This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer File: wkDtrImIu1blLeEopdZaj07z8Tg.cer (raw, json) Hash identifier: gjxPqCBr1SPBmtEcrvwDbe46f4eAK2fliJHLWaBPAPo= Subject key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8FE592119086BB476710724D47BFF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49264 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:fe:59:21:19:08:6b:b4:76:71:07:24:d4:7b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:59:56:50:4d:02:c2:81:3e:5c:e9:b0:e5: eb:74:9d:ca:43:4a:c7:12:0f:ad:50:ff:75:a8:d0: 6b:d8:58:5f:f5:ff:e5:d6:fa:8c:c1:2d:22:92:42: aa:95:7f:a4:52:27:6c:ba:0a:81:ba:e5:83:f2:ca: 3a:2e:db:25:33:4d:8c:46:09:80:04:02:01:9b:75: 46:a2:47:6b:f6:95:6b:a1:01:39:4d:3b:8b:ba:cd: 81:1e:1a:9f:25:e4:6d:3c:20:a1:f4:34:ea:a6:8b: e5:e4:88:0e:09:32:66:88:b8:c1:94:ab:4a:6b:38: 7f:e5:2b:aa:c9:a5:a6:1a:57:1a:7f:1d:76:3c:e0: 17:82:05:74:9a:d0:03:14:35:f2:5f:9d:ec:d0:ef: d1:42:f1:14:6c:9d:81:36:72:7e:99:a0:9b:5b:0d: 00:f1:99:62:7a:16:b1:e4:12:6c:bc:fd:61:c5:db: a7:31:c5:05:8f:b7:63:ca:bf:62:ad:f6:47:25:46: 06:61:90:ae:eb:91:b0:08:89:2c:f2:0e:91:81:4e: fe:8e:ea:94:70:be:bb:41:b9:42:9d:57:6d:cd:35: 61:bc:6c:d4:50:3f:e0:6b:84:32:a7:06:45:03:d7: a4:64:f3:cc:a7:01:0f:38:58:39:d6:7b:31:50:91: e8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49264 Signature Algorithm: sha256WithRSAEncryption 38:1d:ec:25:9a:cf:7b:aa:12:db:2d:aa:5d:9b:78:77:e4:5c: 85:7d:00:c4:01:bd:2c:f9:86:30:a8:9e:52:82:2b:cd:51:21: 05:d0:b4:bf:cb:09:89:47:88:f4:ff:94:6c:55:fb:c6:58:b4: e3:06:c4:0e:24:42:b3:d9:29:6a:5f:fa:39:0d:6f:a1:b5:f1: ff:35:50:73:a1:e5:ac:38:38:f1:7a:8b:3e:1e:6c:c8:e7:01: 8b:2e:e8:27:96:65:ca:66:53:17:a6:a0:8b:29:a4:8a:28:ac: d8:d3:05:e0:25:40:ef:2d:79:cf:35:8c:c1:e4:b6:fb:c5:31: e7:65:bf:67:31:ce:b2:22:2f:50:17:1e:87:dc:32:4e:cc:1c: 11:7c:a5:a6:f4:57:25:4c:82:97:ce:7c:8b:cf:07:81:20:ca: a5:c0:d8:0e:b4:b9:1a:fa:ee:fe:49:eb:45:9e:ee:89:70:54: 11:92:e7:94:8b:41:33:c1:d8:a9:1a:24:b8:0b:7e:59:f6:29: 51:ee:9a:36:e2:fe:1a:53:2d:cd:2a:b4:25:00:c8:5a:52:8f: aa:1e:de:51:49:7d:b5:79:4a:04:d7:5b:18:45:c2:25:1d:6c: 48:07:40:9d:4c:c1:b1:99:36:77:8c:6a:7b:0a:bd:e7:cc:7b: f8:de:b8:27 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yP5ZIRkIa7R2cQck1Hv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjQwZWRhYzg5ODhiYjU2ZTUyZGUxMjhhNWQ2NWE4ZjRlZjNmMTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqNZVlBNAsKBPlzpsOXrdJ3KQ0rH Eg+tUP91qNBr2Fhf9f/l1vqMwS0ikkKqlX+kUidsugqBuuWD8so6LtslM02MRgmA BAIBm3VGokdr9pVroQE5TTuLus2BHhqfJeRtPCCh9DTqpovl5IgOCTJmiLjBlKtK azh/5SuqyaWmGlcafx12POAXggV0mtADFDXyX53s0O/RQvEUbJ2BNnJ+maCbWw0A 8Zliehax5BJsvP1hxdunMcUFj7djyr9irfZHJUYGYZCu65GwCIks8g6RgU7+juqU cL67QblCnVdtzTVhvGzUUD/ga4QypwZFA9ekZPPMpwEPOFg51nsxUJHo/QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMJA7ayJiLtW5S3hKKXWWo9O8/E4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2U1MzRi MC03MDIzLTRlNzEtYTI2NC1hNzE0OTdmMTY4ZTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZTUzNGIw LTcwMjMtNGU3MS1hMjY0LWE3MTQ5N2YxNjhlMS8xL3drRHRySW1JdTFibExlRW9w ZFphajA3ejhUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDAcDANBgkqhkiG9w0BAQsFAAOCAQEAOB3sJZrPe6oS 2y2qXZt4d+RchX0AxAG9LPmGMKieUoIrzVEhBdC0v8sJiUeI9P+UbFX7xli04wbE DiRCs9kpal/6OQ1vobXx/zVQc6HlrDg48XqLPh5syOcBiy7oJ5ZlymZTF6agiymk iiis2NMF4CVA7y15zzWMweS2+8Ux52W/ZzHOsiIvUBceh9wyTswcEXylpvRXJUyC l858i88HgSDKpcDYDrS5Gvru/knrRZ7uiXBUEZLnlItBM8HYqRokuAt+WfYpUe6a NuL+GlMtzSq0JQDIWlKPqh7eUUl9tXlKBNdbGEXCJR1sSAdAnUzBsZk2d4xqewq9 58x7+N64Jw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:43 2026 by rpki-client