This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer File: wW_hAJ--ZJH3sVze8Y75bA69RZs.cer (raw, json) Hash identifier: zjmgoNLAfFhhKoPvKnDFoRgto+0iNTI4eSS8G+iK3sQ= Subject key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE5885C6EBA32C51290A98384FFDBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.53.92.0/24 IP: 194.26.28.0/24 IP: 194.59.160.0/22 IP: 194.146.37.0/24 IP: 194.169.52.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:58:85:c6:eb:a3:2c:51:29:0a:98:38:4f:fd:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:98:82:51:8a:e7:1c:70:44:3a:0e:2d:fb:d7: 4e:72:fe:d9:c5:6b:c1:9f:8a:32:4a:f0:f6:c7:18: 04:eb:fa:a4:c5:7d:d0:35:20:c2:6f:b1:f6:25:a3: 2e:db:7c:fc:7f:82:a0:c0:4f:25:a7:c9:5b:f4:6d: e9:6a:ae:18:2d:00:e4:82:17:4e:bd:71:46:82:02: 5f:74:1e:4f:41:7c:ef:5c:54:b5:55:be:90:c7:1f: aa:63:cf:1f:95:9d:5b:32:8e:98:05:5f:24:38:65: a1:a2:f6:65:66:cc:77:dd:c1:99:0c:4a:ca:9f:c2: 3e:d2:b5:b3:0b:cd:15:e3:3f:f2:f2:6c:9a:aa:68: 49:01:86:1e:a5:0e:46:a0:95:98:b2:de:f4:11:ed: 7c:5b:a9:20:86:bf:10:47:7f:45:47:56:48:c6:8c: 19:44:56:d0:6e:19:20:fb:4b:35:7b:0d:55:45:21: 56:2c:96:0f:95:8e:4c:b2:76:74:5b:6c:06:01:bb: 3a:43:f9:e6:da:f1:f7:b0:ff:52:5c:97:d8:ee:8c: f3:29:ed:f6:4c:5f:1d:ed:a6:5e:cc:98:e5:38:ad: da:4f:4a:b4:83:a5:0e:fa:d9:a8:48:9f:23:9c:5c: 00:89:4f:c7:25:99:71:d0:37:41:53:f2:f8:e7:60: 67:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.92.0/24 194.26.28.0/24 194.59.160.0/22 194.146.37.0/24 194.169.52.0/24 Signature Algorithm: sha256WithRSAEncryption 47:0d:af:bf:7d:51:c8:d5:b1:86:26:5c:aa:92:00:05:0b:f4: 2a:51:86:f3:00:e6:ab:0b:ca:af:cd:21:bc:7a:bb:e6:bd:dd: cb:83:d4:17:a8:d6:b9:f5:18:84:12:77:52:71:d4:79:bc:28: e5:9a:44:a0:c6:27:72:3c:cb:c9:68:1f:9b:84:ea:b0:2e:46: 4f:93:f0:be:f3:52:f4:56:36:3e:c1:e6:04:02:3d:96:73:a2: 97:5d:06:55:13:f6:f1:12:b3:e1:f4:41:9c:86:b4:23:b9:6a: ab:a4:f1:33:a4:96:90:89:f2:46:73:b3:cc:b8:e1:99:bf:8b: b6:34:83:77:0b:a2:44:30:3f:f7:28:2e:e9:3e:bb:96:1b:98: 7e:98:8d:d2:c2:bf:8e:8d:fd:30:7b:fe:ea:86:8b:50:82:4b: 60:c7:15:b7:a4:80:1a:34:d8:10:df:e7:34:89:80:86:e7:90: e7:78:de:49:44:51:b7:63:74:d6:74:12:3e:12:5b:c0:bc:bf: 18:8c:f8:76:1b:1e:29:94:1b:1a:80:f0:72:63:5a:5b:31:d7: 08:30:43:29:d6:97:5d:03:e6:5b:52:cb:26:d2:f3:cc:ea:70: 9e:94:3b:0f:14:c5:0a:45:34:9f:c1:0c:9d:25:fa:7e:4c:98: e0:03:e1:59 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZt87liFxuujLFEpCpg4T/29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTZmZTEwMDlmYmU2NDkxZjdiMTVjZGVmMThlZjk2YzBlYmQ0NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZiCUYrnHHBEOg4t+9dOcv7ZxWvB n4oySvD2xxgE6/qkxX3QNSDCb7H2JaMu23z8f4KgwE8lp8lb9G3paq4YLQDkghdO vXFGggJfdB5PQXzvXFS1Vb6Qxx+qY88flZ1bMo6YBV8kOGWhovZlZsx33cGZDErK n8I+0rWzC80V4z/y8myaqmhJAYYepQ5GoJWYst70Ee18W6kghr8QR39FR1ZIxowZ RFbQbhkg+0s1ew1VRSFWLJYPlY5MsnZ0W2wGAbs6Q/nm2vH3sP9SXJfY7ozzKe32 TF8d7aZezJjlOK3aT0q0g6UO+tmoSJ8jnFwAiU/HJZlx0DdBU/L452BnSwIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFMFv4QCfvmSR97Fc3vGO+WwOvUWbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2U0N2Iz NS0zZmY1LTRiYTMtOTdkNi02NzZkMzdmM2EyOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvZTQ3YjM1 LTNmZjUtNGJhMy05N2Q2LTY3NmQzN2YzYTI5YS8xL3dXX2hBSi0tWkpIM3NWemU4 WTc1YkE2OVJacy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAkBAIAATAeAwQAwTVcAwQAwhocAwQCwjugAwQAwpIlAwQAwqk0 MA0GCSqGSIb3DQEBCwUAA4IBAQBHDa+/fVHI1bGGJlyqkgAFC/QqUYbzAOarC8qv zSG8ervmvd3Lg9QXqNa59RiEEndScdR5vCjlmkSgxidyPMvJaB+bhOqwLkZPk/C+ 81L0VjY+weYEAj2Wc6KXXQZVE/bxErPh9EGchrQjuWqrpPEzpJaQifJGc7PMuOGZ v4u2NIN3C6JEMD/3KC7pPruWG5h+mI3Swr+Ojf0we/7qhotQgktgxxW3pIAaNNgQ 3+c0iYCG55DneN5JRFG3Y3TWdBI+ElvAvL8YjPh2Gx4plBsagPByY1pbMdcIMEMp 1pddA+ZbUssm0vPM6nCelDsPFMUKRTSfwQydJfp+TJjgA+FZ -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:10 2026 by rpki-client