This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer File: wQdbeoGvSd7_tsg1xWCO4LiEMso.cer (raw, json) Hash identifier: Yl05MdjjBly/RwdA0EPH0UVuCFOwV++a7DKLsi3jfZU= Subject key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA69FDA35E0F130DF58188ADE13FAAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48983 IP: 193.169.2.0/23 IP: 195.66.85.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9f:da:35:e0:f1:30:df:58:18:8a:de:13:fa:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:4d:05:04:20:2d:04:7f:a1:78:80:aa:4f: eb:ef:15:52:b4:b9:8e:33:a8:ca:34:f3:f4:8c:1e: 8e:27:b7:e7:1b:21:73:88:79:5f:8b:4a:d5:bc:6c: 1e:49:b8:8e:b4:ae:1a:0e:75:96:3c:7a:bb:05:41: 0e:1c:73:3a:65:ff:b7:42:d4:78:c1:7c:ef:a7:a7: a3:0b:9e:b1:a4:e3:c1:8d:ab:a1:f1:79:54:2c:fc: 09:99:c4:1c:85:fd:51:a0:f6:6d:31:0e:5f:64:c2: d0:28:b3:93:f7:67:6c:de:ac:f4:2d:df:2b:ec:77: 1b:76:89:e8:ca:07:22:c1:e2:e9:b4:7b:0a:d6:52: 97:69:6b:db:e6:16:07:40:4c:e4:68:c4:79:75:a1: d5:67:4e:c3:9d:5b:ac:e1:f4:2b:12:e3:61:8b:7e: 29:86:04:ef:74:b4:c7:7a:76:a9:10:19:75:e0:ed: a1:20:5f:03:b7:be:15:62:9c:0f:6f:e8:e0:36:a5: 40:99:4b:33:7b:07:c1:2c:b3:bf:7e:71:4a:6d:aa: ee:d4:f2:17:42:54:83:23:d5:06:39:62:fc:ec:68: 6c:b9:fd:c4:b0:4d:22:80:04:48:c8:68:66:53:7e: d0:aa:b7:d2:b8:48:41:1e:fa:85:0c:68:67:a1:04: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.2.0/23 195.66.85.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48983 Signature Algorithm: sha256WithRSAEncryption 30:19:cf:73:7e:fd:89:60:af:3c:d6:62:c8:b4:b8:f6:4b:e1: 84:24:e6:b9:6b:70:b2:52:4a:45:81:79:ac:27:ce:fc:21:34: 54:54:07:eb:fb:16:7f:3f:15:db:51:f8:5e:e0:e4:4c:68:a7: a6:93:45:c2:49:20:bf:de:7e:bb:75:66:b2:57:93:cf:a2:52: 21:dd:df:64:94:e4:45:fc:80:fe:ef:2f:6b:0c:dd:0a:73:80: 58:20:a2:59:e6:fe:bb:d9:1e:ce:a3:2c:a3:f2:34:25:ef:d3: 5b:cd:fa:73:25:d7:39:e8:fd:06:15:44:fc:5d:13:81:81:24: 6c:3a:24:bc:b1:10:c6:d1:77:fc:54:71:56:16:6c:a1:9a:78: 04:f5:42:78:c5:93:d9:e8:69:8d:6e:47:9d:0e:a9:86:92:ee: 10:2b:33:ce:4a:ff:59:b5:c8:14:a9:2c:7f:f8:83:c8:06:cf: 83:94:0c:1e:a1:0a:e5:10:4b:19:da:ef:c0:4d:44:f7:9d:a0: e4:ef:eb:8c:e5:43:8f:47:40:58:3f:68:18:64:7b:e7:be:78: 90:c2:61:ae:4f:b2:3f:6c:9b:42:56:fd:cf:62:cf:22:96:9b: 15:cb:12:08:c4:d9:cc:db:9a:a5:b4:db:a9:cd:f8:26:bf:ea: 75:31:c4:59 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+pp/aNeDxMN9YGIreE/qtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTA3NWI3YTgxYWY0OWRlZmZiNmM4MzVjNTYwOGVlMGI4ODQzMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dRNBQQgLQR/oXiAqk/r7xVStLmO M6jKNPP0jB6OJ7fnGyFziHlfi0rVvGweSbiOtK4aDnWWPHq7BUEOHHM6Zf+3QtR4 wXzvp6ejC56xpOPBjauh8XlULPwJmcQchf1RoPZtMQ5fZMLQKLOT92ds3qz0Ld8r 7HcbdonoygciweLptHsK1lKXaWvb5hYHQEzkaMR5daHVZ07DnVus4fQrEuNhi34p hgTvdLTHenapEBl14O2hIF8Dt74VYpwPb+jgNqVAmUszewfBLLO/fnFKbaru1PIX QlSDI9UGOWL87Ghsuf3EsE0igARIyGhmU37QqrfSuEhBHvqFDGhnoQSDawIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFMEHW3qBr0ne/7bINcVgjuC4hDLKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzJhODI5 Yi0zMmIzLTQ5NmEtODBjZS1hMDI0NjdmNjQyNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvMmE4Mjli LTMyYjMtNDk2YS04MGNlLWEwMjQ2N2Y2NDI1Zi8xL3dRZGJlb0d2U2Q3X3RzZzF4 V0NPNExpRU1zby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwakCAwQAw0JVMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC/VzANBgkqhkiG9w0BAQsFAAOCAQEAMBnPc379iWCvPNZiyLS49kvh hCTmuWtwslJKRYF5rCfO/CE0VFQH6/sWfz8V21H4XuDkTGinppNFwkkgv95+u3Vm sleTz6JSId3fZJTkRfyA/u8vawzdCnOAWCCiWeb+u9kezqMso/I0Je/TW836cyXX Oej9BhVE/F0TgYEkbDokvLEQxtF3/FRxVhZsoZp4BPVCeMWT2ehpjW5HnQ6phpLu ECszzkr/WbXIFKksf/iDyAbPg5QMHqEK5RBLGdrvwE1E952g5O/rjOVDj0dAWD9o GGR75754kMJhrk+yP2ybQlb9z2LPIpabFcsSCMTZzNuapbTbqc34Jr/qdTHEWQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:55 2026 by rpki-client