This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer File: wNBDfN98up85Z-syighobQbkfVY.cer (raw, json) Hash identifier: f3emQJl72Ir4Cg4sTSS+sCm7xl6b+f+WB2uaw/nhcvY= Subject key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAB6AE85DE24B2F975E032B9FA49DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196863 IP: 91.223.88.0/24 IP: 91.227.206.0/23 IP: 91.234.0.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b6:ae:85:de:24:b2:f9:75:e0:32:b9:fa:49:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:6b:36:e6:07:f3:2c:54:53:d9:9c:bf:bb: e8:0e:24:9f:df:88:9d:cc:cb:98:27:e9:3a:e0:b0: b1:24:36:70:94:09:ec:c5:85:21:70:ed:63:c8:55: 45:d0:d4:52:9f:73:10:3d:0b:d7:25:a9:b2:c6:bd: 40:2f:0e:46:15:3e:e3:38:e8:11:00:43:fe:94:00: b0:45:74:e6:47:93:a4:e0:5f:98:f8:df:e6:38:b6: 51:4c:4d:a0:68:e6:f0:ef:51:48:93:7c:45:55:65: 05:f4:66:12:96:60:34:27:ac:4b:1f:a2:2f:75:19: 9f:04:79:f6:8e:d5:e0:bf:ab:ef:bd:50:d5:d2:3d: 4b:35:90:48:e6:6f:57:55:14:74:ed:f1:98:26:f9: af:b9:27:2e:37:e4:e0:14:b9:b1:6a:f8:5e:e9:63: 72:34:57:b5:a5:fc:60:de:4b:b6:8c:ee:3f:34:a6: 86:2a:84:68:6e:8b:95:61:37:a4:2f:5e:73:bf:fb: 47:31:6f:32:c6:3a:6c:52:9e:47:c5:dd:9f:76:f3: d3:db:e1:80:a0:7b:5c:7a:50:b4:8a:4a:cc:97:fa: 1b:b9:c2:7d:00:ed:7f:f7:24:77:4a:c3:de:54:16: 71:78:8c:8f:46:44:73:29:58:df:08:91:4f:cd:cc: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.88.0/24 91.227.206.0/23 91.234.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196863 Signature Algorithm: sha256WithRSAEncryption 98:c8:c8:e7:c0:2a:3f:aa:20:6d:96:49:8e:d5:1b:13:86:91: ab:69:c1:3e:1d:04:3e:f3:3c:6b:48:62:1f:bc:cb:6c:51:33: 30:54:74:94:a5:37:e9:7d:3a:a0:6b:b6:a3:51:81:30:06:e3: f8:64:a7:d0:7f:fc:cf:44:bc:50:cd:6a:a0:ea:22:69:05:6e: b8:a2:6a:8f:78:a7:35:e5:30:c3:7f:6c:93:cd:a4:26:92:25: a3:3a:3d:7d:26:50:1a:aa:e2:50:cd:0d:a8:f6:08:d7:97:0f: 44:52:5c:15:fa:82:b6:29:59:28:d8:e0:5a:f6:4c:53:21:81: 39:b7:16:d6:9e:53:71:3b:ab:c3:35:d6:a8:40:e8:6d:57:46: ef:00:b8:e4:00:98:46:dd:05:9a:7a:79:90:5b:d3:1f:30:08: 23:5c:92:35:64:83:f8:55:d4:b2:6a:c6:71:6f:23:91:dd:f7: 9a:82:3f:ab:95:02:37:b8:44:ec:5f:43:e3:ee:f6:2d:8d:20: a1:7c:d1:74:f5:3c:65:42:f4:fd:df:6a:81:8e:06:47:a9:42: 47:bd:e1:d4:fd:9f:d8:ef:a1:45:58:3d:2f:70:15:08:74:ca: 34:d6:40:4a:51:43:17:e5:1a:86:64:e2:0c:f6:b2:e7:06:12: 4c:2c:6f:90 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt26rauhd4ksvl14DK5+knfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGQwNDM3Y2RmN2NiYTlmMzk2N2ViMzI4YTA4Njg2ZDA2ZTQ3ZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmRrNuYH8yxUU9mcv7voDiSf34id zMuYJ+k64LCxJDZwlAnsxYUhcO1jyFVF0NRSn3MQPQvXJamyxr1ALw5GFT7jOOgR AEP+lACwRXTmR5Ok4F+Y+N/mOLZRTE2gaObw71FIk3xFVWUF9GYSlmA0J6xLH6Iv dRmfBHn2jtXgv6vvvVDV0j1LNZBI5m9XVRR07fGYJvmvuScuN+TgFLmxavhe6WNy NFe1pfxg3ku2jO4/NKaGKoRobouVYTekL15zv/tHMW8yxjpsUp5Hxd2fdvPT2+GA oHtcelC0ikrMl/obucJ9AO1/9yR3SsPeVBZxeIyPRkRzKVjfCJFPzczDMQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFMDQQ3zffLqfOWfrMooIaG0G5H1WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwL2U0NjE2 OC05ODE4LTRiNTEtOTRhZC1jNjE4ZGVjMDc0NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvZTQ2MTY4 LTk4MTgtNGI1MS05NGFkLWM2MThkZWMwNzQ2Mi8xL3dOQkRmTjk4dXA4NVotc3lp Z2hvYlFia2ZWWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAW99YAwQBW+POAwQCW+oAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMA/zANBgkqhkiG9w0BAQsFAAOCAQEAmMjI58AqP6ogbZZJ jtUbE4aRq2nBPh0EPvM8a0hiH7zLbFEzMFR0lKU36X06oGu2o1GBMAbj+GSn0H/8 z0S8UM1qoOoiaQVuuKJqj3inNeUww39sk82kJpIlozo9fSZQGqriUM0NqPYI15cP RFJcFfqCtilZKNjgWvZMUyGBObcW1p5TcTurwzXWqEDobVdG7wC45ACYRt0Fmnp5 kFvTHzAII1ySNWSD+FXUsmrGcW8jkd33moI/q5UCN7hE7F9D4+72LY0goXzRdPU8 ZUL0/d9qgY4GR6lCR73h1P2f2O+hRVg9L3AVCHTKNNZASlFDF+UahmTiDPay5wYS TCxvkA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:49 2026 by rpki-client