This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer File: woWhR044Yn4wGlUb4076RYKlzzk.cer (raw, json) Hash identifier: A8qk2RNs+jXBlbT5pfWpLvJg7C1To5gwxPJUTAhCahI= Subject key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4D026126B2A0A1AEFB643531F6085 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201419 AS: 201822 IP: 81.173.42.0/23 IP: 185.62.160.0/22 IP: 2a03:520::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d0:26:12:6b:2a:0a:1a:ef:b6:43:53:1f:60:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c285a1474e38627e301a551be34efa4582a5cf39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:c7:07:5f:73:68:a4:bc:c8:fe:68:df:ac: 5e:d9:3f:33:23:16:05:69:4d:26:b5:34:d4:fe:7c: c0:44:8c:2a:18:00:b7:2d:25:3c:6a:b4:6f:e0:24: 7d:aa:15:bc:5d:b7:b4:30:31:a1:c2:9f:13:59:15: 98:8e:6c:f6:2b:e7:6b:09:8a:e8:4b:cc:4e:ff:dc: d7:7f:0b:3a:3f:28:d3:6c:32:b5:e9:6c:0d:97:07: 16:c1:e7:26:3d:59:60:c3:c6:8c:68:73:99:b1:8c: 34:7d:6d:b0:08:94:1b:3a:96:fd:dc:c0:0e:0d:2b: 3e:38:96:dc:0e:f4:5c:60:27:77:71:2c:8e:1b:04: 67:be:f0:e2:03:b9:87:43:08:f2:a4:b7:67:04:16: 6a:c6:9c:00:a3:1f:98:3f:56:cc:eb:5a:09:de:9a: a9:a2:4e:c3:ca:34:55:6b:9e:a8:ef:35:6e:43:d4: ce:0b:3a:20:46:d8:f6:48:52:3f:20:42:e2:0f:54: 44:6d:89:54:ce:6f:a6:d9:82:14:73:72:83:95:93: ba:64:7f:6f:f3:6c:1b:5a:b3:1e:08:28:8e:fe:03: f2:91:b6:ef:7c:1a:25:01:43:37:81:83:54:90:85: 56:1a:f9:05:57:ea:b8:59:18:c3:4c:81:5c:55:74: 3e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.173.42.0/23 185.62.160.0/22 IPv6: 2a03:520::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201419 201822 Signature Algorithm: sha256WithRSAEncryption 5f:37:3e:f7:57:78:3a:db:b6:8f:03:15:dd:14:1c:68:eb:58: 4a:35:49:61:a1:f4:9f:11:ca:44:e6:fc:45:4c:a8:ce:d7:d3: 14:12:01:81:df:b8:ba:c7:c9:97:16:07:80:5e:4d:47:e4:e1: d7:36:8a:e8:ca:3a:37:f5:fd:9e:ad:6a:7c:44:6c:19:da:69: 4e:f6:5c:b0:05:dc:f3:0f:7e:ae:71:9e:b0:6c:58:17:78:e7: e3:b1:d6:80:eb:64:17:8c:ab:1f:ac:52:df:cb:c1:5a:0a:54: eb:ae:aa:fd:2e:11:7e:83:61:18:62:1a:3e:84:66:27:7a:45: 3d:c6:8f:b8:12:39:59:c4:fb:d6:3e:92:b3:a4:69:fe:de:db: 3a:6e:53:f0:9c:e8:52:fd:29:8c:06:64:37:5a:1a:61:8c:7c: db:3e:b1:33:0b:36:a4:eb:c4:96:a9:f7:d1:2b:fa:31:13:ab: cc:9b:09:79:13:5f:1c:5d:22:f3:87:f1:18:7b:a2:a0:71:72: 2a:46:a0:1f:79:f8:e7:a0:e7:89:60:fc:42:2c:04:95:cf:76: 8b:82:e2:37:5f:dc:7b:f4:b5:62:77:d7:76:c9:ac:9f:51:30: b9:ca:ff:81:21:be:84:2b:7d:e7:90:8a:33:06:ba:d4:5f:1c: d0:94:5f:6c -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt+pNAmEmsqChrvtkNTH2CFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjg1YTE0NzRlMzg2MjdlMzAxYTU1MWJlMzRlZmE0NTgyYTVjZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1obHB19zaKS8yP5o36xe2T8zIxYF aU0mtTTU/nzARIwqGAC3LSU8arRv4CR9qhW8Xbe0MDGhwp8TWRWYjmz2K+drCYro S8xO/9zXfws6PyjTbDK16WwNlwcWwecmPVlgw8aMaHOZsYw0fW2wCJQbOpb93MAO DSs+OJbcDvRcYCd3cSyOGwRnvvDiA7mHQwjypLdnBBZqxpwAox+YP1bM61oJ3pqp ok7DyjRVa56o7zVuQ9TOCzogRtj2SFI/IELiD1REbYlUzm+m2YIUc3KDlZO6ZH9v 82wbWrMeCCiO/gPykbbvfBolAUM3gYNUkIVWGvkFV+q4WRjDTIFcVXQ+iQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFMKFoUdOOGJ+MBpVG+NO+kWCpc85MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2I0OWY4 MS04NTM2LTRhNjctODk5Zi1kNWU2Mzg1NmQ1NWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvYjQ5Zjgx LTg1MzYtNGE2Ny04OTlmLWQ1ZTYzODU2ZDU1ZC8xL3dvV2hSMDQ0WW40d0dsVWI0 MDc2UllLbHp6ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBUa0qAwQCuT6gMA0EAgACMAcDBQMqAwUgMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMSywIDAxReMA0GCSqGSIb3DQEBCwUAA4IB AQBfNz73V3g627aPAxXdFBxo61hKNUlhofSfEcpE5vxFTKjO19MUEgGB37i6x8mX FgeAXk1H5OHXNoroyjo39f2erWp8RGwZ2mlO9lywBdzzD36ucZ6wbFgXeOfjsdaA 62QXjKsfrFLfy8FaClTrrqr9LhF+g2EYYho+hGYnekU9xo+4EjlZxPvWPpKzpGn+ 3ts6blPwnOhS/SmMBmQ3WhphjHzbPrEzCzak68SWqffRK/oxE6vMmwl5E18cXSLz h/EYe6KgcXIqRqAfefjnoOeJYPxCLASVz3aLguI3X9x79LVid9d2yayfUTC5yv+B Ib6EK33nkIozBrrUXxzQlF9s -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:58 2026 by rpki-client