This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer File: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer (raw, json) Hash identifier: RZOZDENSJqrRM4f54Su32Gh620EBjRvoHm0JnZmHSxc= Subject key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D0B3F0A888256604D41B7A3BBE94A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56650 IP: 193.34.205.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0b:3f:0a:88:82:56:60:4d:41:b7:a3:bb:e9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20e52dab06da4175b45c777961f4ea39b9307b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:ca:fa:f1:db:7b:a2:c8:b3:b8:28:51:91: bc:bb:1b:da:55:aa:c3:f6:61:4e:7b:d3:31:12:f5: 23:43:6f:a1:58:68:c1:94:6d:28:0d:e0:95:db:a3: 1a:e2:b9:0f:95:ef:6f:8d:4f:af:69:06:61:2e:ec: 29:f6:ac:20:2d:05:b7:8f:47:46:a2:fb:06:fb:21: c6:c0:fc:7c:04:e2:69:44:1d:5f:c8:2c:03:8e:a8: 77:01:1b:c9:11:b8:96:3a:4e:59:1e:d4:6d:b9:38: 87:68:d0:70:65:cf:3b:29:58:67:32:c4:2f:d6:29: 0d:9f:cd:d8:ed:c7:5d:ba:4e:b0:b2:23:d5:9e:8a: 85:67:fb:e5:cd:7b:b8:c8:d0:54:7b:ab:22:6a:5b: b8:a2:1b:07:e1:c3:93:70:78:b7:97:d2:f8:df:e0: d7:03:e7:74:3f:ec:d2:b0:50:91:ec:d1:47:b6:77: 14:0b:66:c2:87:1e:3e:fe:fa:1d:7f:79:90:96:35: e4:c6:43:89:f6:c9:61:85:d9:02:c2:9c:29:b3:06: 53:d5:5e:8a:fa:f9:e6:1d:e9:09:bf:51:7c:36:82: 39:78:54:1d:5b:2c:cf:b2:5d:6f:7b:5a:0b:25:40: a8:9f:78:73:ea:88:67:78:ad:b7:c0:b5:57:c5:02: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.205.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56650 Signature Algorithm: sha256WithRSAEncryption a5:61:0f:8b:82:d0:77:6e:d8:dd:08:c0:f6:96:01:f0:2b:aa: 4f:8a:b7:95:97:2e:e6:f6:3a:8b:45:28:37:9d:72:cc:c5:b9: 4b:a7:54:17:8f:3d:18:4d:d4:80:85:a9:f8:25:7f:90:cf:e7: 01:8e:58:da:a2:3d:26:fa:e5:0b:9b:84:fc:bb:a0:a2:e8:ea: 5a:e6:60:4c:d5:de:85:be:d8:37:03:76:50:65:76:47:b4:03: 1f:31:e6:5c:4d:a5:b5:0b:31:f4:ce:d8:86:bb:e6:a4:64:eb: 06:44:1d:cd:20:7c:71:2c:7d:fc:85:8b:9c:b0:4d:32:fb:2c: 76:9d:c5:d1:d2:ae:5c:15:5d:c1:57:fa:7a:42:6d:58:5f:5a: 12:f0:3f:e8:78:6d:1c:14:ae:7e:57:f5:4f:2a:ec:ae:2c:d6: 3f:c3:02:b8:82:71:00:33:23:8c:ea:46:db:f0:76:a6:58:c3: 16:da:ff:d1:1e:33:5b:d7:d8:39:06:04:4f:86:2d:28:92:1c: 0b:3c:c0:ca:d6:b1:53:22:db:19:d1:8b:0b:a8:17:93:b4:62: 57:b0:34:6b:60:61:22:79:98:c4:f4:0d:57:93:bb:3c:18:11: a1:12:3f:d7:54:88:e1:0a:0c:70:0c:1d:e1:58:30:bd:73:8b: 53:e0:1d:bc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XQs/CoiCVmBNQbeju+lKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjBlNTJkYWIwNmRhNDE3NWI0NWM3Nzc5NjFmNGVhMzliOTMwN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BjK+vHbe6LIs7goUZG8uxvaVarD 9mFOe9MxEvUjQ2+hWGjBlG0oDeCV26Ma4rkPle9vjU+vaQZhLuwp9qwgLQW3j0dG ovsG+yHGwPx8BOJpRB1fyCwDjqh3ARvJEbiWOk5ZHtRtuTiHaNBwZc87KVhnMsQv 1ikNn83Y7cdduk6wsiPVnoqFZ/vlzXu4yNBUe6sialu4ohsH4cOTcHi3l9L43+DX A+d0P+zSsFCR7NFHtncUC2bChx4+/vodf3mQljXkxkOJ9slhhdkCwpwpswZT1V6K +vnmHekJv1F8NoI5eFQdWyzPsl1ve1oLJUCon3hz6ohneK23wLVXxQK8LwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMIOUtqwbaQXW0XHd5YfTqObkwe3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2ZlNTA5 NC1mMTg4LTQ3ZjYtYjk0NS1lNGM3MTgwNzMwY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZmU1MDk0 LWYxODgtNDdmNi1iOTQ1LWU0YzcxODA3MzBjYi8xL3dnNVMyckJ0cEJkYlJjZDNs aDlPbzV1VEI3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSLNMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdSjANBgkqhkiG9w0BAQsFAAOCAQEApWEPi4LQd27Y3QjA9pYB8CuqT4q3lZcu 5vY6i0UoN51yzMW5S6dUF489GE3UgIWp+CV/kM/nAY5Y2qI9JvrlC5uE/Lugoujq WuZgTNXehb7YNwN2UGV2R7QDHzHmXE2ltQsx9M7YhrvmpGTrBkQdzSB8cSx9/IWL nLBNMvssdp3F0dKuXBVdwVf6ekJtWF9aEvA/6HhtHBSuflf1TyrsrizWP8MCuIJx ADMjjOpG2/B2pljDFtr/0R4zW9fYOQYET4YtKJIcCzzAytaxUyLbGdGLC6gXk7Ri V7A0a2BhInmYxPQNV5O7PBgRoRI/11SI4QoMcAwd4VgwvXOLU+AdvA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:59 2026 by rpki-client