This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer (raw, json) Hash identifier: EU2FULTBSNlzlw1h9xFDALNsTrjpFgRa4zsh5WLHkeE= Subject key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B8080E7CB3C3475E7941C094618DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51297 AS: 59655 IP: 176.97.156.0/23 IP: 178.255.200.0/21 IP: 185.199.12.0/22 IP: 2a01:a440::/32 IP: 2a0a:92c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:80:80:e7:cb:3c:34:75:e7:94:1c:09:46:18:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:45:83:71:2b:a3:60:53:13:5b:75:0f:49: bd:17:0f:e2:63:db:28:2d:ca:2f:63:3f:03:76:42: c5:8f:93:32:c0:85:c6:5a:26:70:90:2b:1b:75:3b: 21:53:3a:9e:49:11:ac:48:0f:fc:31:60:4d:7e:af: 7b:fa:14:d5:b5:f8:6c:6c:0a:6d:c8:8f:41:c7:eb: fe:e7:eb:ff:57:e8:89:1d:27:e0:ba:3d:ea:90:9c: bd:19:91:b2:e8:d0:19:5e:df:92:1a:cd:89:7b:27: 00:6f:6f:66:bd:38:96:c3:4f:25:bf:d4:e2:45:0c: e6:4e:85:34:40:55:db:79:4c:88:dc:57:83:78:6a: 8c:ce:7a:e8:e9:2f:81:ff:04:8c:d6:8f:61:c7:31: 0c:8e:56:45:45:d4:be:91:cf:3a:b1:3e:db:ca:ab: 18:89:17:88:88:89:c2:91:55:18:a5:59:dc:0c:dc: 01:0b:11:84:1d:b6:8f:1a:6d:67:9d:60:53:f0:5c: 2e:f2:c9:dd:5f:06:06:1c:56:07:45:5e:40:dd:2c: 27:4a:ca:e5:d6:95:38:d0:b5:3c:a1:df:07:36:7e: 26:02:84:b8:0c:07:03:6c:2d:6b:94:bf:3f:4e:fb: 68:24:9c:0f:08:72:48:07:38:ad:9b:86:69:62:5d: 1f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.97.156.0/23 178.255.200.0/21 185.199.12.0/22 IPv6: 2a01:a440::/32 2a0a:92c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51297 59655 Signature Algorithm: sha256WithRSAEncryption 0a:16:bf:62:4a:ab:60:24:8e:87:42:85:54:4f:be:f4:f9:64: 03:7e:55:a6:08:9e:99:28:a1:9c:f7:7b:0b:f5:fb:40:bb:aa: 13:d0:cb:60:a3:78:81:38:92:6d:7f:79:51:c7:94:99:95:d4: 81:93:57:f8:1a:76:33:af:8c:ab:55:ab:59:d4:ef:be:eb:67: 2f:a0:1d:62:8e:80:64:55:68:e1:9e:d9:0e:fd:19:05:80:47: bd:8d:a2:43:dc:de:ea:15:ff:01:03:c1:4a:f4:29:fe:e2:2c: a1:bf:c5:85:2c:29:4b:da:b9:4f:01:a5:3c:1b:dd:bf:09:9a: e9:9d:a6:ee:94:d4:10:06:3e:43:3d:be:d6:3c:f6:75:10:53: 4f:8e:17:0d:0d:7d:ce:d7:9b:27:85:c3:9f:e3:ed:0c:88:f7: 49:33:43:00:1a:68:54:2c:e4:51:3a:bf:cc:ca:22:ca:40:5d: 17:a5:8b:f5:45:82:2c:4f:c9:31:21:ef:8c:59:43:1f:77:ec: d8:79:5d:ad:63:65:d6:da:2c:15:ec:21:2c:b8:40:7b:bc:38: 74:3b:5c:36:43:24:20:66:96:6f:f4:71:d0:fb:a9:29:43:08: cc:29:3a:1f:e5:51:12:b4:5e:55:09:ac:96:7b:70:04:33:af: 67:37:ad:6f -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt6W4CA58s8NHXnlBwJRhjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjI0YjY5ZWQ0YTIzYjdiM2UwNjc0YTNmOTk0NjAxZDczYjdiYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurtFg3Ero2BTE1t1D0m9Fw/iY9so LcovYz8DdkLFj5MywIXGWiZwkCsbdTshUzqeSRGsSA/8MWBNfq97+hTVtfhsbApt yI9Bx+v+5+v/V+iJHSfguj3qkJy9GZGy6NAZXt+SGs2JeycAb29mvTiWw08lv9Ti RQzmToU0QFXbeUyI3FeDeGqMznro6S+B/wSM1o9hxzEMjlZFRdS+kc86sT7byqsY iReIiInCkVUYpVncDNwBCxGEHbaPGm1nnWBT8Fwu8sndXwYGHFYHRV5A3SwnSsrl 1pU40LU8od8HNn4mAoS4DAcDbC1rlL8/TvtoJJwPCHJIBzitm4ZpYl0fjQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFMIktp7Uojt7PgZ0o/mUYB1zt7r/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzBhZjE5 OS1mZTQ3LTRmNWItOWM2OC0xNWI5NDQ1NzdjODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvMGFmMTk5 LWZlNDctNGY1Yi05YzY4LTE1Yjk0NDU3N2M4Ni8xL3dpUzJudFNpTzNzLUJuU2ot WlJnSFhPM3V2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQBsGGcAwQDsv/IAwQCuccMMBQEAgACMA4DBQAq AaRAAwUDKgqSwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAyGECAwDpBzANBgkq hkiG9w0BAQsFAAOCAQEACha/YkqrYCSOh0KFVE++9PlkA35VpgiemSihnPd7C/X7 QLuqE9DLYKN4gTiSbX95UceUmZXUgZNX+Bp2M6+Mq1WrWdTvvutnL6AdYo6AZFVo 4Z7ZDv0ZBYBHvY2iQ9ze6hX/AQPBSvQp/uIsob/FhSwpS9q5TwGlPBvdvwma6Z2m 7pTUEAY+Qz2+1jz2dRBTT44XDQ19ztebJ4XDn+PtDIj3STNDABpoVCzkUTq/zMoi ykBdF6WL9UWCLE/JMSHvjFlDH3fs2HldrWNl1tosFewhLLhAe7w4dDtcNkMkIGaW b/Rx0PupKUMIzCk6H+VRErReVQmslntwBDOvZzetbw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:35 2026 by rpki-client