This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer File: wb80sZClHOUwAleRGvMEBPSVH7Y.cer (raw, json) Hash identifier: wV42RZQAXX+H79ElGGz1MvgwrQsYZTJ+ef0AIbKg5Us= Subject key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15E69AE088C62F81434EB2E78EE4EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42433 IP: 81.23.242.0/23 IP: 92.118.110.0/24 IP: 2a0f:ec40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e6:9a:e0:88:c6:2f:81:43:4e:b2:e7:8e:e4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1bf34b190a51ce5300257911af30404f4951fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:80:e1:4f:24:2a:33:39:b7:d3:5e:f8:47: 85:9b:8a:80:8a:0b:88:15:b5:3a:0e:29:c3:94:de: e2:cc:22:03:0c:30:eb:84:ee:c2:91:42:30:c9:37: 29:be:e1:33:4e:6a:5b:00:b7:fd:2c:79:b1:73:64: 3d:b1:dd:5c:0b:36:85:29:7b:11:5c:7d:b3:41:bf: 27:f7:30:ea:55:e9:55:e0:4f:fb:2d:c7:cc:75:f8: 22:92:4f:48:33:d0:cc:39:c1:54:fe:9c:81:9a:40: e2:f3:96:4e:1e:86:ce:c3:fa:60:67:e8:e6:c9:16: 85:a6:08:e4:73:9f:3c:38:a2:ca:ae:5c:da:1f:72: 41:33:22:47:3f:98:4b:7e:0f:11:f6:76:94:04:4a: 9d:4b:ef:a9:ee:e6:2e:a0:ce:ed:e5:ad:9b:a7:0b: 0e:4a:67:79:ad:e6:17:83:0b:66:20:24:23:9b:de: 33:fa:19:3a:53:cb:83:ef:be:5c:b4:5a:bb:4b:a6: 94:f8:73:03:84:dc:30:e5:d1:b0:66:96:40:c4:bc: ad:40:ea:fc:d6:2f:50:7c:29:03:a0:03:23:71:fd: ca:2f:f8:29:db:68:7b:bd:26:06:49:bc:d3:67:71: 43:54:44:8a:24:a5:fc:dd:09:f1:a4:f0:e6:80:b8: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.23.242.0/23 92.118.110.0/24 IPv6: 2a0f:ec40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42433 Signature Algorithm: sha256WithRSAEncryption 5a:d2:39:b4:fd:f7:e2:fa:44:3a:78:57:3a:cc:0e:8a:6e:ae: 1a:33:2f:ce:ad:13:73:13:09:5e:25:d9:8b:a3:24:82:7c:79: bb:f2:45:e6:ff:42:30:7e:b7:a7:c4:54:a4:2d:47:65:79:3c: 13:dc:da:95:f0:78:75:a2:b9:05:b4:a7:c8:4e:47:c2:b0:b3: b9:3c:31:17:37:52:72:b8:85:0c:ee:b8:7f:fb:ac:43:75:b7: dc:85:37:ae:3b:25:83:d0:56:05:40:b8:a3:dd:c4:83:40:c2: 4c:92:19:2d:c8:9d:86:46:3e:0a:b2:07:2a:c8:24:ee:d9:ba: 18:7a:b2:83:11:77:4b:93:ee:a9:45:7c:58:39:2f:67:37:86: 52:dc:43:93:93:f7:6d:37:e6:3f:7f:26:c3:8e:bd:6f:ba:54: 48:19:bc:1a:1d:ae:82:4f:65:87:f7:2c:1e:46:f3:ed:77:4f: 4f:b3:44:37:b2:bd:cb:8e:c3:63:9a:ba:87:cd:61:2f:94:ac: 80:5a:ee:55:f3:4d:94:e0:33:d3:c4:a4:0b:99:6d:d5:0f:0e: 47:2d:bc:bc:a7:bc:05:d5:6a:26:05:c4:1f:ba:a1:2c:89:77: ac:ca:f0:db:6e:21:57:03:45:14:7b:19:45:6f:ad:aa:27:2b: b7:23:f2:de -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/Feaa4IjGL4FDTrLnjuTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWJmMzRiMTkwYTUxY2U1MzAwMjU3OTExYWYzMDQwNGY0OTUxZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvuA4U8kKjM5t9Ne+EeFm4qAiguI FbU6DinDlN7izCIDDDDrhO7CkUIwyTcpvuEzTmpbALf9LHmxc2Q9sd1cCzaFKXsR XH2zQb8n9zDqVelV4E/7LcfMdfgikk9IM9DMOcFU/pyBmkDi85ZOHobOw/pgZ+jm yRaFpgjkc588OKLKrlzaH3JBMyJHP5hLfg8R9naUBEqdS++p7uYuoM7t5a2bpwsO Smd5reYXgwtmICQjm94z+hk6U8uD775ctFq7S6aU+HMDhNww5dGwZpZAxLytQOr8 1i9QfCkDoAMjcf3KL/gp22h7vSYGSbzTZ3FDVESKJKX83QnxpPDmgLgcKwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMG/NLGQpRzlMAJXkRrzBAT0lR+2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzE1M2Q1 My02ZTY5LTQzMDEtYWJkMy1mMzExYmFjMmEzN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMTUzZDUz LTZlNjktNDMwMS1hYmQzLWYzMTFiYWMyYTM3Zi8xL3diODBzWkNsSE9Vd0FsZVJH dk1FQlBTVkg3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBURfyAwQAXHZuMA0EAgACMAcDBQAqD+xAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwClwTANBgkqhkiG9w0BAQsFAAOCAQEAWtI5 tP334vpEOnhXOswOim6uGjMvzq0TcxMJXiXZi6Mkgnx5u/JF5v9CMH63p8RUpC1H ZXk8E9zalfB4daK5BbSnyE5HwrCzuTwxFzdScriFDO64f/usQ3W33IU3rjslg9BW BUC4o93Eg0DCTJIZLcidhkY+CrIHKsgk7tm6GHqygxF3S5PuqUV8WDkvZzeGUtxD k5P3bTfmP38mw469b7pUSBm8Gh2ugk9lh/csHkbz7XdPT7NEN7K9y47DY5q6h81h L5SsgFruVfNNlOAz08SkC5lt1Q8ORy28vKe8BdVqJgXEH7qhLIl3rMrw224hVwNF FHsZRW+tqicrtyPy3g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:54 2026 by rpki-client