This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer (raw, json) Hash identifier: FL7LrK2iTMBuu+mLjzWcc8qunELK0EiwpdfYcZe65rM= Subject key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AB4A70438EC084CA4CC5B06483DA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200402 IP: 185.84.56.0/22 IP: 2a03:6ee0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b4:a7:04:38:ec:08:4c:a4:cc:5b:06:48:3d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0eb668b735a1839374e48f79cb2436dbf417caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:bf:82:a9:3a:64:f9:84:8f:17:eb:6c:21: c4:59:58:57:b7:86:44:36:ed:8d:ba:d6:56:05:4a: 9e:c9:dd:2b:51:af:a9:78:7a:a9:b7:0d:db:42:70: 77:6d:84:3d:b5:bf:45:d5:a1:d5:df:e2:14:3e:66: 41:40:b4:b6:7a:58:43:0a:bb:ee:0c:4a:ef:a5:a5: c9:d1:65:a4:23:0d:c7:d4:51:e8:f9:72:80:66:c7: ed:46:ed:e1:d0:67:e3:0b:9d:21:39:4d:e7:5b:74: c0:6e:8e:fe:65:00:aa:b0:ef:bc:53:fc:bf:ee:45: aa:6d:86:ed:c8:87:7c:1c:b5:6c:b7:b2:79:f2:3e: 4f:a3:9b:8e:62:28:7f:65:f2:e7:40:8c:74:0b:ac: 53:0a:3d:30:49:80:21:1d:30:d5:c9:cf:8d:35:42: be:42:c6:00:ac:2a:82:6e:5a:c8:2e:7d:30:a4:23: 42:8e:c7:0c:d1:88:53:5d:fe:45:a8:92:3d:d6:b6: d6:6b:81:0f:2c:6e:58:f6:38:35:da:b9:a4:42:29: 83:e9:97:d1:3d:da:a5:e1:97:54:17:f6:fa:94:ce: b5:93:ab:73:61:e4:6b:0a:75:2d:3e:d7:48:a1:4b: 9f:27:eb:1a:4b:0c:92:fe:e4:6f:5a:a9:f8:42:25: 0c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.56.0/22 IPv6: 2a03:6ee0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200402 Signature Algorithm: sha256WithRSAEncryption 69:40:bb:6a:2b:0d:9d:08:45:98:4b:f1:23:e2:d8:14:e8:36: 07:d3:3c:a3:09:19:d8:f2:f6:a9:30:1a:54:8b:12:03:6e:6d: 85:9e:46:ea:84:61:70:14:82:60:b4:2c:d1:91:32:85:0d:5b: 71:e6:63:ae:ea:54:0a:0e:9a:08:e2:56:3e:06:89:49:72:b7: 4e:39:8d:11:23:20:99:a7:16:8b:58:f4:67:2a:26:9b:b6:2b: 4a:aa:a5:0a:e4:42:9a:06:ca:f7:68:4e:9c:32:bb:8c:f9:c4: 42:80:19:16:19:0d:7a:da:29:2b:ed:5c:c8:e1:7b:80:02:19: 4e:9e:bb:86:6f:40:91:5a:83:30:7b:77:95:72:5d:61:5e:a8: d2:be:fb:cd:9a:6b:83:d2:df:35:4d:da:dd:b2:6f:de:2c:85: ac:f1:a2:28:cd:4d:15:28:b5:23:a1:e9:cf:02:4c:52:9e:bf: 3c:12:34:d0:40:da:10:40:26:c7:ac:ae:78:7d:86:cf:f9:21: 92:25:09:94:36:c9:5e:d0:36:1a:6b:83:f9:d5:6d:d6:8a:75: 05:79:19:84:7d:92:43:8b:44:fb:08:dd:15:01:5c:78:de:73: 58:05:c8:05:48:5a:6f:1b:2c:71:9f:81:55:72:da:e5:f9:e6: e2:64:71:8d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WrSnBDjsCEykzFsGSD2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGViNjY4YjczNWExODM5Mzc0ZTQ4Zjc5Y2IyNDM2ZGJmNDE3Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0my/gqk6ZPmEjxfrbCHEWVhXt4ZE Nu2NutZWBUqeyd0rUa+peHqptw3bQnB3bYQ9tb9F1aHV3+IUPmZBQLS2elhDCrvu DErvpaXJ0WWkIw3H1FHo+XKAZsftRu3h0GfjC50hOU3nW3TAbo7+ZQCqsO+8U/y/ 7kWqbYbtyId8HLVst7J58j5Po5uOYih/ZfLnQIx0C6xTCj0wSYAhHTDVyc+NNUK+ QsYArCqCblrILn0wpCNCjscM0YhTXf5FqJI91rbWa4EPLG5Y9jg12rmkQimD6ZfR Pdql4ZdUF/b6lM61k6tzYeRrCnUtPtdIoUufJ+saSwyS/uRvWqn4QiUMhQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMDrZotzWhg5N05I95yyQ22/QXyqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzY4YjUy MS1jNzkwLTQ5NTctOWU1Mi0yZDI2ZjFiNTZlMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvNjhiNTIx LWM3OTAtNDk1Ny05ZTUyLTJkMjZmMWI1NmUyMC8xL3dPdG1pM05hR0RrM1RrajNu TEpEYmI5QmZLby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVQ4MA0EAgACMAcDBQAqA27gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMO0jANBgkqhkiG9w0BAQsFAAOCAQEAaUC7aisNnQhF mEvxI+LYFOg2B9M8owkZ2PL2qTAaVIsSA25thZ5G6oRhcBSCYLQs0ZEyhQ1bceZj rupUCg6aCOJWPgaJSXK3TjmNESMgmacWi1j0Zyomm7YrSqqlCuRCmgbK92hOnDK7 jPnEQoAZFhkNetopK+1cyOF7gAIZTp67hm9AkVqDMHt3lXJdYV6o0r77zZprg9Lf NU3a3bJv3iyFrPGiKM1NFSi1I6HpzwJMUp6/PBI00EDaEEAmx6yueH2Gz/khkiUJ lDbJXtA2GmuD+dVt1op1BXkZhH2SQ4tE+wjdFQFceN5zWAXIBUhabxsscZ+BVXLa 5fnm4mRxjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:06 2026 by rpki-client