This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wa45j5qt0GOL_-okwceeuIMveHU.cer File: wa45j5qt0GOL_-okwceeuIMveHU.cer (raw, json) Hash identifier: RrtycYZcyqM14j6RxmjYC6TJvA7iDUMEHpOIMOdis4A= Subject key identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37274B6EC2FE13C8553A76FDBA0FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42019 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:72:74:b6:ec:2f:e1:3c:85:53:a7:6f:db:a0:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1ae398f9aadd0638bffea24c1c79eb8832f7875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:17:eb:0d:f6:f0:b1:75:64:56:57:b8:f0: 8d:a1:57:5a:a0:71:7f:f0:48:fc:f0:40:51:f2:db: bc:bf:5b:89:31:34:43:ab:7c:c8:4e:c7:3c:f2:09: 1a:6e:63:5e:14:2a:1f:56:b3:97:56:0c:d8:2a:19: 5c:61:76:bb:60:22:93:7e:62:68:c0:2a:e1:8d:42: 2d:55:fc:37:7b:17:26:3d:d8:8a:fe:63:22:02:48: 21:eb:60:83:92:59:a2:d7:be:d0:21:44:85:f5:0d: d3:9d:b5:11:e2:f4:93:59:7a:2d:ec:c4:0a:df:23: eb:da:16:03:ca:aa:16:73:47:09:d8:cb:b6:e5:cb: 4f:8f:16:c4:22:f4:d5:5b:e0:cb:14:4f:b9:46:31: 21:b1:d1:fb:2a:02:aa:c9:d7:a9:fd:f0:e1:f7:be: 87:08:f4:66:cd:15:02:d4:27:ad:bc:2d:d3:fd:3c: 32:c6:a3:19:d8:e5:6f:ea:56:d5:39:d6:95:29:46: f4:02:98:b1:61:ec:90:fc:e1:27:25:0b:03:d2:81: da:1e:0f:1d:5b:88:74:b7:fa:94:13:13:ab:95:59: 26:46:cd:31:da:a0:5c:cb:f7:83:8e:ac:1d:f6:29: 04:2c:da:26:d7:d8:e3:9e:a3:b1:98:cc:a4:e6:47: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AE:39:8F:9A:AD:D0:63:8B:FF:EA:24:C1:C7:9E:B8:83:2F:78:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c36c4a-88ae-4bd2-bf37-9d5e634aaf9f/1/wa45j5qt0GOL_-okwceeuIMveHU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 42019 Signature Algorithm: sha256WithRSAEncryption a2:ac:51:e5:e8:aa:55:3e:cb:3e:f2:15:d3:01:ac:57:d0:52: d6:9d:b3:52:3a:06:ed:97:b4:3e:b2:ab:5f:99:ad:7d:b6:0f: 6a:a2:7f:96:d6:4f:cc:36:f8:d4:0e:be:94:5d:60:9a:54:ec: eb:19:af:03:c2:d1:63:02:5c:b4:5f:d2:67:47:c8:34:d2:d4: 6e:64:de:0d:4e:94:68:96:57:8b:22:fc:ed:9d:38:17:90:43: 23:1b:ba:46:43:fe:76:30:4e:2f:a5:eb:f7:ba:df:bf:f4:eb: e6:04:cb:7f:62:5c:ab:d1:33:38:14:3f:c7:03:88:ca:01:67: da:c4:fd:d6:1e:c7:67:09:5d:7d:d4:27:0a:67:b1:16:ac:6a: 61:71:48:8d:4e:93:7f:a4:e9:76:a9:cc:56:8b:80:5b:32:d9: ff:0c:2c:66:98:4f:f5:5c:5f:f4:05:e2:da:49:b5:71:06:9f: c2:00:e9:e6:16:3c:e6:4c:05:00:e5:9b:ae:6d:cc:6b:0a:9d: 04:46:81:00:1c:90:20:af:13:fb:da:76:d9:3f:f8:0e:ba:50: 14:a6:04:91:96:e3:6d:11:94:f9:f8:98:17:97:f7:ec:9b:5d: d7:c0:bf:be:73:8f:61:af:b2:d9:c2:d1:c9:c3:99:3b:78:89: e7:d6:58:39 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4o3J0tuwv4TyFU6dv26D8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWFlMzk4ZjlhYWRkMDYzOGJmZmVhMjRjMWM3OWViODgzMmY3ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs0X6w328LF1ZFZXuPCNoVdaoHF/ 8Ej88EBR8tu8v1uJMTRDq3zITsc88gkabmNeFCofVrOXVgzYKhlcYXa7YCKTfmJo wCrhjUItVfw3excmPdiK/mMiAkgh62CDklmi177QIUSF9Q3TnbUR4vSTWXot7MQK 3yPr2hYDyqoWc0cJ2Mu25ctPjxbEIvTVW+DLFE+5RjEhsdH7KgKqydep/fDh976H CPRmzRUC1CetvC3T/TwyxqMZ2OVv6lbVOdaVKUb0ApixYeyQ/OEnJQsD0oHaHg8d W4h0t/qUExOrlVkmRs0x2qBcy/eDjqwd9ikELNom19jjnqOxmMyk5kdIrwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMGuOY+ardBji//qJMHHnriDL3h1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2MzNmM0 YS04OGFlLTRiZDItYmYzNy05ZDVlNjM0YWFmOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYzM2YzRh LTg4YWUtNGJkMi1iZjM3LTlkNWU2MzRhYWY5Zi8xL3dhNDVqNXF0MEdPTF8tb2t3 Y2VldUlNdmVIVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCkIzANBgkqhkiG9w0BAQsFAAOCAQEAoqxR5eiqVT7L PvIV0wGsV9BS1p2zUjoG7Ze0PrKrX5mtfbYPaqJ/ltZPzDb41A6+lF1gmlTs6xmv A8LRYwJctF/SZ0fINNLUbmTeDU6UaJZXiyL87Z04F5BDIxu6RkP+djBOL6Xr97rf v/Tr5gTLf2Jcq9EzOBQ/xwOIygFn2sT91h7HZwldfdQnCmexFqxqYXFIjU6Tf6Tp dqnMVouAWzLZ/wwsZphP9Vxf9AXi2km1cQafwgDp5hY85kwFAOWbrm3MawqdBEaB AByQIK8T+9p22T/4DrpQFKYEkZbjbRGU+fiYF5f37Jtd18C/vnOPYa+y2cLRycOZ O3iJ59ZYOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:06 2026 by rpki-client