This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer File: wrQuSlwckevE7__xSLMS_nt-iXA.cer (raw, json) Hash identifier: GcqsoR+6VR1QB299K0qCSKMQao6f1We0PcBNU8EQnEg= Subject key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A367CA4BB8DC73082B3255E8042D5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.201.5.0 -- 185.201.7.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:67:ca:4b:b8:dc:73:08:2b:32:55:e8:04:2d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0a:28:11:e0:6e:4d:f4:8f:6d:b4:66:7a:68: d6:68:a7:6e:f5:34:4c:d1:dd:cf:a0:c9:a6:01:90: 1f:90:b1:a4:40:9c:99:da:0f:33:47:00:26:7c:5d: e5:77:03:28:c7:a5:4d:ef:a4:81:64:2f:be:00:b7: a1:94:ea:8f:f4:0b:43:b4:7b:69:37:be:72:16:46: bc:62:1b:fc:c5:c7:20:26:1b:93:3d:76:0b:61:de: ff:34:b1:2c:d0:53:73:d9:1a:d1:49:9f:4a:5d:8f: 03:a8:0b:b7:8d:82:d9:a3:70:6b:91:43:73:02:b0: 79:24:93:1e:a9:1b:d4:70:fd:56:22:ad:ad:bb:77: ca:35:a1:5c:67:54:a7:53:6e:81:f6:c2:f0:bc:f9: 2c:4c:09:69:e4:bd:16:77:1d:99:29:b2:fe:07:f7: 45:65:b2:32:9f:dd:63:d5:1e:36:a1:03:2b:7d:09: c0:a6:47:5b:7e:70:d5:9c:63:d4:27:0c:e9:dc:03: 65:bc:41:17:17:35:9f:af:05:72:b5:1c:28:72:61: f4:b8:0d:42:46:15:7c:2d:d1:1a:53:10:53:60:86: 53:64:91:a5:25:d2:e9:73:88:b2:77:14:80:e0:6d: 48:73:23:68:3b:4a:2d:5e:7a:37:fd:48:00:e9:3b: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.5.0-185.201.7.255 Signature Algorithm: sha256WithRSAEncryption 12:5d:c2:75:e6:25:0d:0c:d4:f2:09:0f:37:a6:f5:73:55:56: 60:a6:d5:be:92:a9:3d:b3:ac:b6:ad:e6:7e:bf:24:0c:97:7b: c1:0a:fe:5e:0a:e1:73:c9:c5:bb:67:c2:b4:1f:e9:7d:76:5b: fd:0a:05:7e:77:68:ff:83:df:57:3e:84:a3:e9:21:6c:a2:0c: 91:d5:e8:22:9e:35:f3:ef:b6:b4:b5:7e:ea:9f:70:a6:64:07: 69:71:9d:8b:17:bf:58:3f:e2:a7:78:d9:72:b8:2c:94:c9:16: 16:ed:4f:48:a0:fe:c7:a2:63:aa:c2:69:6c:59:6f:e4:26:09: 9d:8e:34:54:5a:5c:d2:e0:03:3a:8a:3e:85:15:ce:79:23:8c: 4b:9b:7e:17:8c:ec:5b:f1:10:be:c4:a5:81:4f:4f:8f:9b:5d: 15:7b:0f:99:9b:22:6a:dc:9f:07:06:a0:05:68:ae:ad:6f:e2: 23:75:cc:a9:7d:c9:9c:dd:13:52:bf:e9:8e:05:10:16:db:eb: 41:5c:5a:63:4e:5f:b3:e1:f7:66:c5:52:68:80:81:43:03:42: 98:4b:02:4e:9e:82:e2:73:d2:5b:91:de:a8:3e:55:ad:86:76: f4:1c:33:0a:02:cf:86:5f:5b:51:51:bc:ae:4b:29:e1:6d:52: 46:90:c6:41 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt4o2fKS7jccwgrMlXoBC1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmI0MmU0YTVjMWM5MWViYzRlZmZmZjE0OGIzMTJmZTdiN2U4OTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gooEeBuTfSPbbRmemjWaKdu9TRM 0d3PoMmmAZAfkLGkQJyZ2g8zRwAmfF3ldwMox6VN76SBZC++ALehlOqP9AtDtHtp N75yFka8Yhv8xccgJhuTPXYLYd7/NLEs0FNz2RrRSZ9KXY8DqAu3jYLZo3BrkUNz ArB5JJMeqRvUcP1WIq2tu3fKNaFcZ1SnU26B9sLwvPksTAlp5L0Wdx2ZKbL+B/dF ZbIyn91j1R42oQMrfQnApkdbfnDVnGPUJwzp3ANlvEEXFzWfrwVytRwocmH0uA1C RhV8LdEaUxBTYIZTZJGlJdLpc4iydxSA4G1IcyNoO0otXno3/UgA6TuRvwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFMK0LkpcHJHrxO//8UizEv57folwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2FhMTc5 Ny00MzczLTRhMmYtYTA3NC1jNzNjYmU3MGFiYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvYWExNzk3 LTQzNzMtNGEyZi1hMDc0LWM3M2NiZTcwYWJiOS8xL3dyUXVTbHdja2V2RTdfX3hT TE1TX250LWlYQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5yQUDBAO5yQAwDQYJKoZIhvcNAQELBQAD ggEBABJdwnXmJQ0M1PIJDzem9XNVVmCm1b6SqT2zrLat5n6/JAyXe8EK/l4K4XPJ xbtnwrQf6X12W/0KBX53aP+D31c+hKPpIWyiDJHV6CKeNfPvtrS1fuqfcKZkB2lx nYsXv1g/4qd42XK4LJTJFhbtT0ig/seiY6rCaWxZb+QmCZ2ONFRaXNLgAzqKPoUV znkjjEubfheM7FvxEL7EpYFPT4+bXRV7D5mbImrcnwcGoAVorq1v4iN1zKl9yZzd E1K/6Y4FEBbb60FcWmNOX7Ph92bFUmiAgUMDQphLAk6eguJz0luR3qg+Va2GdvQc MwoCz4ZfW1FRvK5LKeFtUkaQxkE= -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:36 2026 by rpki-client