This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer File: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer (raw, json) Hash identifier: ifYA0gC5eGsnyvH8v1NnKJbpKopuxGkqmX/g8AsIEIk= Subject key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAC30C2E62D2E159E5E14D32080F75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51147 IP: 195.54.176.0/23 IP: 2001:67c:205c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c3:0c:2e:62:d2:e1:59:e5:e1:4d:32:08:0f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:e5:7d:9a:84:ba:03:de:51:f7:eb:ee:53: 53:0f:66:1d:a7:ad:37:e8:0b:44:d9:fa:14:86:f4: 32:67:9c:18:26:5b:8f:f9:9c:f7:af:71:bb:6f:98: 61:47:9d:ee:c1:5e:fd:95:18:09:ac:70:53:06:bf: cc:03:98:50:ee:fe:af:8e:31:49:75:31:f3:88:9e: 46:5c:52:0c:c1:b7:e7:c9:cd:2f:8a:40:f3:e7:76: 36:ef:3c:73:00:3a:ab:4e:c7:e0:41:70:9c:33:7c: 80:d7:61:a9:fd:79:65:5b:d7:46:97:ee:5d:84:78: 0a:9f:ff:c8:31:8e:f5:76:12:94:fb:c3:da:2b:0d: 4f:fe:e0:d5:31:5b:5b:7e:2d:98:65:67:5e:66:e9: 0d:a8:29:63:09:bc:01:49:3f:73:41:c9:93:60:3f: 5c:e1:02:1a:3a:11:19:80:87:a1:f5:2c:25:fe:12: 3c:de:4a:a9:8d:07:9a:0d:c1:18:02:96:c4:60:c7: 62:8c:84:d9:72:02:3d:e8:eb:eb:65:76:1d:6d:0d: 83:6b:97:c4:72:6e:a7:cc:4e:fc:66:aa:dc:fe:e3: 9a:af:eb:38:23:f0:76:47:92:61:9f:e1:d1:f8:8f: e3:8f:df:27:45:8f:79:5b:75:ef:42:d3:64:2a:92: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.176.0/23 IPv6: 2001:67c:205c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51147 Signature Algorithm: sha256WithRSAEncryption 13:ec:40:db:ee:07:cc:1c:f2:25:f2:60:88:f7:ad:b9:30:75: 86:a9:75:fe:29:70:90:d0:eb:48:2a:13:ef:e0:c2:37:d5:c1: eb:b4:bd:9f:28:08:db:ea:93:97:5a:85:27:f4:e4:14:d0:03: 01:2d:a2:5a:a9:1a:1c:27:2b:4a:70:d9:62:c5:3a:e8:b4:e0: a2:f9:6a:c8:c5:0e:87:0d:c6:57:c0:91:2a:97:82:d2:3f:b1: 90:00:d2:0f:40:9e:f5:0b:d8:a3:86:77:47:50:47:c0:f6:29: c1:10:bf:ee:93:f8:6c:8c:92:3c:c1:73:7d:3a:2a:6a:ba:ff: 36:f4:ce:cc:0b:c7:aa:39:66:94:7f:58:d3:df:9f:77:5e:f7: 1e:e5:d7:68:c2:15:21:52:84:16:09:c6:77:3e:24:cd:37:16: 7b:fe:5b:3c:70:97:80:f3:57:6a:e6:e7:f5:e3:49:11:66:80: 8b:bf:4b:cc:09:df:51:bb:44:00:ba:42:13:51:84:29:0d:da: cb:ad:45:9b:a6:6e:16:19:48:8d:8d:32:eb:fd:98:8a:5a:3b: f2:33:69:d3:8f:c6:f0:d8:9d:01:19:8e:9f:23:b0:7c:f4:5f: 0e:c6:be:fa:66:ad:af:b2:0f:2b:f9:90:47:3a:58:41:b7:a7: 95:38:22:0b -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9ysMMLmLS4Vnl4U0yCA91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTRmMDViYzE4ZjUzYjgwZmMyOWMwYWQxYjI4Mzg5MmJkZmUzNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk3lfZqEugPeUffr7lNTD2Ydp603 6AtE2foUhvQyZ5wYJluP+Zz3r3G7b5hhR53uwV79lRgJrHBTBr/MA5hQ7v6vjjFJ dTHziJ5GXFIMwbfnyc0vikDz53Y27zxzADqrTsfgQXCcM3yA12Gp/XllW9dGl+5d hHgKn//IMY71dhKU+8PaKw1P/uDVMVtbfi2YZWdeZukNqCljCbwBST9zQcmTYD9c 4QIaOhEZgIeh9Swl/hI83kqpjQeaDcEYApbEYMdijITZcgI96OvrZXYdbQ2Da5fE cm6nzE78Zqrc/uOar+s4I/B2R5Jhn+HR+I/jj98nRY95W3XvQtNkKpJpTwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFMFPBbwY9TuA/CnArRsoOJK9/jbPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2L2VmYzBi ZC0zY2NiLTQ3YjUtOGQzNC0yNDc2MzAxMWQwMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZWZjMGJk LTNjY2ItNDdiNS04ZDM0LTI0NzYzMDExZDAyNC8xL3dVOEZ2QmoxTzREOEtjQ3RH eWc0a3IzLU5zOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwzawMA8EAgACMAkDBwAgAQZ8IFwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAMfLMA0GCSqGSIb3DQEBCwUAA4IBAQAT7EDb7gfM HPIl8mCI9625MHWGqXX+KXCQ0OtIKhPv4MI31cHrtL2fKAjb6pOXWoUn9OQU0AMB LaJaqRocJytKcNlixTrotOCi+WrIxQ6HDcZXwJEql4LSP7GQANIPQJ71C9ijhndH UEfA9inBEL/uk/hsjJI8wXN9Oipquv829M7MC8eqOWaUf1jT3593Xvce5ddowhUh UoQWCcZ3PiTNNxZ7/ls8cJeA81dq5uf140kRZoCLv0vMCd9Ru0QAukITUYQpDdrL rUWbpm4WGUiNjTLr/ZiKWjvyM2nTj8bw2J0BGY6fI7B89F8Oxr76Zq2vsg8r+ZBH OlhBt6eVOCIL -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:08 2026 by rpki-client