This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer File: wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer (raw, json) Hash identifier: 3OGADMtMLODiXyRMKaMLFlKEF3YsvsaZe1LJSZIhWIw= Subject key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD201C44CBF863EC6A23866428776 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.12.212.0/22 IP: 45.66.8.0/22 IP: 45.88.76.0/22 IP: 45.88.104.0/22 IP: 45.91.200.0/22 IP: 45.132.104.0/22 IP: 45.147.196.0/22 IP: 77.83.172.0/22 IP: 80.85.136.0/21 IP: 81.91.176.0/22 IP: 85.209.88.0/22 IP: 91.211.248.0/22 IP: 92.119.112.0/22 IP: 95.215.204.0/22 IP: 103.246.144.0/22 IP: 176.57.68.0/22 IP: 185.154.12.0/22 IP: 185.203.240.0/22 IP: 185.206.212.0/22 IP: 185.209.20.0/22 IP: 185.213.208.0/22 IP: 185.219.80.0/22 IP: 185.224.132.0/22 IP: 185.231.68.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d2:01:c4:4c:bf:86:3e:c6:a2:38:66:42:87:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5e:b5:83:8b:c3:9a:7c:20:2a:c3:f9:f2:86: 64:3c:d3:c7:3b:8e:0a:17:39:ad:16:ea:cb:85:6b: 30:01:d8:39:08:8e:1e:5b:89:99:5a:53:ff:0e:cf: ba:22:28:06:45:36:de:39:3c:9f:dc:51:7c:71:b5: f0:a3:d6:a3:d6:6b:2d:6b:e8:2f:f3:e1:e9:94:cf: d3:0d:5f:0e:a5:bb:6d:bb:ac:c9:c1:5a:6a:b5:be: 1d:1b:76:9c:f4:4d:9f:50:bf:bb:f8:cc:83:56:4d: 62:74:fa:2d:14:1d:89:71:c2:58:68:6a:ed:eb:44: 4e:3b:dc:a7:13:7d:de:a3:78:da:e4:ee:b1:4f:15: 7e:09:51:f9:d0:8f:33:2a:56:57:94:b9:3d:bd:ce: 24:5c:e4:8b:07:97:ef:84:4b:09:f4:9f:1f:e3:19: ed:a7:42:03:e2:ff:96:6a:3e:35:a8:89:bc:7d:fc: c3:05:4c:11:1d:57:ec:84:90:64:d2:6d:1b:42:a6: 5e:ea:9f:2d:52:9c:e8:75:2e:25:5b:97:7c:de:1a: 5c:0d:d6:c3:d7:f9:b8:49:52:21:19:43:75:83:f9: 2c:e8:a1:3b:d8:cf:4f:14:42:00:29:09:f7:40:bd: 88:ff:59:e0:df:c1:85:52:c4:af:6f:22:b6:28:21: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.212.0/22 45.66.8.0/22 45.88.76.0/22 45.88.104.0/22 45.91.200.0/22 45.132.104.0/22 45.147.196.0/22 77.83.172.0/22 80.85.136.0/21 81.91.176.0/22 85.209.88.0/22 91.211.248.0/22 92.119.112.0/22 95.215.204.0/22 103.246.144.0/22 176.57.68.0/22 185.154.12.0/22 185.203.240.0/22 185.206.212.0/22 185.209.20.0/22 185.213.208.0/22 185.219.80.0/22 185.224.132.0/22 185.231.68.0/22 Signature Algorithm: sha256WithRSAEncryption 05:92:31:80:2b:5e:71:84:45:33:e1:df:bd:58:7d:0d:41:82: 59:b4:26:5b:ff:70:99:83:ff:d2:de:fd:0e:bd:33:16:70:52: 72:f6:df:de:8e:f7:3f:47:e4:55:4a:e3:42:de:04:12:af:36: 6e:bb:9c:12:ca:d4:1b:da:89:80:22:ee:cc:43:41:39:4a:df: 23:95:a8:3d:f4:e5:e2:91:30:da:cc:bf:d4:35:1d:b0:df:a8: cb:8b:fb:51:d7:89:9f:90:d2:a3:2d:3d:08:6b:6c:c7:69:b2: 84:62:7c:84:fc:86:71:03:29:a8:04:7e:76:74:64:6d:f3:53: 20:ec:7c:6a:ab:26:39:d9:c4:8b:1d:6d:e9:8a:db:06:4c:1f: ae:d5:ee:53:d6:4b:e7:89:9d:93:22:da:0f:36:e7:9f:86:71: 80:61:95:05:b9:fc:05:28:7f:f9:91:97:9a:cb:ae:3a:22:8d: 53:b4:91:c0:93:ba:96:44:66:cc:ea:0b:4a:64:fd:73:60:fe: 2a:cf:b8:1b:27:67:14:2b:36:46:de:95:b9:e2:36:d8:c5:3b: 4c:dc:7a:d4:da:a7:7a:13:17:c3:05:50:b4:c0:9b:1a:5a:92: 97:0a:6a:57:20:f2:53:ac:3d:16:e0:a7:96:67:d9:ce:7f:b9: 90:65:ea:cd -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISAZt9ytIBxEy/hj7GojhmQod2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWQzNjllNjZjZGJlMzBkN2IzYWZmNjA4MWYyMGMxN2E5OGZkYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl61g4vDmnwgKsP58oZkPNPHO44K FzmtFurLhWswAdg5CI4eW4mZWlP/Ds+6IigGRTbeOTyf3FF8cbXwo9aj1msta+gv 8+HplM/TDV8Opbttu6zJwVpqtb4dG3ac9E2fUL+7+MyDVk1idPotFB2JccJYaGrt 60ROO9ynE33eo3ja5O6xTxV+CVH50I8zKlZXlLk9vc4kXOSLB5fvhEsJ9J8f4xnt p0ID4v+Waj41qIm8ffzDBUwRHVfshJBk0m0bQqZe6p8tUpzodS4lW5d83hpcDdbD 1/m4SVIhGUN1g/ks6KE72M9PFEIAKQn3QL2I/1ng38GFUsSvbyK2KCF2ZQIDAQAB o4IDEzCCAw8wHQYDVR0OBBYEFMHTaeZs2+MNezr/YIHyDBepj9xbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzIyNDM1 MS0zYTQ3LTQwMTQtYjM5NS1hNjM0Nzk2MTA5NjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvMjI0MzUx LTNhNDctNDAxNC1iMzk1LWE2MzQ3OTYxMDk2OC8xL3dkTnA1bXpiNHcxN092OWdn ZklNRjZtUDNGcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGtBggrBgEF BQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAItDNQDBAItQggDBAItWEwDBAItWGgD BAItW8gDBAIthGgDBAItk8QDBAJNU6wDBANQVYgDBAJRW7ADBAJV0VgDBAJb0/gD BAJcd3ADBAJf18wDBAJn9pADBAKwOUQDBAK5mgwDBAK5y/ADBAK5ztQDBAK50RQD BAK51dADBAK521ADBAK54IQDBAK550QwDQYJKoZIhvcNAQELBQADggEBAAWSMYAr XnGERTPh371YfQ1Bglm0Jlv/cJmD/9Le/Q69MxZwUnL2396O9z9H5FVK40LeBBKv Nm67nBLK1BvaiYAi7sxDQTlK3yOVqD305eKRMNrMv9Q1HbDfqMuL+1HXiZ+Q0qMt PQhrbMdpsoRifIT8hnEDKagEfnZ0ZG3zUyDsfGqrJjnZxIsdbemK2wZMH67V7lPW S+eJnZMi2g8255+GcYBhlQW5/AUof/mRl5rLrjoijVO0kcCTupZEZszqC0pk/XNg /irPuBsnZxQrNkbelbniNtjFO0zcetTap3oTF8MFULTAmxpakpcKalcg8lOsPRbg p5Zn2c5/uZBl6s0= -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:36 2026 by rpki-client