This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer File: wjpxafZJndKBXJF4qJC8TAUU3fk.cer (raw, json) Hash identifier: 0jeHzlsj2D0T0XBvjQ6RBNDpr/99Z6JexkZ1OedIzwM= Subject key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759486519948BC472DD2D14B0D010E8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft caRepository: rsync://rsync.rp.ki/repo/clonoth/1/ Notify URL: https://rrdp.rp.ki/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57196 IP: 193.32.100.0/24 IP: 2a13:7a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:48:65:19:94:8b:c4:72:dd:2d:14:b0:d0:10:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:24:40:80:d8:39:41:49:be:e4:d8:5d:4c:98: f0:32:b6:ff:10:1b:3b:d8:f9:d7:3a:c9:56:26:e0: b9:de:23:87:79:d7:e8:89:5c:6e:76:bd:21:60:0a: 55:31:62:ff:3e:8e:04:d9:2b:07:5b:6e:b8:11:0f: 49:f9:28:eb:63:fc:7c:8a:30:9d:ce:e7:c5:e5:dc: bb:f0:16:f9:1b:1e:c1:21:f7:3f:6f:0d:86:da:f2: 38:75:f1:9b:96:60:c7:12:26:5f:78:15:a0:8b:8f: 3d:bb:b8:09:a6:49:56:51:d4:e2:f4:72:1d:99:19: 73:4b:c9:10:26:6e:3a:7d:26:0d:ef:d1:b0:18:a3: a9:ca:0f:ac:67:f4:3c:a2:24:df:ef:4e:9d:38:6a: 64:11:48:3b:9d:d5:ba:16:48:5b:74:94:6d:b5:85: d1:e1:65:3e:d2:b2:d8:99:c8:b6:51:60:03:a2:e8: a9:a7:23:0f:42:f4:5e:86:9b:8b:9a:08:c0:66:08: f1:90:c5:1f:c8:45:10:62:2a:64:71:14:4d:57:f7: 06:69:4d:49:a8:2e:ad:f3:36:b0:d4:29:ca:9a:79: 80:c7:eb:10:e9:b7:cc:8e:be:0d:33:45:cb:1c:a2: 32:66:fa:56:d3:b5:02:4f:55:5c:46:3e:f3:b1:19: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.rp.ki/repo/clonoth/1/ RPKI Manifest - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft RPKI Notify - URI:https://rrdp.rp.ki/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.100.0/24 IPv6: 2a13:7a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57196 Signature Algorithm: sha256WithRSAEncryption 82:7f:3d:94:3c:3c:13:f9:68:96:a1:f4:cc:52:6f:04:c5:0d: 40:ea:7e:b7:e3:8a:74:da:28:19:1a:7b:4e:15:af:34:82:8f: c6:a3:16:5f:b2:1a:5c:62:1e:30:b3:0c:f7:64:8a:ad:14:33: b9:8a:9a:03:c7:1e:9e:ed:53:a3:3b:7e:18:42:37:23:d5:a8: 11:6b:2f:67:eb:1c:e6:78:be:04:52:63:ee:59:e2:0b:dd:60: 64:20:7a:6c:61:4e:c7:cc:f9:83:9f:26:c3:47:cc:20:f3:fa: 68:b7:c2:6c:11:57:80:b8:91:d4:91:33:9a:0f:8f:69:82:89: e3:4e:a2:aa:b7:c8:37:70:47:4c:6a:f3:c7:83:11:7f:25:0c: a6:c9:de:7c:4e:da:37:fb:05:07:1d:4d:70:1c:62:73:e4:d7: 38:a9:9b:af:94:0b:ea:33:bc:d3:14:4a:43:88:b5:75:6f:52: ba:1e:c3:f7:83:c4:df:4d:3a:3d:75:ac:9e:e3:8f:68:11:56: 34:f9:06:3f:74:0e:9f:3f:82:b2:98:ba:35:93:9c:54:23:33: 73:30:74:16:a5:e9:3f:07:5b:09:d6:58:f9:80:e4:0a:2a:fd: b8:4a:de:17:d9:0e:cb:98:29:62:fd:98:fc:79:de:51:ec:36: e9:c4:0e:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt3WUhlGZSLxHLdLRSw0BDoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjNhNzE2OWY2NDk5ZGQyODE1YzkxNzhhODkwYmM0YzA1MTRkZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CRAgNg5QUm+5NhdTJjwMrb/EBs7 2PnXOslWJuC53iOHedfoiVxudr0hYApVMWL/Po4E2SsHW264EQ9J+SjrY/x8ijCd zufF5dy78Bb5Gx7BIfc/bw2G2vI4dfGblmDHEiZfeBWgi489u7gJpklWUdTi9HId mRlzS8kQJm46fSYN79GwGKOpyg+sZ/Q8oiTf706dOGpkEUg7ndW6FkhbdJRttYXR 4WU+0rLYmci2UWADouippyMPQvRehpuLmgjAZgjxkMUfyEUQYipkcRRNV/cGaU1J qC6t8zaw1CnKmnmAx+sQ6bfMjr4NM0XLHKIyZvpW07UCT1VcRj7zsRnLjwIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFMI6cWn2SZ3SgVyReKiQvEwFFN35MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgc8GCCsGAQUFBwELBIHCMIG/MC8GCCsGAQUFBzAFhiNyc3lu YzovL3JzeW5jLnJwLmtpL3JlcG8vY2xvbm90aC8xLzBbBggrBgEFBQcwCoZPcnN5 bmM6Ly9yc3luYy5ycC5raS9yZXBvL2Nsb25vdGgvMS9DMjNBNzE2OUY2NDk5REQy ODE1QzkxNzhBODkwQkM0QzA1MTREREY5Lm1mdDAvBggrBgEFBQcwDYYjaHR0cHM6 Ly9ycmRwLnJwLmtpL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZI cnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZW SzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADBIGQwDQQCAAIwBwMFAyoT ekAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAN9sMA0GCSqGSIb3DQEBCwUAA4IB AQCCfz2UPDwT+WiWofTMUm8ExQ1A6n6344p02igZGntOFa80go/GoxZfshpcYh4w swz3ZIqtFDO5ipoDxx6e7VOjO34YQjcj1agRay9n6xzmeL4EUmPuWeIL3WBkIHps YU7HzPmDnybDR8wg8/pot8JsEVeAuJHUkTOaD49pgonjTqKqt8g3cEdMavPHgxF/ JQymyd58Tto3+wUHHU1wHGJz5Nc4qZuvlAvqM7zTFEpDiLV1b1K6HsP3g8TfTTo9 daye449oEVY0+QY/dA6fP4KymLo1k5xUIzNzMHQWpek/B1sJ1lj5gOQKKv24St4X 2Q7LmCli/Zj8ed5R7DbpxA6j -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:35 2026 by rpki-client