This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer (raw, json) Hash identifier: sxMc9LsTdEc7WkTlwdGuIfDMXl34SKF+maylSu8JngY= Subject key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3598E6434D08FB91ABCF9C1D96AEC6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25372 IP: 109.68.40.0/21 IP: 185.192.248.0/22 IP: 2a00:1588::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:98:e6:43:4d:08:fb:91:ab:cf:9c:1d:96:ae:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:96:d0:0d:3a:e4:1b:61:e4:63:2c:3b:f0: 2d:1b:f4:26:9d:c8:64:8a:5a:27:b1:38:db:e2:b2: 66:3e:22:72:f8:8c:8a:a1:a5:7b:82:7a:a7:e1:f9: f9:c0:50:7f:08:bf:0e:d6:e2:0e:1e:03:94:a4:b9: de:1f:c9:b3:cc:b2:81:98:67:c9:3b:fb:df:79:ec: be:1b:ac:29:98:fc:e1:b0:11:98:53:04:01:42:94: 8f:d2:39:9a:4d:33:cc:a7:00:ed:61:5d:5e:6f:8a: 35:bc:8e:ac:3d:2b:db:07:1b:8a:70:44:4d:fc:58: 11:4f:f8:7b:54:c6:87:22:84:d4:fa:3f:0b:2e:cd: 50:52:64:9d:15:dd:33:80:22:bf:e4:0d:1c:b0:83: 71:02:0a:f4:bd:53:f1:c2:2f:e9:c0:bc:4f:0b:7c: 19:ce:06:3f:72:b7:0f:31:dd:f5:40:95:31:77:f6: 53:b9:73:16:8d:b9:b2:d4:00:48:e9:64:9b:97:13: 97:b4:35:27:de:8b:62:9f:76:97:d1:6a:a4:36:30: 44:a1:57:b8:64:16:b4:1f:0d:3c:ef:7b:48:1a:f3: da:cd:d2:3e:52:bc:d4:2c:5f:d6:b6:e5:08:eb:e0: b9:16:de:ca:53:17:b5:7d:6a:a6:9e:62:ed:db:d8: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.68.40.0/21 185.192.248.0/22 IPv6: 2a00:1588::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25372 Signature Algorithm: sha256WithRSAEncryption 2f:f1:90:f5:98:bb:e4:0c:2e:7c:03:2a:3b:24:82:a4:81:d5: b9:76:03:9b:fc:3f:82:d6:ff:cc:91:ef:fb:62:4b:7d:f0:c1: a5:7d:05:c7:88:70:b1:9b:84:4b:37:39:0e:46:76:84:f7:b8: ae:06:a3:35:c8:f6:13:4a:48:6d:08:93:76:f3:3c:bf:1d:67: af:3b:c1:0f:28:6a:f4:b8:96:a0:b9:e5:0b:2b:2f:f6:d5:11: a2:08:f0:8c:47:27:8d:a4:9a:06:e7:53:e2:2e:0a:04:39:b5: 49:7e:2f:b5:92:49:18:7d:f8:79:6e:51:a2:35:3e:1d:7a:b9: c7:e0:f0:4e:be:75:5a:d5:e9:ae:95:51:82:55:36:46:14:52: 44:41:85:ba:04:09:1e:0b:5b:1c:59:9d:7f:9f:78:b6:e3:18: 5b:a1:c6:cd:7b:3b:48:27:5c:39:ec:33:21:7b:d7:8b:b0:a9: 3e:13:da:ef:35:d4:ec:71:ff:93:02:78:92:b8:5b:8f:5b:4d: 5c:f2:d7:6f:e5:c5:78:1f:4b:a6:49:c3:8b:1a:cb:b7:87:c6: 8c:f6:3a:c0:4a:e7:70:88:6f:88:ca:cc:c6:a9:11:05:68:11: 41:64:ab:a3:03:dd:57:fe:fc:c0:9b:e0:3e:05:eb:97:00:c2: 2e:cb:c3:cd -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt7NZjmQ00I+5Grz5wdlq7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTA3NGZkYTU3MjlmNzA1ZTVmZDkyZjIyNWVjYWY1YjkzY2I4Mjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNaW0A065Bth5GMsO/AtG/Qmnchk ilonsTjb4rJmPiJy+IyKoaV7gnqn4fn5wFB/CL8O1uIOHgOUpLneH8mzzLKBmGfJ O/vfeey+G6wpmPzhsBGYUwQBQpSP0jmaTTPMpwDtYV1eb4o1vI6sPSvbBxuKcERN /FgRT/h7VMaHIoTU+j8LLs1QUmSdFd0zgCK/5A0csINxAgr0vVPxwi/pwLxPC3wZ zgY/crcPMd31QJUxd/ZTuXMWjbmy1ABI6WSblxOXtDUn3otin3aX0WqkNjBEoVe4 ZBa0Hw0873tIGvPazdI+UrzULF/WtuUI6+C5Ft7KUxe1fWqmnmLt29juuwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFMEHT9pXKfcF5f2S8iXsr1uTy4KIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzFlMGQ2 MC04NzUyLTRiNmQtODVmOC01ZTk2YzIzMmUzZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvMWUwZDYw LTg3NTItNGI2ZC04NWY4LTVlOTZjMjMyZTNkNS8xL3dRZFAybGNwOXdYbF9aTHlK ZXl2VzVQTGdvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDbUQoAwQCucD4MA0EAgACMAcDBQAqABWIMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmMcMA0GCSqGSIb3DQEBCwUAA4IBAQAv8ZD1 mLvkDC58Ayo7JIKkgdW5dgOb/D+C1v/Mke/7Ykt98MGlfQXHiHCxm4RLNzkORnaE 97iuBqM1yPYTSkhtCJN28zy/HWevO8EPKGr0uJagueULKy/21RGiCPCMRyeNpJoG 51PiLgoEObVJfi+1kkkYffh5blGiNT4dernH4PBOvnVa1emulVGCVTZGFFJEQYW6 BAkeC1scWZ1/n3i24xhbocbNeztIJ1w57DMhe9eLsKk+E9rvNdTscf+TAniSuFuP W01c8tdv5cV4H0umScOLGsu3h8aM9jrASudwiG+IyszGqREFaBFBZKujA91X/vzA m+A+BeuXAMIuy8PN -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:54 2026 by rpki-client