This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer File: wYXXJDrphs3khBTmrYHyIpwKV9g.cer (raw, json) Hash identifier: S0bzzc2f+0JHHwqus848e6v3NtWdSk4AMg4heSwJDs4= Subject key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC824ED9F81612BF940FEF941E8A69C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.216.227.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:24:ed:9f:81:61:2b:f9:40:fe:f9:41:e8:a6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:ee:01:a1:c1:dd:87:27:83:52:3e:32:a4: 50:b9:97:18:f5:79:49:6f:96:07:25:75:a2:09:72: b2:c9:69:6b:31:94:d4:75:45:ad:a6:09:66:61:aa: 27:3b:77:8f:33:52:0c:88:93:d0:35:8c:0a:51:06: ff:89:3d:e9:68:df:c9:46:91:c6:3f:63:e5:5c:1c: b2:32:19:f9:00:3f:4a:33:1c:3f:2c:b7:bc:b1:d6: b3:9a:f0:c4:06:38:eb:c2:9d:36:0f:bb:0f:14:4f: 7f:01:34:53:74:0c:0f:23:f4:8c:54:c9:fa:30:61: d2:63:17:96:20:0f:f0:a3:60:ad:96:fa:20:31:6a: 8a:c2:91:d8:1e:1e:50:8d:6b:48:e5:82:c1:2d:a2: 55:e2:62:c2:f7:ce:b6:fe:d8:80:b7:30:51:ff:11: f6:bf:27:7c:44:df:ac:c1:db:66:55:fb:c6:24:81: ca:62:a3:be:02:30:9d:45:f6:7a:db:87:af:cd:ce: 8e:8b:8b:dd:d0:16:16:ab:1f:64:e3:db:61:2a:08: 7f:53:98:b4:f7:a1:8d:57:6f:b5:d4:f3:b1:a1:a3: aa:60:9f:6a:26:a6:60:1b:e1:2f:09:da:ff:c3:09: 91:5c:67:0e:ff:b8:b2:ae:dc:9f:7a:2b:4b:f8:7c: 59:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.227.0/24 Signature Algorithm: sha256WithRSAEncryption 48:e0:a8:0b:28:a5:72:9f:71:44:48:fb:95:49:e2:59:ef:45: 42:27:ef:54:ba:50:ab:8f:36:42:79:57:3f:00:95:cc:b3:96: e7:38:2a:d3:c8:80:03:4a:56:b7:32:7a:5e:4c:d8:08:4b:f9: 8b:61:64:2e:5d:8e:30:7f:35:47:7f:6a:79:9f:5a:6b:95:04: 27:6f:3b:89:f0:5a:db:fd:32:95:86:75:36:00:69:b0:51:d2: a3:5f:83:7a:ea:0f:7e:de:62:bd:28:ed:f3:d3:10:ac:f7:3b: f8:95:e5:df:26:a2:9d:41:d2:79:ef:db:1b:58:f5:0f:14:7e: b3:f0:03:a9:cd:73:62:8d:71:ce:73:54:20:f7:84:03:e4:76: 7a:d2:0a:1a:cc:ae:74:e1:1e:d5:8f:a3:30:75:be:4c:c6:45: 46:6b:21:4a:94:1c:7a:80:54:f3:b6:45:70:2d:76:3e:a4:fc: a1:2a:c9:d5:c0:9c:85:84:d1:c6:dd:2d:1c:0f:a0:ce:3e:3f: 8d:2c:f4:78:87:23:1a:26:e2:71:65:4e:dd:2f:49:a2:d5:f2: 64:04:f8:21:de:0e:02:ae:89:58:03:4a:c2:41:6b:4e:d4:1a: 56:5c:17:42:a3:ed:c3:56:b1:7c:d1:ac:84:f8:ed:a3:b7:12: 21:97:4b:e6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6yCTtn4FhK/lA/vlB6KacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTg1ZDcyNDNhZTk4NmNkZTQ4NDE0ZTZhZDgxZjIyMjljMGE1N2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIjuAaHB3Ycng1I+MqRQuZcY9XlJ b5YHJXWiCXKyyWlrMZTUdUWtpglmYaonO3ePM1IMiJPQNYwKUQb/iT3paN/JRpHG P2PlXByyMhn5AD9KMxw/LLe8sdazmvDEBjjrwp02D7sPFE9/ATRTdAwPI/SMVMn6 MGHSYxeWIA/wo2CtlvogMWqKwpHYHh5QjWtI5YLBLaJV4mLC9862/tiAtzBR/xH2 vyd8RN+swdtmVfvGJIHKYqO+AjCdRfZ624evzc6Oi4vd0BYWqx9k49thKgh/U5i0 96GNV2+11POxoaOqYJ9qJqZgG+EvCdr/wwmRXGcO/7iyrtyfeitL+HxZ/wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFMGF1yQ66YbN5IQU5q2B8iKcClfYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2ZjMzky YS02YTNlLTRkYTUtYjdiOS1hN2VkYjdkM2Y1MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvZmMzOTJh LTZhM2UtNGRhNS1iN2I5LWE3ZWRiN2QzZjUzNy8xL3dZWFhKRHJwaHMza2hCVG1y WUh5SXB3S1Y5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw9jjMA0GCSqGSIb3DQEBCwUAA4IBAQBI4KgL KKVyn3FESPuVSeJZ70VCJ+9UulCrjzZCeVc/AJXMs5bnOCrTyIADSla3MnpeTNgI S/mLYWQuXY4wfzVHf2p5n1prlQQnbzuJ8Frb/TKVhnU2AGmwUdKjX4N66g9+3mK9 KO3z0xCs9zv4leXfJqKdQdJ579sbWPUPFH6z8AOpzXNijXHOc1Qg94QD5HZ60goa zK504R7Vj6Mwdb5MxkVGayFKlBx6gFTztkVwLXY+pPyhKsnVwJyFhNHG3S0cD6DO Pj+NLPR4hyMaJuJxZU7dL0mi1fJkBPgh3g4CrolYA0rCQWtO1BpWXBdCo+3DVrF8 0ayE+O2jtxIhl0vm -----END CERTIFICATE-----Generated at Mon Jan 26 20:48:53 2026 by rpki-client