This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/warwQ_4gnANFNiIF-Mx81hlRwn4.cer
File: warwQ_4gnANFNiIF-Mx81hlRwn4.cer (raw, json)
Hash identifier: CFLvcNfu4nXGy4eXnjWJulNMUzu6DRvS3uHY+QOHjlA=
Subject key identifier: C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C124AF41BD859733CDB228E536E3BE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:18:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210664
IP: 185.150.88.0/22
IP: 2a05:4b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:4a:f4:1b:d8:59:73:3c:db:22:8e:53:6e:3b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1aaf043fe209c0345362205f8cc7cd61951c27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:4f:57:67:7c:eb:5d:77:24:9a:8e:03:5c:
67:84:52:f1:7c:6f:05:51:86:9f:a9:71:06:c1:0b:
58:33:bd:f8:38:80:a8:c5:5b:60:fb:eb:af:2d:87:
65:a1:bd:91:55:a1:8a:d9:af:7a:c3:c7:5d:e8:71:
ec:2f:47:3a:33:f8:34:16:41:15:ce:ed:f6:07:49:
1d:7d:74:bd:31:0b:2d:25:a3:cb:68:07:5d:5e:2f:
72:a4:f5:6a:51:68:ba:65:e4:1e:ee:8f:49:e2:59:
6e:a1:e4:8b:e9:d9:b7:03:8e:17:89:73:02:a8:83:
52:41:ad:ce:42:58:ba:89:e2:4b:5a:56:50:cc:86:
44:85:69:b1:a7:06:c2:2d:ef:9e:e0:4b:30:68:2b:
30:3c:88:0f:d6:56:bf:70:d8:40:b5:78:7c:84:90:
f4:1d:b4:ff:fc:31:4e:ac:64:a2:d6:4d:64:b9:9f:
f9:0d:ac:7c:27:60:e0:9f:d5:12:56:61:09:54:ca:
8e:6e:86:be:b6:17:23:ba:2f:a0:87:27:ab:f2:80:
d2:6c:fe:cb:4e:e5:5b:0e:dc:9e:e6:4c:33:5f:b5:
5a:de:1f:3b:85:7a:a7:38:b4:ba:19:92:78:d2:85:
ef:33:6b:93:ba:e5:ad:cf:8b:44:26:6e:a3:3f:7c:
d0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:F0:43:FE:20:9C:03:45:36:22:05:F8:CC:7C:D6:19:51:C2:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6c27f0-137d-471b-9d1d-b7578b10ba7e/1/warwQ_4gnANFNiIF-Mx81hlRwn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.88.0/22
IPv6:
2a05:4b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210664
Signature Algorithm: sha256WithRSAEncryption
4c:62:29:0e:58:05:1f:6a:8e:ab:dd:82:4a:88:ee:88:ce:ac:
19:ee:ed:cd:f3:e7:42:b3:82:db:07:a1:99:f0:c2:5c:3a:a4:
c0:e7:69:6e:7d:85:e2:6f:9e:ac:eb:42:c3:04:c9:0e:dc:6a:
23:ee:4f:66:af:4e:92:bb:30:ee:c4:e5:19:91:36:f7:59:97:
15:ff:c4:ec:7c:65:f7:16:c8:83:46:71:22:3b:2e:84:7b:23:
2d:ff:8a:f2:b5:2a:f3:36:b5:73:6f:82:a1:9a:3c:71:b0:33:
23:a8:9d:10:18:04:60:d0:c9:fd:d6:15:30:fc:e7:5a:79:b8:
88:2f:4e:f0:82:d1:38:68:57:93:83:62:0e:25:78:30:c5:64:
e3:40:de:03:99:cc:de:ea:cd:72:4d:85:0e:aa:14:f3:7d:24:
7d:b3:c4:c4:60:e2:58:4a:b3:ab:13:4b:a4:15:b5:33:8d:ee:
f4:fc:3e:de:c0:6f:c3:41:f3:13:02:e3:6e:84:78:12:ed:bf:
81:6b:04:58:cf:76:cb:2b:d0:e5:7d:0d:26:db:d4:17:34:9c:
b2:f1:52:93:db:a4:81:8b:fd:de:a4:75:98:69:47:63:45:44:
97:6f:6a:e9:74:3a:0d:0b:30:f2:6e:ea:95:a6:8e:3b:c6:8a:
70:6c:2f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:27 2026 by rpki-client