This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer File: wi1VOyjF0OpbHvYMm84z31C8tJM.cer (raw, json) Hash identifier: nNvohHLQf5ruYG98/4WJ4zgyNOYZ9i2UJ7bBv2oCp2o= Subject key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EE492CE1FE049CC5E59D7AE4C5DEB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48367 IP: 91.210.220.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e4:92:ce:1f:e0:49:cc:5e:59:d7:ae:4c:5d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:df:71:5c:d8:5d:28:b4:90:37:67:0f:bf: 5c:ee:02:3e:f5:e7:f1:98:32:d2:c2:2a:e4:6b:1c: c2:89:43:92:9e:17:72:b6:c2:84:26:d1:20:f1:ab: c2:f0:4d:c0:1e:2e:da:da:58:e3:33:07:6c:85:80: 39:78:35:ab:45:b9:50:a4:68:04:81:7d:fe:29:88: a1:b3:ac:0c:c5:98:70:db:ea:45:86:94:ee:6a:e5: 59:0b:3a:34:c0:a8:30:1d:e7:54:d6:9a:e6:b4:2b: b2:b3:57:3d:be:98:0e:31:af:32:17:28:a7:2c:c2: 6e:25:1a:b1:e3:82:10:3c:85:2d:19:21:ae:f1:d4: 1e:f5:a6:6d:1c:5f:85:bb:34:48:bb:72:79:7e:c6: d6:c0:01:05:1a:fe:02:9d:f7:81:6c:27:5d:00:66: 3d:8d:45:a2:1e:bf:dd:88:d0:e6:0b:bb:0c:af:aa: 5c:7e:85:90:8e:56:bb:9f:0e:3e:49:2d:06:80:b2: 51:24:a5:8c:34:7b:2c:7f:f5:38:f2:fe:6f:d4:26: 09:49:07:4c:99:b3:bd:66:fd:b4:4c:29:9c:54:7f: 19:6b:da:bf:71:84:28:18:88:f7:c2:84:3f:53:7a: 91:c6:69:a9:0e:86:a4:d9:ad:05:1b:1c:09:dc:9f: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.220.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48367 Signature Algorithm: sha256WithRSAEncryption ad:0b:0d:1b:ef:ce:ae:39:89:95:25:b5:81:73:a7:2f:48:85: cc:57:82:45:41:03:37:5b:38:2a:a2:66:b9:f4:f1:12:b4:68: 73:d8:d3:4b:2e:ba:f5:4c:32:bf:3a:be:7d:60:6a:14:61:09: 39:a8:49:18:82:55:59:56:ea:60:e6:50:52:f9:cb:30:3b:89: 92:2b:42:01:e6:25:47:5c:c4:04:04:1e:97:45:85:5f:5b:72: 36:0d:50:db:58:eb:39:64:ab:60:f1:13:40:88:b0:9a:d1:17: 76:f1:6b:33:a3:0d:f6:d2:d1:8c:e2:e9:39:71:1b:da:48:e6: 14:6b:e4:64:20:2c:ac:88:f2:46:9a:c1:8f:dc:f6:03:80:14: 79:d8:da:33:25:c8:a6:8c:c2:20:e8:62:25:d8:1b:b2:aa:f0: 12:4f:60:c4:7d:99:75:dd:30:ad:0f:d2:f0:6a:10:92:33:3c: 96:8a:0b:17:ed:72:83:4d:80:94:45:e9:bc:8d:3a:cc:29:a8: 49:cf:87:24:6b:1f:d4:9e:e0:67:cb:7e:ad:01:40:5d:50:44: a2:19:85:80:77:88:73:81:2f:05:e8:33:2b:4b:b6:16:13:bd: d4:f5:2d:dd:3b:9d:c1:da:f3:72:d0:81:0c:f6:81:0f:3f:25: de:05:5a:2a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fuSSzh/gScxeWdeuTF3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjJkNTUzYjI4YzVkMGVhNWIxZWY2MGM5YmNlMzNkZjUwYmNiNDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs13fcVzYXSi0kDdnD79c7gI+9efx mDLSwirkaxzCiUOSnhdytsKEJtEg8avC8E3AHi7a2ljjMwdshYA5eDWrRblQpGgE gX3+KYihs6wMxZhw2+pFhpTuauVZCzo0wKgwHedU1prmtCuys1c9vpgOMa8yFyin LMJuJRqx44IQPIUtGSGu8dQe9aZtHF+FuzRIu3J5fsbWwAEFGv4CnfeBbCddAGY9 jUWiHr/diNDmC7sMr6pcfoWQjla7nw4+SS0GgLJRJKWMNHssf/U48v5v1CYJSQdM mbO9Zv20TCmcVH8Za9q/cYQoGIj3woQ/U3qRxmmpDoak2a0FGxwJ3J+CqwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFMItVTsoxdDqWx72DJvOM99QvLSTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2UxNzY0 NC05M2Q0LTQ0NTctOGU1ZS05Njc1MDY4ODU3ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvZTE3NjQ0 LTkzZDQtNDQ1Ny04ZTVlLTk2NzUwNjg4NTdmMS8xL3dpMVZPeWpGME9wYkh2WU1t ODR6MzFDOHRKTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW9LcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC87zANBgkqhkiG9w0BAQsFAAOCAQEArQsNG+/OrjmJlSW1gXOnL0iFzFeCRUED N1s4KqJmufTxErRoc9jTSy669Uwyvzq+fWBqFGEJOahJGIJVWVbqYOZQUvnLMDuJ kitCAeYlR1zEBAQel0WFX1tyNg1Q21jrOWSrYPETQIiwmtEXdvFrM6MN9tLRjOLp OXEb2kjmFGvkZCAsrIjyRprBj9z2A4AUedjaMyXIpozCIOhiJdgbsqrwEk9gxH2Z dd0wrQ/S8GoQkjM8looLF+1yg02AlEXpvI06zCmoSc+HJGsf1J7gZ8t+rQFAXVBE ohmFgHeIc4EvBegzK0u2FhO91PUt3TudwdrzctCBDPaBDz8l3gVaKg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:41 2026 by rpki-client