This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer File: wlEKilJdybHsCxVg0JCmQmjULsQ.cer (raw, json) Hash identifier: XJJ/RkOl+/6iH7+ZSp561J/aYHdJiHRXgE6ZaAdN6Jg= Subject key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910181854556336682D409BB7369600 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20892 IP: 91.198.214.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:18:18:54:55:63:36:68:2d:40:9b:b7:36:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:6d:76:bb:04:7b:d1:93:03:a9:ff:31:37: e6:95:4b:a5:74:98:7f:73:02:84:2f:cb:1c:7c:f1: d2:2e:2e:a1:6e:31:cd:ca:d2:bd:bd:d6:1b:ad:e2: 82:da:00:bc:84:ed:bb:d3:0c:47:a8:c3:d2:ce:ca: d3:8f:96:56:67:ad:05:9f:82:47:72:40:32:77:67: 42:6e:48:a4:94:dc:80:0e:4c:d8:58:ff:fc:ec:ee: d7:21:67:b3:33:d1:8d:3c:89:c7:ae:bc:2d:66:bc: c1:75:31:c3:bd:bc:17:53:09:ec:a9:88:34:2c:5c: b0:30:f9:1c:97:45:10:f2:66:53:40:56:fa:cf:3e: fe:29:31:d6:60:4e:b3:c5:7a:95:6c:ac:02:b3:92: 90:16:ca:ba:c6:d2:f7:7a:ca:66:fa:33:dc:a7:21: b6:8e:4f:43:8a:bd:17:65:57:e6:a0:d4:7f:c2:1f: 2d:26:58:fb:39:ec:bf:cc:f3:82:9d:fc:9e:20:72: b5:01:db:56:a3:28:6c:43:b7:7c:07:96:ad:61:62: 48:a0:27:0d:43:1b:e6:72:37:16:25:ad:cf:7b:99: 8c:8c:62:18:84:6f:36:9f:7f:10:fc:a2:9d:3e:65: 42:15:ae:19:1c:75:d4:5a:d3:8e:71:b1:d5:76:bd: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.214.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20892 Signature Algorithm: sha256WithRSAEncryption 80:a2:3c:03:ef:77:14:27:bd:d5:6f:bc:a9:bc:5a:27:28:25: b3:67:13:82:07:0b:da:bd:0c:39:8b:66:72:68:a5:40:87:6c: b5:32:c6:c2:1b:78:ed:93:39:fa:5a:fa:af:44:70:fb:07:46: 87:70:1f:c6:1f:f0:3f:ff:53:07:1c:a7:9f:bd:9b:e5:f9:66: 47:4f:bd:7e:15:c8:5b:bc:41:b0:07:64:ae:42:8b:93:93:ee: d9:87:65:92:af:6e:9b:48:25:2d:42:68:0c:8f:48:20:15:60: 00:0b:81:25:0c:ce:d1:e4:01:7d:c9:ca:b2:fc:cb:04:49:87: 7b:b3:bd:b2:16:f0:99:7a:e3:40:38:a2:4f:de:ff:dc:cb:57: 8f:ef:c1:e9:95:7c:c0:6d:c5:f5:a3:84:cf:7e:c6:2d:0f:09: 96:3d:3c:12:5f:4e:cc:15:9a:81:9d:e8:a8:af:c3:01:d3:bf: 15:f6:bd:d8:f5:f3:70:ff:32:12:8d:28:23:75:bd:a4:03:96: ad:d6:78:b4:66:e3:ea:da:4e:31:ce:60:ee:f4:1d:73:7b:79: d5:2a:d5:6f:39:cc:47:ec:a6:af:2d:48:45:3b:4a:7f:6a:28: 35:80:90:8a:22:a1:d4:d2:f9:52:d5:14:01:ff:f6:14:42:5f: 30:60:85:5d -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5EBgYVFVjNmgtQJu3NpYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjUxMGE4YTUyNWRjOWIxZWMwYjE1NjBkMDkwYTY0MjY4ZDQyZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDJtdrsEe9GTA6n/MTfmlUuldJh/ cwKEL8scfPHSLi6hbjHNytK9vdYbreKC2gC8hO270wxHqMPSzsrTj5ZWZ60Fn4JH ckAyd2dCbkiklNyADkzYWP/87O7XIWezM9GNPInHrrwtZrzBdTHDvbwXUwnsqYg0 LFywMPkcl0UQ8mZTQFb6zz7+KTHWYE6zxXqVbKwCs5KQFsq6xtL3espm+jPcpyG2 jk9Dir0XZVfmoNR/wh8tJlj7Oey/zPOCnfyeIHK1AdtWoyhsQ7d8B5atYWJIoCcN QxvmcjcWJa3Pe5mMjGIYhG82n38Q/KKdPmVCFa4ZHHXUWtOOcbHVdr16UwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFMJRCopSXcmx7AsVYNCQpkJo1C7EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzNlZTk2 OS05OGQxLTQ4MWEtYTQ4Ny05YTg5NTQ2N2RhODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvM2VlOTY5 LTk4ZDEtNDgxYS1hNDg3LTlhODk1NDY3ZGE4NS8xL3dsRUtpbEpkeWJIc0N4Vmcw SkNtUW1qVUxzUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8bWMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlGcMA0GCSqGSIb3DQEBCwUAA4IBAQCAojwD73cUJ73Vb7ypvFonKCWzZxOCBwva vQw5i2ZyaKVAh2y1MsbCG3jtkzn6WvqvRHD7B0aHcB/GH/A//1MHHKefvZvl+WZH T71+FchbvEGwB2SuQouTk+7Zh2WSr26bSCUtQmgMj0ggFWAAC4ElDM7R5AF9ycqy /MsESYd7s72yFvCZeuNAOKJP3v/cy1eP78HplXzAbcX1o4TPfsYtDwmWPTwSX07M FZqBneior8MB078V9r3Y9fNw/zISjSgjdb2kA5at1ni0ZuPq2k4xzmDu9B1ze3nV KtVvOcxH7KavLUhFO0p/aig1gJCKIqHU0vlS1RQB//YUQl8wYIVd -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:00 2026 by rpki-client