This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer File: wjAq8UPBXarVAELYRV5onQgo7Kk.cer (raw, json) Hash identifier: XmMx7RrZijrl9qQilCetYwAUU4bKw1rV7S7StuxgDLg= Subject key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783526E3D1C969A28681C0C5392FD116 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205817 IP: 134.242.239.0/24 IP: 141.11.0.0/16 IP: 194.60.88.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:26:e3:d1:c9:69:a2:86:81:c0:c5:39:2f:d1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2302af143c15daad50042d8455e689d0828eca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:61:69:cf:0f:f0:01:9e:27:ee:f7:01:e3: 97:8a:bb:91:43:65:01:3b:bf:09:fd:a6:1d:57:ab: 92:d1:13:39:dc:b8:bd:10:0c:ce:94:16:fa:72:16: 6c:0a:47:98:b7:de:c8:ed:a3:b0:3c:d7:e0:56:20: 0d:c9:ee:95:87:2e:0a:de:e0:4a:db:08:34:37:3f: a2:9a:16:f0:fc:6b:17:f3:48:8e:b6:4d:76:c3:35: 07:16:12:6d:7a:4a:be:23:19:ee:f8:d7:93:b2:e4: 46:29:da:1a:29:92:f5:fe:83:27:5d:16:a4:2d:aa: cb:bc:de:15:da:eb:43:9f:a0:5b:67:cc:5b:15:b5: 30:a6:ef:80:c0:cf:e6:0c:40:07:ec:ad:0c:15:42: e3:71:57:7c:54:97:a4:35:1a:bf:3d:69:07:1c:4b: 68:ce:e5:5c:b3:8c:59:d4:19:74:04:76:75:d6:05: 48:33:b7:29:e6:8f:97:c2:8a:aa:ae:7a:61:4e:db: 57:33:02:75:b3:63:4e:09:80:49:2d:52:1a:66:fa: 5e:56:95:2e:48:62:c9:d7:0c:c6:30:6e:a7:72:a7: 27:78:02:13:56:ce:71:b6:64:34:f5:d5:b6:f5:fc: 84:6f:10:da:ed:94:ad:70:4a:0e:13:56:82:0e:28: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.242.239.0/24 141.11.0.0/16 194.60.88.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205817 Signature Algorithm: sha256WithRSAEncryption 34:fa:14:58:b8:6f:39:00:b5:fd:f4:73:06:63:01:70:42:80: f2:65:75:15:d5:9e:e5:27:b2:9f:be:8a:90:66:52:25:c9:29: 6e:11:9f:40:07:6d:43:50:d4:27:34:e7:48:5f:86:45:8f:67: dd:80:2b:34:a2:fb:53:20:83:32:1b:96:a9:c9:cc:c7:a2:26: b2:7f:f7:a7:88:2e:da:8a:c9:a6:b3:f4:39:8a:9f:17:93:6e: a7:7e:d0:d0:22:45:df:9f:ae:15:b1:41:b9:b7:af:03:07:ec: 10:83:68:d6:3e:18:f8:38:e5:cb:23:88:46:03:f9:9e:a7:2e: cb:9f:51:be:34:73:1e:aa:0c:e7:3e:42:2e:f7:68:0f:75:24: 94:e0:91:e3:1c:15:29:b1:15:21:06:5f:72:05:31:87:21:f3: 9d:63:ce:9d:6c:8b:b3:3d:e0:a0:b5:91:f5:12:15:a9:d9:2c: 01:0f:56:d7:49:fb:e6:18:c9:a9:f5:05:d8:4c:77:c9:53:cc: 07:98:3a:00:82:39:9f:a2:42:6f:69:ab:51:fe:7f:ed:c3:be: eb:c5:08:9f:ce:30:e7:c6:58:e5:16:e4:52:3a:f3:76:5d:23: 12:fb:51:2b:e1:f4:ac:38:33:b4:60:6d:77:d5:e1:e5:09:f0: 49:40:9b:75 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt4NSbj0clpooaBwMU5L9EWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjMwMmFmMTQzYzE1ZGFhZDUwMDQyZDg0NTVlNjg5ZDA4MjhlY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2elhac8P8AGeJ+73AeOXiruRQ2UB O78J/aYdV6uS0RM53Li9EAzOlBb6chZsCkeYt97I7aOwPNfgViANye6Vhy4K3uBK 2wg0Nz+imhbw/GsX80iOtk12wzUHFhJtekq+Ixnu+NeTsuRGKdoaKZL1/oMnXRak LarLvN4V2utDn6BbZ8xbFbUwpu+AwM/mDEAH7K0MFULjcVd8VJekNRq/PWkHHEto zuVcs4xZ1Bl0BHZ11gVIM7cp5o+XwoqqrnphTttXMwJ1s2NOCYBJLVIaZvpeVpUu SGLJ1wzGMG6ncqcneAITVs5xtmQ09dW29fyEbxDa7ZStcEoOE1aCDij53wIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFMIwKvFDwV2q1QBC2EVeaJ0IKOypMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2Ni NTVjLTk1NzEtNDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTkz Y2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5ZTRlLzAvQzIzMDJBRjE0M0Mx NURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQbMBkwFwQCAAEwEQME AIby7wMDAI0LAwQDwjxYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMj+TANBgkq hkiG9w0BAQsFAAOCAQEANPoUWLhvOQC1/fRzBmMBcEKA8mV1FdWe5Seyn76KkGZS JckpbhGfQAdtQ1DUJzTnSF+GRY9n3YArNKL7UyCDMhuWqcnMx6Imsn/3p4gu2orJ prP0OYqfF5Nup37Q0CJF35+uFbFBubevAwfsEINo1j4Y+DjlyyOIRgP5nqcuy59R vjRzHqoM5z5CLvdoD3UklOCR4xwVKbEVIQZfcgUxhyHznWPOnWyLsz3goLWR9RIV qdksAQ9W10n75hjJqfUF2Ex3yVPMB5g6AII5n6JCb2mrUf5/7cO+68UIn84w58ZY 5RbkUjrzdl0jEvtRK+H0rDgztGBtd9Xh5QnwSUCbdQ== -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:03 2026 by rpki-client