This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer (raw, json) Hash identifier: 3+NOolnjAi5LtnNmK9IbCvnBdp9IKqkE1PUsb3zV9zk= Subject key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FE8DFF2546705C202C4B8FCC67A9C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.201.87.0/24 IP: 2a01:f040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e8:df:f2:54:67:05:c2:02:c4:b8:fc:c6:7a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2919334ad2ad53616c34fece96ce29230f86349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:ef:dd:47:0a:62:dc:fa:1f:88:c9:b7:22: f8:6b:99:66:ac:69:36:97:4a:d9:98:9b:b7:c0:8e: 89:46:e0:49:cc:cc:01:d5:c4:fe:d1:5f:e9:7f:f6: 7a:ba:01:0a:c6:11:37:e1:be:69:c4:3a:f5:c5:5c: d1:4d:52:2a:a9:79:ad:3a:e0:7b:e4:2d:4c:23:04: 74:e2:2d:09:a3:d0:cf:fc:e0:55:30:4d:e3:fd:4b: f8:1f:a7:90:0a:17:f2:b3:84:0b:84:42:32:ce:b9: 8f:78:a7:14:5a:09:d8:ce:2e:67:e8:3d:b9:d6:d1: 95:32:65:f1:16:e8:80:a1:c7:e5:7a:6b:40:93:8f: 21:24:c0:4c:6f:52:56:05:87:65:bb:92:34:20:43: e6:f2:0a:b5:dd:bd:d0:ab:9d:99:a2:8b:bf:ef:46: d4:9d:d1:0b:7c:7f:e9:6d:e5:19:d2:f6:81:6b:ae: 8a:2d:55:15:0a:b9:69:6b:5a:da:8b:0d:c1:01:3a: 14:28:dd:04:16:98:8a:58:cf:6f:b6:86:16:b4:97: 23:2c:3f:6d:28:bc:8f:89:8a:9d:87:34:6f:c1:1b: f3:32:d9:2a:ac:4e:df:9e:1e:ec:7d:8c:b7:15:6d: 6f:e0:98:32:6e:10:31:72:f5:cb:5f:50:0d:60:02: df:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.87.0/24 IPv6: 2a01:f040::/29 Signature Algorithm: sha256WithRSAEncryption 1c:e7:6e:ab:bc:99:4e:e4:74:8b:67:2b:91:c7:08:cd:9b:b7: f6:03:f9:c8:82:0e:0e:e8:97:91:03:6d:45:ee:35:da:77:e2: 4f:60:2c:a3:69:2b:7d:d3:35:e9:ef:41:71:8a:83:5f:d6:fa: 8d:b9:12:d9:20:d5:5f:38:80:95:79:e7:96:03:85:19:f8:8d: 84:14:21:00:42:9f:0c:ff:28:e0:f4:96:b4:2e:9a:da:ba:21: 59:47:8e:e5:10:ba:9f:c3:62:92:2e:95:77:78:20:d3:67:74: db:c0:40:8e:1e:39:fa:8f:9e:f8:38:33:d0:ed:c3:89:99:b1: 87:61:df:73:e1:c9:b1:56:f1:22:56:90:43:22:30:83:38:bb: e8:d9:ba:7f:56:5b:2c:9f:48:e7:17:17:36:c5:25:6c:9d:78: 88:dc:7e:2d:5a:4c:4c:2f:0a:82:53:9c:fb:b9:c4:d4:aa:5a: 72:27:5b:27:7a:96:db:09:77:94:fb:3d:71:47:12:0a:c8:15: 79:8b:ac:66:b6:9f:d7:92:49:9e:34:70:aa:38:ca:4f:b2:62: fb:a3:a2:5c:b1:9d:41:f0:de:1c:50:7f:e9:a0:fe:a4:d6:f4: 3a:64:00:a6:50:04:44:00:98:e0:c7:3b:69:29:39:06:03:81: d2:99:8f:e1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8f+jf8lRnBcICxLj8xnqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjkxOTMzNGFkMmFkNTM2MTZjMzRmZWNlOTZjZTI5MjMwZjg2MzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4m7v3UcKYtz6H4jJtyL4a5lmrGk2 l0rZmJu3wI6JRuBJzMwB1cT+0V/pf/Z6ugEKxhE34b5pxDr1xVzRTVIqqXmtOuB7 5C1MIwR04i0Jo9DP/OBVME3j/Uv4H6eQChfys4QLhEIyzrmPeKcUWgnYzi5n6D25 1tGVMmXxFuiAocflemtAk48hJMBMb1JWBYdlu5I0IEPm8gq13b3Qq52Zoou/70bU ndELfH/pbeUZ0vaBa66KLVUVCrlpa1raiw3BAToUKN0EFpiKWM9vtoYWtJcjLD9t KLyPiYqdhzRvwRvzMtkqrE7fnh7sfYy3FW1v4JgybhAxcvXLX1ANYALf2QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMKRkzStKtU2FsNP7Ols4pIw+GNJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzg5NGJk Yy0yOGE2LTRjMzYtYmE0Mi0xNjUzMTg4ZDgxMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvODk0YmRj LTI4YTYtNGMzNi1iYTQyLTE2NTMxODhkODEyNi8xL3dwR1ROSzBxMVRZV3cwX3M2 V3ppa2pENFkway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW8lXMA0EAgACMAcDBQMqAfBAMA0GCSqGSIb3 DQEBCwUAA4IBAQAc526rvJlO5HSLZyuRxwjNm7f2A/nIgg4O6JeRA21F7jXad+JP YCyjaSt90zXp70FxioNf1vqNuRLZINVfOICVeeeWA4UZ+I2EFCEAQp8M/yjg9Ja0 LprauiFZR47lELqfw2KSLpV3eCDTZ3TbwECOHjn6j574ODPQ7cOJmbGHYd9z4cmx VvEiVpBDIjCDOLvo2bp/Vlssn0jnFxc2xSVsnXiI3H4tWkxMLwqCU5z7ucTUqlpy J1snepbbCXeU+z1xRxIKyBV5i6xmtp/XkkmeNHCqOMpPsmL7o6JcsZ1B8N4cUH/p oP6k1vQ6ZACmUAREAJjgxztpKTkGA4HSmY/h -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:33 2026 by rpki-client