This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer File: wR_52bpVx9lQjFpNwe7MDilWHC4.cer (raw, json) Hash identifier: +ubfBtLGYrNK6JWX9k9alfNsmCd5HAYMsasal4UoRcQ= Subject key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDA16F73B08867A4712AF719FFDEF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.216.226.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a1:6f:73:b0:88:67:a4:71:2a:f7:19:ff:de:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bb:4d:f9:78:f1:ce:9b:d3:89:fc:fd:b7:4a: 13:97:a7:05:01:61:35:85:78:6d:7e:11:a7:fc:44: d3:91:ad:70:af:57:2f:3b:10:98:87:5a:22:0d:67: 44:1e:da:de:19:ef:4e:2d:b2:0a:6b:c4:0b:91:4b: 4d:7d:52:55:ab:eb:14:21:f3:3b:7f:22:a3:ba:57: db:55:de:90:7e:d6:12:42:dd:a9:67:b7:d0:d1:de: 1b:b2:46:d3:b1:fd:35:f3:b3:f8:a7:c4:ae:ad:f1: a4:fd:2b:34:74:bf:6c:bf:ec:e7:f9:57:85:32:c9: 89:3a:ea:a7:87:3c:01:d3:8c:95:8c:ab:04:2b:0e: ae:6c:75:8e:67:af:da:90:9e:6c:de:1a:f4:30:91: e1:cb:3b:bf:37:c4:2e:a8:75:68:40:ab:55:23:4f: e3:b1:a3:e4:4e:d9:24:c5:93:ff:72:d1:b9:f3:bb: 3f:ef:ad:11:68:92:ae:08:56:d5:3c:06:64:ee:9c: 8e:72:80:0d:86:e8:b5:cf:48:24:f8:e6:53:2d:67: dd:d9:19:c1:69:1b:4b:2d:b1:9c:dd:a8:1d:52:ce: 26:4d:64:8f:9e:d0:4d:94:e7:a6:40:a4:5b:5c:4c: c7:73:93:4c:ec:0a:ae:9e:5b:c1:fd:ba:98:e6:e4: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.226.0/24 Signature Algorithm: sha256WithRSAEncryption 25:c9:67:7d:c1:82:25:a3:f1:f3:1b:4c:44:05:a3:b3:8a:3d: fd:06:6c:fa:cc:e3:4b:68:1f:9e:9a:ef:32:1e:96:3a:10:33: e2:ae:7b:6c:91:7c:d2:84:7a:38:45:ff:59:fd:44:10:c2:67: 57:9e:90:a0:16:b8:90:8d:69:24:ca:f7:eb:e8:20:4d:e8:4a: e4:e5:fc:9b:85:e5:cc:c6:6f:d5:99:ec:c7:48:81:0e:9b:a9: 12:19:b2:00:77:15:d3:72:22:14:4f:31:fa:20:44:83:f8:55: f4:f3:23:0d:20:55:3f:87:f0:fd:bc:2f:6d:b1:45:80:36:f1: 7d:d4:53:46:00:67:93:c7:9a:7a:8a:4b:46:7e:30:c1:f0:60: 30:2c:c8:79:87:66:b8:89:df:bd:89:1d:58:1c:6a:6f:a3:34: 12:af:01:82:50:e4:69:70:f4:38:8b:41:f3:02:25:3f:d0:9d: c2:5d:04:be:e9:51:ee:7b:80:67:6b:e0:8a:cb:8e:b9:07:c5: 26:12:fa:1b:63:b7:c8:02:e4:74:b3:3f:94:38:1f:e9:ac:8f: da:b2:44:9d:35:2c:41:99:a9:03:70:c3:45:ea:d7:da:d2:b8: c1:60:24:10:ad:78:9c:73:8e:7f:55:7c:62:2d:72:b1:19:68: 0e:61:22:3b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87aFvc7CIZ6RxKvcZ/97zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTFmZjlkOWJhNTVjN2Q5NTA4YzVhNGRjMWVlY2MwZTI5NTYxYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7tN+XjxzpvTifz9t0oTl6cFAWE1 hXhtfhGn/ETTka1wr1cvOxCYh1oiDWdEHtreGe9OLbIKa8QLkUtNfVJVq+sUIfM7 fyKjulfbVd6QftYSQt2pZ7fQ0d4bskbTsf0187P4p8SurfGk/Ss0dL9sv+zn+VeF MsmJOuqnhzwB04yVjKsEKw6ubHWOZ6/akJ5s3hr0MJHhyzu/N8QuqHVoQKtVI0/j saPkTtkkxZP/ctG587s/760RaJKuCFbVPAZk7pyOcoANhui1z0gk+OZTLWfd2RnB aRtLLbGc3agdUs4mTWSPntBNlOemQKRbXEzHc5NM7AqunlvB/bqY5uQJBwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMEf+dm6VcfZUIxaTcHuzA4pVhwuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzgwNzkw Yi04OTFmLTRlMDMtYmQ1Ni05ZmI2YjRlYTI1MGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvODA3OTBi LTg5MWYtNGUwMy1iZDU2LTlmYjZiNGVhMjUwYS8xL3dSXzUyYnBWeDlsUWpGcE53 ZTdNRGlsV0hDNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9jiMA0GCSqGSIb3DQEBCwUAA4IBAQAlyWd9 wYIlo/HzG0xEBaOzij39Bmz6zONLaB+emu8yHpY6EDPirntskXzShHo4Rf9Z/UQQ wmdXnpCgFriQjWkkyvfr6CBN6Erk5fybheXMxm/VmezHSIEOm6kSGbIAdxXTciIU TzH6IESD+FX08yMNIFU/h/D9vC9tsUWANvF91FNGAGeTx5p6iktGfjDB8GAwLMh5 h2a4id+9iR1YHGpvozQSrwGCUORpcPQ4i0HzAiU/0J3CXQS+6VHue4Bna+CKy465 B8UmEvobY7fIAuR0sz+UOB/prI/askSdNSxBmakDcMNF6tfa0rjBYCQQrXicc45/ VXxiLXKxGWgOYSI7 -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:26 2026 by rpki-client