This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer File: wtKiNOIkv4eZby8N9Vnq2IL55lE.cer (raw, json) Hash identifier: 5N/EBEifYlMjJkLSFB/pBUCL2Jzsl0larJIeTjuIhfs= Subject key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B790FFF47ED250990EB96EBF420ACB2C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50926 AS: 56732 AS: 203178 IP: 5.175.40.0/21 IP: 31.24.40.0/21 IP: 31.24.152.0/21 IP: 31.193.224.0/21 IP: 45.157.20.0/22 IP: 84.246.208.0/21 IP: 91.142.208.0/20 IP: 91.200.140.0/22 IP: 91.213.46.0/24 IP: 94.127.184.0/21 IP: 109.68.80.0/21 IP: 149.62.168.0/21 IP: 185.23.68.0/22 IP: 185.70.92.0/22 IP: 185.101.224.0/22 IP: 185.129.248.0/22 IP: 185.176.8.0/22 IP: 185.222.156.0/22 IP: 188.95.112.0/21 IP: 188.164.192.0/21 IP: 193.41.160.0/22 IP: 194.116.147.0/24 IP: 195.5.116.0/23 IP: 212.34.156.0/22 IP: 2a00:5ac0::/32 IP: 2a01:4b80::/32 IP: 2a06:d600::/29 IP: 2a0a:680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:ff:47:ed:25:09:90:eb:96:eb:f4:20:ac:b2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2d2a234e224bf87996f2f0df559ead882f9e651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:b1:1e:e3:65:24:50:ad:02:52:78:a8:a4: 63:bc:2b:17:c5:84:be:a5:03:c9:ce:62:90:0a:28: a2:11:78:25:58:30:eb:58:76:8e:4f:54:de:1f:4f: 3c:f7:3e:53:de:bf:d2:c0:8b:39:87:47:01:51:d0: a9:a2:67:6d:9f:8c:71:e5:42:95:2b:2c:9e:e6:02: 12:8d:69:b9:a5:c3:9a:ce:10:b7:84:93:85:52:c9: 3d:57:86:0e:14:50:03:85:9f:b6:8e:7c:5d:6d:ca: 12:fb:e1:de:71:e7:32:37:d5:39:87:f3:34:5f:7a: a1:a0:7b:e2:fe:36:22:8a:20:e7:87:70:f6:d6:dd: 11:98:04:91:fa:27:8c:76:1f:98:dd:8e:6a:6d:53: 33:99:22:ec:d7:87:50:3c:30:be:49:f9:fd:ae:8a: 6f:06:7f:66:00:ad:33:80:75:59:84:5e:92:4b:58: 34:a8:40:73:7a:70:6f:96:f4:96:24:0b:30:e0:cf: 27:d1:62:71:e4:7a:bb:e8:32:ac:66:1b:3c:db:c2: 85:32:a3:ba:28:4c:ac:3b:96:86:a3:26:12:c4:ec: d0:de:29:37:96:28:cf:05:cb:65:36:85:b8:85:9b: 46:58:2b:89:91:2d:37:c3:9c:70:25:69:32:8c:b3: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.40.0/21 31.24.40.0/21 31.24.152.0/21 31.193.224.0/21 45.157.20.0/22 84.246.208.0/21 91.142.208.0/20 91.200.140.0/22 91.213.46.0/24 94.127.184.0/21 109.68.80.0/21 149.62.168.0/21 185.23.68.0/22 185.70.92.0/22 185.101.224.0/22 185.129.248.0/22 185.176.8.0/22 185.222.156.0/22 188.95.112.0/21 188.164.192.0/21 193.41.160.0/22 194.116.147.0/24 195.5.116.0/23 212.34.156.0/22 IPv6: 2a00:5ac0::/32 2a01:4b80::/32 2a06:d600::/29 2a0a:680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50926 56732 203178 Signature Algorithm: sha256WithRSAEncryption 9e:41:67:56:2d:cb:10:8e:f0:fa:70:23:61:d1:6b:34:ca:fb: 06:d6:0c:ae:d8:50:78:13:23:be:97:60:26:8f:b6:07:fc:84: 34:59:52:b6:d2:16:59:0e:dc:f7:01:6a:92:c0:a3:41:0a:8b: 10:04:69:a4:d8:62:28:41:bf:7d:2c:b6:aa:c9:16:f9:a5:3b: 0d:df:81:b1:1a:29:3f:db:0e:23:ee:fe:a4:8a:74:ef:c2:dc: 69:29:3e:83:2a:d3:4b:0d:41:ec:04:b4:b4:4a:20:f3:8c:0b: 4b:da:12:7c:fa:27:86:40:b7:90:6a:19:92:f4:cb:ee:03:40: 9c:0a:b4:63:7b:22:9f:f0:bb:ff:a3:e3:80:0c:c4:07:45:6c: ee:b3:44:fe:54:e8:80:da:15:47:84:75:b9:fd:7c:36:3b:d4: fb:d6:72:53:ce:b0:05:4d:8a:d3:42:a0:3f:65:49:1d:dc:52: 8b:63:6f:86:30:43:1a:cc:53:a3:a7:8f:72:27:e6:dc:bf:f2: b0:05:f8:4d:2d:7a:55:37:2a:64:a8:bf:46:fa:1e:8e:3b:98: b9:8d:f9:99:7a:3b:10:fd:0d:4d:49:34:72:3d:ed:6c:f5:24: 9c:16:d5:2c:3b:0f:a3:e1:21:30:2d:46:12:a6:ad:49:35:7c: 5a:a3:b9:5e -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISAZt5D/9H7SUJkOuW6/QgrLLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmQyYTIzNGUyMjRiZjg3OTk2ZjJmMGRmNTU5ZWFkODgyZjllNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxyxHuNlJFCtAlJ4qKRjvCsXxYS+ pQPJzmKQCiiiEXglWDDrWHaOT1TeH0889z5T3r/SwIs5h0cBUdCpomdtn4xx5UKV Kyye5gISjWm5pcOazhC3hJOFUsk9V4YOFFADhZ+2jnxdbcoS++HececyN9U5h/M0 X3qhoHvi/jYiiiDnh3D21t0RmASR+ieMdh+Y3Y5qbVMzmSLs14dQPDC+Sfn9ropv Bn9mAK0zgHVZhF6SS1g0qEBzenBvlvSWJAsw4M8n0WJx5Hq76DKsZhs828KFMqO6 KEysO5aGoyYSxOzQ3ik3lijPBctlNoW4hZtGWCuJkS03w5xwJWkyjLNETQIDAQAB o4IDXTCCA1kwHQYDVR0OBBYEFMLSojTiJL+HmW8vDfVZ6tiC+eZRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2QxZWU0 Yi1lODhhLTRlNDEtYTYxNi00YjI0OGRhNmM5NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZDFlZTRi LWU4OGEtNGU0MS1hNjE2LTRiMjQ4ZGE2Yzk2Yy8xL3d0S2lOT0lrdjRlWmJ5OE45 Vm5xMklMNTVsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHRBggrBgEF BQcBBwEB/wSBwTCBvjCBlwQCAAEwgZADBAMFrygDBAMfGCgDBAMfGJgDBAMfweAD BAItnRQDBANU9tADBARbjtADBAJbyIwDBABb1S4DBANef7gDBANtRFADBAOVPqgD BAK5F0QDBAK5RlwDBAK5ZeADBAK5gfgDBAK5sAgDBAK53pwDBAO8X3ADBAO8pMAD BALBKaADBADCdJMDBAHDBXQDBALUIpwwIgQCAAIwHAMFACoAWsADBQAqAUuAAwUD KgbWAAMFAyoKBoAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAMbuAgMA3ZwCAwMZ qjANBgkqhkiG9w0BAQsFAAOCAQEAnkFnVi3LEI7w+nAjYdFrNMr7BtYMrthQeBMj vpdgJo+2B/yENFlSttIWWQ7c9wFqksCjQQqLEARppNhiKEG/fSy2qskW+aU7Dd+B sRopP9sOI+7+pIp078LcaSk+gyrTSw1B7AS0tEog84wLS9oSfPonhkC3kGoZkvTL 7gNAnAq0Y3sin/C7/6PjgAzEB0Vs7rNE/lTogNoVR4R1uf18NjvU+9ZyU86wBU2K 00KgP2VJHdxSi2NvhjBDGsxTo6ePcifm3L/ysAX4TS16VTcqZKi/RvoejjuYuY35 mXo7EP0NTUk0cj3tbPUknBbVLDsPo+EhMC1GEqatSTV8WqO5Xg== -----END CERTIFICATE-----Generated at Tue Jan 27 06:11:02 2026 by rpki-client