This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer File: ws_pT97DCaxVMFrJDnw9Yo39QGo.cer (raw, json) Hash identifier: ln0ey50zbOVNnUU8ExupAHpTJrP8wKQ0jrcQC304lbQ= Subject key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14F2241D4FC030E7C222766187289E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214049 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f2:24:1d:4f:c0:30:e7:c2:22:76:61:87:28:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:f1:a8:ff:11:96:25:e5:11:53:66:2d:6d: b4:13:67:47:ab:af:3b:46:55:37:4b:d0:b0:43:ac: ad:90:5a:3e:54:eb:3c:f2:8f:e9:49:aa:b2:96:b8: 73:a7:c7:f0:c6:90:7a:58:d3:73:c0:91:e0:13:b9: fd:d8:a2:10:01:79:ff:28:03:de:7d:09:67:71:8e: 8d:85:90:85:d0:95:0c:71:18:b5:c9:73:59:85:48: 40:ec:27:ae:52:d0:78:3c:e1:58:22:cb:75:51:83: d8:0c:5d:56:43:36:d6:c9:7e:fd:7a:2a:79:08:7b: c4:c8:e7:c5:20:3e:be:75:0b:bc:c4:be:b4:00:21: 78:fe:a3:84:ec:67:f6:7a:05:c7:8f:69:81:58:c7: c7:e6:74:1a:05:24:62:20:75:e3:52:e6:ec:6a:a8: b2:18:64:2d:37:57:45:64:4d:a4:df:a2:20:24:00: e5:14:20:7f:bc:8b:99:de:66:4c:ed:7a:0d:7e:33: 51:84:f4:9c:af:b1:8a:e8:45:52:d6:24:96:6d:67: de:39:5d:14:4d:2d:a1:48:f8:fd:49:bb:3a:2f:64: 7c:4c:58:ba:fb:6a:02:71:96:57:6e:b3:0b:84:da: 54:05:56:f2:fd:d6:5e:a0:ac:9a:72:d5:84:a8:a2: 19:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214049 Signature Algorithm: sha256WithRSAEncryption 3f:79:d7:73:0f:31:fe:6b:41:52:9f:bf:2c:e3:7d:b9:d5:b7: a7:65:62:06:af:81:eb:84:24:d6:b2:12:e2:08:4d:a8:38:ca: 1e:bf:fd:89:0c:7b:96:5c:98:7b:18:d0:61:98:73:14:b0:cc: 84:3f:ba:42:a2:87:76:9f:67:a3:b2:58:d1:e5:64:ca:77:19: b0:9c:33:d3:cc:3e:95:8a:f8:97:fa:d7:11:d1:a0:af:7b:d7: 85:d2:86:cc:b4:67:bc:1f:79:58:60:31:3a:f6:10:fb:f0:52: 26:86:62:f9:30:c9:8f:71:29:d8:82:dc:bf:85:c9:f9:b5:55: 27:e5:55:5e:71:12:f7:f0:29:1d:61:cb:46:bd:5d:4e:69:49: 96:22:35:a6:c5:53:73:4f:cf:c3:fc:61:32:20:c8:0f:9a:e8: 84:e9:90:6c:e0:cc:e8:34:c7:90:6b:b8:f8:ac:7d:1b:f7:4c: f7:c2:6d:7a:33:f6:20:ed:4e:c6:0d:f9:00:aa:96:78:a0:a8: dc:22:23:b2:24:ba:43:35:d4:d8:08:3e:a7:23:3c:cb:6b:18: b5:4f:67:c0:99:e4:4c:3d:12:53:96:51:e3:90:95:53:e9:55: d5:af:2e:a2:09:53:03:ad:47:88:e4:09:fe:19:fa:e1:da:8b: 3a:b6:0f:49 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FPIkHU/AMOfCInZhhyieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmNmZTk0ZmRlYzMwOWFjNTUzMDVhYzkwZTdjM2Q2MjhkZmQ0MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqODxqP8RliXlEVNmLW20E2dHq687 RlU3S9CwQ6ytkFo+VOs88o/pSaqylrhzp8fwxpB6WNNzwJHgE7n92KIQAXn/KAPe fQlncY6NhZCF0JUMcRi1yXNZhUhA7CeuUtB4POFYIst1UYPYDF1WQzbWyX79eip5 CHvEyOfFID6+dQu8xL60ACF4/qOE7Gf2egXHj2mBWMfH5nQaBSRiIHXjUubsaqiy GGQtN1dFZE2k36IgJADlFCB/vIuZ3mZM7XoNfjNRhPScr7GK6EVS1iSWbWfeOV0U TS2hSPj9Sbs6L2R8TFi6+2oCcZZXbrMLhNpUBVby/dZeoKyactWEqKIZBwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMLP6U/ewwmsVTBayQ58PWKN/UBqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzM5OTBj Mi01MWJlLTRiODctYWY2Mi1lMGUwOTk2NDBlYWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMzk5MGMy LTUxYmUtNGI4Ny1hZjYyLWUwZTA5OTY0MGVhYy8xL3dzX3BUOTdEQ2F4Vk1GckpE bnc5WW8zOVFHby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNEITANBgkqhkiG9w0BAQsFAAOCAQEAP3nXcw8x/mtB Up+/LON9udW3p2ViBq+B64Qk1rIS4ghNqDjKHr/9iQx7llyYexjQYZhzFLDMhD+6 QqKHdp9no7JY0eVkyncZsJwz08w+lYr4l/rXEdGgr3vXhdKGzLRnvB95WGAxOvYQ +/BSJoZi+TDJj3Ep2ILcv4XJ+bVVJ+VVXnES9/ApHWHLRr1dTmlJliI1psVTc0/P w/xhMiDID5rohOmQbODM6DTHkGu4+Kx9G/dM98JtejP2IO1Oxg35AKqWeKCo3CIj siS6QzXU2Ag+pyM8y2sYtU9nwJnkTD0SU5ZR45CVU+lV1a8uoglTA61HiOQJ/hn6 4dqLOrYPSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:17 2026 by rpki-client