This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer File: wPQvc_8rzEiFsSAL0C7n4p9gjis.cer (raw, json) Hash identifier: vyqA41i27OZBPo8nkBnJF3HKGaX7HfAnllf9KwYMQaU= Subject key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15933ABAB9362ED16600BD43FB57CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197662 IP: 91.223.240.0/24 IP: 185.74.200.0/22 IP: 2a03:49a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:93:3a:ba:b9:36:2e:d1:66:00:bd:43:fb:57:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:09:22:00:12:c1:22:58:47:93:54:cc:3f: 5a:f6:ae:d8:20:99:ff:08:1a:ac:5c:87:a4:d6:6c: e4:af:a2:10:4a:3b:ea:94:01:ad:95:7f:e8:f7:f1: 94:b6:0e:68:e6:2f:a1:c1:34:b0:a1:f6:cf:38:81: 2a:4f:0c:f7:88:d1:aa:ed:31:ec:bc:8c:b6:d6:58: e3:46:c6:62:3c:2b:99:a6:a1:08:62:21:d6:b2:e6: 75:aa:6d:0b:dd:6f:a3:d0:f8:9b:25:c6:20:59:13: e1:8b:b6:fc:78:68:8a:b8:a0:77:07:bf:8f:64:ee: 31:14:af:35:85:1b:e7:c7:16:af:4d:78:e1:2d:0f: f8:c0:28:4a:bb:8a:b6:bb:87:b5:5a:5a:85:74:1c: 72:18:73:c8:13:b8:90:81:03:75:2f:5c:51:03:de: fb:5d:af:d6:d8:8c:5d:33:07:1f:e1:74:5a:0a:7a: 7a:11:df:a9:66:0d:3c:01:90:42:48:ed:b8:27:22: 86:1a:36:92:54:75:4f:d9:82:dc:18:eb:4a:f7:58: 2f:df:ee:af:3c:ea:fc:32:82:19:82:7d:28:a9:03: 48:52:e9:ac:2a:65:a3:8a:07:6b:d2:8b:15:34:a8: 61:6b:54:ed:c0:08:41:60:83:ea:07:2c:c7:44:92: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.240.0/24 185.74.200.0/22 IPv6: 2a03:49a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197662 Signature Algorithm: sha256WithRSAEncryption 6d:d7:5b:79:8b:d1:8d:a6:63:ca:1b:1c:bd:4c:7d:a6:e7:cb: a3:af:e7:28:7e:1b:01:02:5c:1d:55:7c:97:c3:91:b1:4f:8e: dc:61:ef:69:b2:5a:27:5e:53:df:ff:8f:64:34:19:ac:00:4b: c1:95:73:06:ae:29:49:df:c3:8e:48:e0:13:9f:d9:05:7a:5c: cd:f8:fe:8d:05:81:23:9c:0b:c5:c9:29:7d:f5:1e:57:a2:51: 54:f7:f4:d8:3a:f9:33:4c:95:c4:5b:22:75:3d:31:2d:20:bd: 96:3e:e0:14:38:0c:44:6d:a7:d8:a0:34:9a:a2:ce:97:b6:39: e4:6b:7d:5e:e1:28:8a:06:ba:76:7b:b6:25:5f:35:66:95:05: be:b3:32:c2:5c:d8:40:f0:b5:2c:fe:15:70:fb:7d:0d:bd:59: 45:e0:39:59:6b:de:dd:fa:0c:b4:4f:4d:8b:85:4f:fa:58:b5: 3e:61:e0:7b:ee:22:41:ac:6a:90:0b:77:c8:fb:ca:6e:ce:53: 1f:fb:8f:2a:50:86:0d:a8:18:e8:f0:b7:4b:0f:3f:8b:ea:be: 33:ba:9e:ef:b0:25:c4:30:11:eb:18:db:3f:99:37:8d:21:41: fb:6f:5f:71:42:f7:78:3b:a4:73:a8:81:94:84:f6:87:9c:4d: 38:19:a3:b8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FZM6urk2LtFmAL1D+1fMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGY0MmY3M2ZmMmJjYzQ4ODViMTIwMGJkMDJlZTdlMjlmNjA4ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QQJIgASwSJYR5NUzD9a9q7YIJn/ CBqsXIek1mzkr6IQSjvqlAGtlX/o9/GUtg5o5i+hwTSwofbPOIEqTwz3iNGq7THs vIy21ljjRsZiPCuZpqEIYiHWsuZ1qm0L3W+j0PibJcYgWRPhi7b8eGiKuKB3B7+P ZO4xFK81hRvnxxavTXjhLQ/4wChKu4q2u4e1WlqFdBxyGHPIE7iQgQN1L1xRA977 Xa/W2IxdMwcf4XRaCnp6Ed+pZg08AZBCSO24JyKGGjaSVHVP2YLcGOtK91gv3+6v POr8MoIZgn0oqQNIUumsKmWjigdr0osVNKhha1TtwAhBYIPqByzHRJJ7YQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMD0L3P/K8xIhbEgC9Au5+KfYI4rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzU5Zjg5 NS01YzUwLTQzNmEtOTcwNy03ZGQ1N2U3MzY3NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNTlmODk1 LTVjNTAtNDM2YS05NzA3LTdkZDU3ZTczNjc0Ni8xL3dQUXZjXzhyekVpRnNTQUww QzduNHA5Z2ppcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9/wAwQCuUrIMA0EAgACMAcDBQAqA0mgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMEHjANBgkqhkiG9w0BAQsFAAOCAQEAbddb eYvRjaZjyhscvUx9pufLo6/nKH4bAQJcHVV8l8ORsU+O3GHvabJaJ15T3/+PZDQZ rABLwZVzBq4pSd/DjkjgE5/ZBXpczfj+jQWBI5wLxckpffUeV6JRVPf02Dr5M0yV xFsidT0xLSC9lj7gFDgMRG2n2KA0mqLOl7Y55Gt9XuEoiga6dnu2JV81ZpUFvrMy wlzYQPC1LP4VcPt9Db1ZReA5WWve3foMtE9Ni4VP+li1PmHge+4iQaxqkAt3yPvK bs5TH/uPKlCGDagY6PC3Sw8/i+q+M7qe77AlxDAR6xjbP5k3jSFB+29fcUL3eDuk c6iBlIT2h5xNOBmjuA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:21 2026 by rpki-client