This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer File: wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer (raw, json) Hash identifier: hSwQC0UUl16v8ZVUsQh9nzu5le9OKUNHVn26sUflTyk= Subject key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB149B775202DE788065BDA083FB44 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208175 IP: 185.245.28.0/22 IP: 2a09:1500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:14:9b:77:52:02:de:78:80:65:bd:a0:83:fb:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:5a:7b:67:14:81:b6:f1:db:1c:86:0a:75: 35:a9:d2:b8:75:3e:01:ee:66:21:b0:ca:5b:e1:19: f0:ae:b3:88:79:1f:a7:e3:e4:ee:c9:53:ee:75:89: 2d:ad:5a:95:c7:3f:82:8a:72:c2:a8:5f:5b:0b:53: c1:74:25:db:35:c4:91:b9:e8:a1:0b:21:08:06:ae: a4:27:16:9c:0c:7b:5d:cc:89:84:98:ea:5f:81:1c: 7d:01:24:f3:e7:e3:dc:e2:81:6d:6b:e1:a0:fe:f5: 01:fe:e6:81:15:c2:08:0e:d1:22:49:8a:fb:c9:27: 20:c3:30:d3:4f:04:f8:eb:34:57:34:b7:f8:54:5c: 97:77:08:e1:be:de:ad:ee:f2:04:a2:c7:ad:ca:46: 0b:02:3c:d7:d3:e4:a2:cb:92:f8:ce:9c:ef:75:fe: 53:14:81:2c:a7:f4:8e:bf:61:49:1c:6a:b1:5f:c5: 33:ab:a7:b8:3c:d5:af:16:ba:0f:f2:82:65:90:32: 3a:e2:41:f8:f1:08:07:c2:92:3f:6f:f7:b1:22:a6: c9:63:9e:aa:16:c8:7d:af:ee:ce:eb:19:42:4a:7f: 7b:0b:e4:a6:91:9a:aa:29:1c:bf:d1:47:5c:db:44: e0:4f:a9:e0:f0:c4:ad:83:fb:d7:a0:14:21:5b:50: 69:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.28.0/22 IPv6: 2a09:1500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208175 Signature Algorithm: sha256WithRSAEncryption 87:67:90:15:ec:6a:94:35:9c:fa:25:11:54:e7:42:5b:2e:44: 38:d2:a6:cb:31:cb:83:fc:a4:f5:f3:06:89:2c:92:53:e1:39: d7:e2:85:ba:29:79:40:c1:c1:55:87:2d:f7:bd:cf:bc:cc:0a: 0a:24:c0:d0:fb:07:ef:7d:8e:83:77:44:ce:a0:c4:4f:f7:c9: ac:9c:c6:e8:30:99:a3:a2:f7:c9:b4:50:14:86:92:ac:7a:33: f1:bd:06:74:2d:c3:a0:48:88:68:04:8a:f1:14:f0:90:13:2f: 78:8b:0c:18:fa:3e:e9:53:8e:c7:f2:25:7d:55:bc:fd:f6:f5: ac:84:cc:42:a3:69:36:0b:b0:81:5a:ce:d9:e3:7a:f0:19:4b: fc:b8:c6:af:64:38:2a:6b:47:6b:bd:38:f2:8c:aa:1f:a3:d2: 25:17:32:8c:ab:ed:f0:67:fe:4a:8c:75:5b:c9:e9:55:50:d9: 86:2e:af:e3:de:cf:10:f5:5d:70:3c:47:77:e3:f4:a7:5a:4a: 5f:5c:69:93:ef:3f:8e:5e:6a:2e:84:8e:96:3f:05:27:20:47: 51:fa:6f:4b:85:c1:11:9a:7e:be:10:46:b2:83:16:e8:3e:c1: 18:12:2a:ca:e6:d6:a1:68:d1:5f:2a:c7:f4:da:e7:12:19:5e: ee:e7:79:25 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yxSbd1IC3niAZb2gg/tEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGI4YmI0ODVlYmEzOTJiODBjMzE2NjkyOWI3ZmNiOTU4ZjQ0OWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrZae2cUgbbx2xyGCnU1qdK4dT4B 7mYhsMpb4RnwrrOIeR+n4+TuyVPudYktrVqVxz+CinLCqF9bC1PBdCXbNcSRueih CyEIBq6kJxacDHtdzImEmOpfgRx9ASTz5+Pc4oFta+Gg/vUB/uaBFcIIDtEiSYr7 yScgwzDTTwT46zRXNLf4VFyXdwjhvt6t7vIEosetykYLAjzX0+Siy5L4zpzvdf5T FIEsp/SOv2FJHGqxX8Uzq6e4PNWvFroP8oJlkDI64kH48QgHwpI/b/exIqbJY56q Fsh9r+7O6xlCSn97C+SmkZqqKRy/0Udc20TgT6ng8MStg/vXoBQhW1BpPQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMC4u0heujkrgMMWaSm3/LlY9Em8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzg0OTQy Zi03MjFmLTQyMzQtODhjMS1kYmYzOTY5Y2E3NWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvODQ5NDJm LTcyMWYtNDIzNC04OGMxLWRiZjM5NjljYTc1Zi8xL3dMaTdTRjY2T1N1QXd4WnBL YmY4dVZqMFNidy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufUcMA0EAgACMAcDBQMqCRUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtLzANBgkqhkiG9w0BAQsFAAOCAQEAh2eQFexqlDWc +iURVOdCWy5EONKmyzHLg/yk9fMGiSySU+E51+KFuil5QMHBVYct973PvMwKCiTA 0PsH732Og3dEzqDET/fJrJzG6DCZo6L3ybRQFIaSrHoz8b0GdC3DoEiIaASK8RTw kBMveIsMGPo+6VOOx/IlfVW8/fb1rITMQqNpNguwgVrO2eN68BlL/LjGr2Q4KmtH a7048oyqH6PSJRcyjKvt8Gf+Sox1W8npVVDZhi6v497PEPVdcDxHd+P0p1pKX1xp k+8/jl5qLoSOlj8FJyBHUfpvS4XBEZp+vhBGsoMW6D7BGBIqyubWoWjRXyrH9Nrn Ehle7ud5JQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:49:41 2026 by rpki-client