This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer (raw, json) Hash identifier: KN9S+bvjEroUEdjgB/Z2g0XZWsUmLasdSP7zppiQP5Q= Subject key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79106C7A054E018A0369F06EBAB43CFF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25498 AS: 198720 IP: 46.232.232.0/21 IP: 195.22.130.0/23 IP: 195.123.0.0 -- 195.123.6.255 IP: 195.123.8.0/21 IP: 195.123.120.0 -- 195.123.125.255 IP: 195.123.168.0/21 IP: 195.123.180.0/22 IP: 195.123.188.0/22 IP: 195.123.196.0 -- 195.123.207.255 IP: 195.123.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6c:7a:05:4e:01:8a:03:69:f0:6e:ba:b4:3c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:5d:cc:6d:8a:0f:f1:f7:a8:aa:44:16:82: d4:76:8b:e6:12:4f:14:ed:c6:e3:5b:ac:b5:28:9e: ef:5f:a9:16:62:fc:20:84:93:73:a1:9e:f9:e0:d3: 0c:01:c9:14:9e:01:14:a9:a8:5b:51:58:70:67:fb: 84:43:7c:c5:f0:0b:d2:0f:9d:8a:84:81:08:21:2f: 3a:1c:81:f8:74:6d:eb:f3:26:80:9c:2d:55:17:33: 54:5a:08:22:7c:f9:ba:66:b9:fb:b2:dd:39:13:e0: 4d:29:a1:d7:fd:f2:40:12:1d:5d:0a:73:e1:ba:9e: bd:b2:66:3d:40:99:ed:0d:45:1a:07:27:5f:2a:05: 23:6b:61:53:a5:1a:72:ae:bc:31:bd:22:07:ae:a8: 00:3c:3a:5d:4d:39:71:8d:d7:d5:03:24:56:56:90: cb:00:4d:43:0c:8a:83:63:c9:71:e2:dd:34:1a:59: 5f:dc:88:50:3d:39:7f:4f:9e:9e:5d:18:9b:f8:25: 81:c1:f8:43:fb:09:9e:eb:6f:5e:29:04:51:1d:3f: 5e:e3:8c:86:82:0f:85:2e:b7:13:8f:40:5e:9f:f8: ed:27:b3:8e:fa:66:27:a0:ef:2f:55:e8:b2:34:d0: d5:66:19:5a:25:35:b8:00:5a:b5:38:5c:a2:d9:55: 39:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.232.0/21 195.22.130.0/23 195.123.0.0-195.123.6.255 195.123.8.0/21 195.123.120.0-195.123.125.255 195.123.168.0/21 195.123.180.0/22 195.123.188.0/22 195.123.196.0-195.123.207.255 195.123.252.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25498 198720 Signature Algorithm: sha256WithRSAEncryption 9d:8b:4e:dd:5c:e1:c4:f0:59:26:8b:ec:57:70:aa:6f:f2:11: 74:71:a1:c3:e4:95:d1:7c:4e:ed:ac:3f:ed:41:84:a7:f4:35: 20:64:1f:f0:17:74:39:1b:34:e8:4a:6a:15:fe:b0:0a:7f:85: 1d:3f:7a:51:83:71:ec:7e:d2:9b:74:9e:6d:e0:5a:9b:04:02: ff:56:2a:31:5e:2d:3e:91:f8:ea:54:6a:a1:da:70:db:41:1b: 19:8b:ce:c5:53:56:8a:a5:54:8c:8d:1e:b0:bf:40:13:9a:62: e1:65:3c:2d:7e:2c:dd:7c:91:6f:5e:fd:30:bc:d9:8f:8a:e1: 80:2b:d0:c2:90:30:b4:51:ea:8f:06:fe:00:3f:46:8c:5c:e4: 7c:6b:93:06:ca:8a:c3:8f:d3:58:d2:98:44:4d:3d:32:f5:10: 82:66:0b:00:07:71:06:a4:4b:23:95:dc:28:0c:1a:3c:9c:de: 30:53:4d:6b:56:57:84:f6:1f:9c:61:18:0b:ff:80:d6:a9:ec: df:ef:83:3a:c3:ff:90:0a:2c:2d:ad:d3:96:28:fd:d9:3c:20: ea:98:11:56:69:47:eb:68:aa:5c:f3:03:aa:32:b8:21:ed:d0: d5:15:f9:c7:f4:02:10:e5:0f:3c:cd:d0:f6:f0:cc:e9:3f:c4: d2:a1:a3:ca -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgISAZt5EGx6BU4BigNp8G66tDz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTA1YWRjNWM0MjYyZGZmNmIzZjNlNjA2ODMwYzdmOTcxZDc2NmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxddzG2KD/H3qKpEFoLUdovmEk8U 7cbjW6y1KJ7vX6kWYvwghJNzoZ754NMMAckUngEUqahbUVhwZ/uEQ3zF8AvSD52K hIEIIS86HIH4dG3r8yaAnC1VFzNUWggifPm6Zrn7st05E+BNKaHX/fJAEh1dCnPh up69smY9QJntDUUaBydfKgUja2FTpRpyrrwxvSIHrqgAPDpdTTlxjdfVAyRWVpDL AE1DDIqDY8lx4t00Gllf3IhQPTl/T56eXRib+CWBwfhD+wme629eKQRRHT9e44yG gg+FLrcTj0Ben/jtJ7OO+mYnoO8vVeiyNNDVZhlaJTW4AFq1OFyi2VU5kwIDAQAB o4IC8TCCAu0wHQYDVR0OBBYEFMEFrcXEJi3/az8+YGgwx/lx12bOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2M0OTE3 Mi1mOGRhLTQxMjgtODY4OS01MTU4NDVlNmMzMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvYzQ5MTcy LWY4ZGEtNDEyOC04Njg5LTUxNTg0NWU2YzMxNy8xL3dRV3R4Y1FtTGY5clB6NWdh RERILVhIWFpzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUF BwEHAQH/BF0wWzBZBAIAATBTAwQDLujoAwQBwxaCMAsDAwDDewMEAMN7BgMEA8N7 CDAMAwQDw3t4AwQBw3t8AwQDw3uoAwQCw3u0AwQCw3u8MAwDBALDe8QDBATDe8AD BALDe/wwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICY5oCAwMIQDANBgkqhkiG9w0B AQsFAAOCAQEAnYtO3VzhxPBZJovsV3Cqb/IRdHGhw+SV0XxO7aw/7UGEp/Q1IGQf 8Bd0ORs06EpqFf6wCn+FHT96UYNx7H7Sm3SebeBamwQC/1YqMV4tPpH46lRqodpw 20EbGYvOxVNWiqVUjI0esL9AE5pi4WU8LX4s3XyRb179MLzZj4rhgCvQwpAwtFHq jwb+AD9GjFzkfGuTBsqKw4/TWNKYRE09MvUQgmYLAAdxBqRLI5XcKAwaPJzeMFNN a1ZXhPYfnGEYC/+A1qns3++DOsP/kAosLa3Tlij92Twg6pgRVmlH62iqXPMDqjK4 Ie3Q1RX5x/QCEOUPPM3Q9vDM6T/E0qGjyg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:22:41 2026 by rpki-client