:80:b7:da:1c:46:04:9d:80:27: 4b:49:00:13:d8:a5:6a:63:31:05:bf:ea:be:52:fd:aa:eb:14: 82:d1:40:4c:4e:88:a0:8c:c6:3c:b3:83:70:5f:a6:58:ae:44: 56:ba:f1:77:45:ab:df:cc:39:41:dc:a1:58:a6:3e:46:03:26: 8a:ee:a3:4a:e6:9c:9d:24:6d:5e:ad:36:d0:31:1c:f0:01:6b: 0a:4c:9a:fa:52:f7:9c:94:ef:9b:3f:20:1c:60:f3:c1:84:9d: ab:c3:3a:c4:a1:3d:4c:8c:ed:81:bf:d8:9e:d0:1e:db:44:06: 12:1b:99:5f:d3:44:d9:a8:d3:bc:5f:1a:cd:be:63:84:d3:5a: 05:c8:4f:be:76:d9:9a:cd:c2:0c:9d:bc:b3:13:34:2e:10:23: fc:fc:f0:d6:ce:60:fe:35:95:67:83:82:68:85:41:e5:66:d6: 5b:48:86:70:65:a8:04:35:42:69:ea:0e:7e:4b:96:dd:1a:2f: 10:aa:b6:1c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87X0j895fa8Bsl4Yq3+mQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGE5YjIwZjZiOWI4MjU5M2VjMDdlMGNiOGJiODcwY2UxMTg2NWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOq2h31qf+4owfoEuVEYvFjs38lp oq87ZefnAyVm1qT2vRmHlfQTGSXlMBw7U4QkX/1aBtbGohReXo55J9ZK+OKoxL36 /QxAZbZL+/FdahWMqNpwOLqdMl5snHoc+P/Wbh3cEJMewyzryCdxBVtlTCxXqFHJ 4w6B2YE6t+NSaA9MhRhcI6lnGmwvcfr7iabgB38+vArGOPwHLwZ4IIEqq3CVH9Bf Z/bcdpLuLqj3azG7NbpxKIxXfEspllVknQ5gosWz+HBN17JGZ2lews8kfdJR4VcY NBT2k+DQTk6BBOf3cCw9/1zo/9f2nWF5oY24tPSlE+hL3GZSHTXCjGMydQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMCpsg9rm4JZPsB+DLi7hwzhGGXcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2I0Y2Q2 ZS0zZThjLTQ0MDItYjJjMS1iMWExZWRkYTc3Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvYjRjZDZl LTNlOGMtNDQwMi1iMmMxLWIxYTFlZGRhNzdjZC8xL3dLbXlEMnViZ2xrLXdINE11 THVIRE9FWVpkdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/HDANBgkqhkiG9w0BAQsFAAOCAQEAYLXqLh+rYtSQ q5o116rqD7w0LqEieNSm/njChfVrHe9fvgJ3bRatkAB3rmnmtcTXUefVahITvidC 8V50c4nkgLfaHEYEnYAnS0kAE9ilamMxBb/qvlL9qusUgtFATE6IoIzGPLODcF+m WK5EVrrxd0Wr38w5QdyhWKY+RgMmiu6jSuacnSRtXq020DEc8AFrCkya+lL3nJTv mz8gHGDzwYSdq8M6xKE9TIztgb/YntAe20QGEhuZX9NE2ajTvF8azb5jhNNaBchP vnbZms3CDJ28sxM0LhAj/Pzw1s5g/jWVZ4OCaIVB5WbWW0iGcGWoBDVCaeoOfkuW 3RovEKq2HA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:38 2026 by rpki-client