This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer File: wg8AjBzMpi5vw1bWNCBVpifcbPI.cer (raw, json) Hash identifier: Gi7EUnPVNjboA4aLCVDQ1btmtWxE8cDXp+QA8+Lr0Hs= Subject key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E489B3C37BEF691B6088BC7930C73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196969 IP: 195.54.184.0 -- 195.54.189.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:48:9b:3c:37:be:f6:91:b6:08:8b:c7:93:0c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:cf:d4:33:6f:68:54:fa:86:cd:99:8f:6f: dd:96:84:7f:08:14:02:13:52:0f:76:28:07:03:98: 4c:60:8c:f0:a7:0f:95:4e:9b:37:0d:36:3d:28:b9: 4e:3e:06:5e:31:7f:93:fc:2a:e9:28:8d:50:b0:0e: 5c:a4:1a:82:ea:0d:97:64:67:a1:97:e0:64:25:2a: 99:e6:de:23:a7:2a:11:a7:dc:2d:60:7a:1d:da:f5: 5c:d3:e7:75:8e:a4:05:7d:50:4c:11:5f:be:a0:ce: be:9d:b6:93:91:9f:31:e2:b3:6b:86:96:ee:4a:54: 73:1a:a2:52:da:77:06:16:b2:24:e1:ac:af:75:7c: b0:b1:5c:dd:cf:8c:ca:d9:a4:82:5e:04:f6:94:72: 08:ca:16:42:ee:c3:17:64:d7:1c:6e:87:d1:da:7a: 25:a2:48:25:af:47:87:01:dc:b5:b9:a4:42:a4:b4: 10:8d:fd:95:10:f2:a6:5b:fa:c3:02:eb:2e:54:82: fc:ad:fe:e5:42:32:b2:84:49:19:f6:6c:0f:52:97: e0:85:15:3a:00:f8:a5:4f:ae:9b:1f:aa:ff:7c:ef: f1:5d:3c:68:2e:e9:20:ed:6b:85:82:b7:dc:e6:a6: 10:dc:a8:88:a0:7e:d9:4f:fd:1f:d4:96:48:da:c4: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.184.0-195.54.189.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196969 Signature Algorithm: sha256WithRSAEncryption 63:16:29:9c:b7:7a:1b:1b:4d:f7:12:d9:40:17:80:bf:60:30: bc:3d:63:90:51:76:24:54:39:37:25:ec:36:7c:ab:a9:28:77: f9:e7:db:df:16:6a:56:b1:20:17:44:e5:f9:97:bd:4c:2c:32: 5d:b5:37:9c:0c:69:b8:10:ff:8a:6f:8c:ec:6a:12:8d:ed:7c: 08:a2:e0:f7:8a:ca:0a:eb:23:20:34:f5:b8:8d:01:6f:2e:0d: 30:ac:d1:34:ae:36:56:54:d4:67:f7:7f:94:ff:d4:03:17:40: 29:0e:9a:1e:94:19:56:01:34:aa:34:a6:f0:3d:ef:af:68:87: b1:b8:e9:d3:0e:4d:00:2a:ca:03:05:41:a2:eb:9e:fe:34:be: 06:f7:65:98:ae:52:95:9a:bb:9b:f2:ba:59:79:af:1f:44:c8: 80:af:62:ef:bd:d2:d7:d6:0f:4f:04:29:ef:c9:22:77:84:e3: 66:14:f6:b5:f0:24:fa:61:25:b3:b7:f0:09:00:16:c4:02:02: 42:f4:f4:45:f1:6e:24:92:20:9c:18:41:cd:80:cd:3a:67:c6: 71:77:12:01:59:de:4a:56:97:6d:d6:95:b9:48:38:05:80:bb: 0d:e7:f5:e5:08:f4:ce:39:83:8f:7a:5b:01:ac:39:49:13:2f: 58:6c:83:f1 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt5fkibPDe+9pG2CIvHkwxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjBmMDA4YzFjY2NhNjJlNmZjMzU2ZDYzNDIwNTVhNjI3ZGM2Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW3P1DNvaFT6hs2Zj2/dloR/CBQC E1IPdigHA5hMYIzwpw+VTps3DTY9KLlOPgZeMX+T/CrpKI1QsA5cpBqC6g2XZGeh l+BkJSqZ5t4jpyoRp9wtYHod2vVc0+d1jqQFfVBMEV++oM6+nbaTkZ8x4rNrhpbu SlRzGqJS2ncGFrIk4ayvdXywsVzdz4zK2aSCXgT2lHIIyhZC7sMXZNccbofR2nol okglr0eHAdy1uaRCpLQQjf2VEPKmW/rDAusuVIL8rf7lQjKyhEkZ9mwPUpfghRU6 APilT66bH6r/fO/xXTxoLukg7WuFgrfc5qYQ3KiIoH7ZT/0f1JZI2sQH6wIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFMIPAIwczKYub8NW1jQgVaYn3GzyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzU4MGU1 MS00YzBkLTQxNjItYTlhZS03ZDdmY2U1ZGIwNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvNTgwZTUx LTRjMGQtNDE2Mi1hOWFlLTdkN2ZjZTVkYjA1Yy8xL3dnOEFqQnpNcGk1dncxYldO Q0JWcGlmY2JQSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAPDNrgDBAHDNrwwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAwFpMA0GCSqGSIb3DQEBCwUAA4IBAQBjFimct3obG033EtlAF4C/ YDC8PWOQUXYkVDk3Jew2fKupKHf559vfFmpWsSAXROX5l71MLDJdtTecDGm4EP+K b4zsahKN7XwIouD3isoK6yMgNPW4jQFvLg0wrNE0rjZWVNRn93+U/9QDF0ApDpoe lBlWATSqNKbwPe+vaIexuOnTDk0AKsoDBUGi657+NL4G92WYrlKVmrub8rpZea8f RMiAr2LvvdLX1g9PBCnvySJ3hONmFPa18CT6YSWzt/AJABbEAgJC9PRF8W4kkiCc GEHNgM06Z8ZxdxIBWd5KVpdt1pW5SDgFgLsN5/XlCPTOOYOPelsBrDlJEy9YbIPx -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:02 2026 by rpki-client