This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer File: wvPozdMcgnmN3vk0AfKcfcqmr20.cer (raw, json) Hash identifier: RUsnNfF8udSHyY5LgnxzDtw/AHvqpZvWBXs/dLt2Fkk= Subject key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1402A62AAB4522D66751E0B2A76AD4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213432 IP: 193.33.244.0/24 IP: 2a14:26c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:02:a6:2a:ab:45:22:d6:67:51:e0:b2:a7:6a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:c6:07:80:75:00:62:fb:14:2d:15:25:03: 25:eb:0e:06:ae:d0:c2:0b:f1:86:a6:a3:e4:49:9a: 0b:4e:ee:93:9d:36:fb:e7:95:f7:91:e7:a7:ef:2a: 23:a7:d3:d5:6a:24:e7:82:e3:7f:89:64:45:5c:0e: 57:68:cc:a0:be:8b:24:f7:87:c3:9a:ec:75:da:fe: 0a:87:9c:c6:50:50:a9:ee:61:4f:fb:03:dc:3c:52: 24:35:dd:a4:dc:fd:42:f9:73:d7:ec:e4:c7:61:ae: 4d:38:f3:3f:e1:5b:81:67:3a:87:e7:03:8b:de:ae: 08:db:7b:15:bb:c5:c9:ed:06:ca:5a:39:89:ab:41: f2:e5:e8:25:1c:50:45:f1:b0:c5:2c:b7:a4:d0:fb: ca:9a:9b:c9:b1:1a:8f:aa:04:e2:b5:b3:7b:d1:c7: 18:8f:32:69:13:bf:88:86:b1:7a:33:ef:cc:a9:4b: 88:22:26:7a:d8:55:de:31:7c:5d:ed:f5:9b:96:3d: bf:4c:d5:64:94:68:4d:d1:f2:fa:1b:34:6d:cc:f5: 75:34:99:42:a1:df:61:64:9e:71:b2:37:d3:c4:f5: f3:e1:28:4f:29:73:89:00:04:46:af:0e:2b:4c:4e: 0d:aa:75:05:d3:81:47:7c:ce:a6:99:a6:84:51:0f: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.244.0/24 IPv6: 2a14:26c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213432 Signature Algorithm: sha256WithRSAEncryption ad:94:c5:2c:93:3a:0b:00:03:6f:f7:46:28:6d:62:56:b7:4e: 79:d6:50:07:fb:85:b6:7c:8e:c0:f6:e3:f7:eb:67:77:c9:53: 3b:69:30:3d:6c:bb:3b:92:10:0f:f7:20:97:39:e4:67:d2:a0: 4b:be:3c:26:e0:2e:37:d0:a6:12:2a:95:ee:08:e3:af:ae:45: 7d:2e:a3:f3:e1:7e:30:a4:26:d0:93:08:d0:4c:b7:bf:ad:dd: 25:1b:e9:79:d8:5f:bb:0d:c9:b5:54:b9:88:5a:47:93:68:0f: 2e:a2:57:28:23:54:1d:e1:71:09:c0:25:c1:19:12:3e:c3:8e: 9a:98:1a:55:de:b0:bd:23:73:b5:89:6e:d6:29:a5:1d:45:bf: 87:e7:f2:95:2c:3f:11:6a:62:67:66:ed:da:23:e0:ac:21:d4: 77:c5:f5:fb:fa:ee:af:00:f5:13:7f:bb:d5:0e:98:f6:c7:8a: 53:58:99:e6:15:fd:f8:f6:93:f0:b1:1c:19:b0:0f:8b:4f:c1: 97:36:4d:a3:64:88:e9:2c:eb:1d:eb:48:9d:1b:df:40:35:9e: f7:7c:ac:9c:3b:84:c3:21:49:50:cc:e6:d1:bd:13:d7:56:f9: bd:d5:e8:7b:4e:29:8c:1d:e5:e5:e9:1d:77:9d:6f:0c:7d:7e: 9f:f3:51:9a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FAKmKqtFItZnUeCyp2rUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmYzZThjZGQzMWM4Mjc5OGRkZWY5MzQwMWYyOWM3ZGNhYTZhZjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHTGB4B1AGL7FC0VJQMl6w4GrtDC C/GGpqPkSZoLTu6TnTb755X3keen7yojp9PVaiTnguN/iWRFXA5XaMygvosk94fD mux12v4Kh5zGUFCp7mFP+wPcPFIkNd2k3P1C+XPX7OTHYa5NOPM/4VuBZzqH5wOL 3q4I23sVu8XJ7QbKWjmJq0Hy5eglHFBF8bDFLLek0PvKmpvJsRqPqgTitbN70ccY jzJpE7+IhrF6M+/MqUuIIiZ62FXeMXxd7fWblj2/TNVklGhN0fL6GzRtzPV1NJlC od9hZJ5xsjfTxPXz4ShPKXOJAARGrw4rTE4NqnUF04FHfM6mmaaEUQ9RKwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMLz6M3THIJ5jd75NAHynH3Kpq9tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2RmYjhm NS00OWFmLTRmNDgtODkzYy1mYzU3NDQwZDQ0OGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvZGZiOGY1 LTQ5YWYtNGY0OC04OTNjLWZjNTc0NDBkNDQ4YS8xL3d2UG96ZE1jZ25tTjN2azBB ZktjZmNxbXIyMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSH0MA0EAgACMAcDBQMqFCbAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBuDANBgkqhkiG9w0BAQsFAAOCAQEArZTFLJM6CwAD b/dGKG1iVrdOedZQB/uFtnyOwPbj9+tnd8lTO2kwPWy7O5IQD/cglznkZ9KgS748 JuAuN9CmEiqV7gjjr65FfS6j8+F+MKQm0JMI0Ey3v63dJRvpedhfuw3JtVS5iFpH k2gPLqJXKCNUHeFxCcAlwRkSPsOOmpgaVd6wvSNztYlu1imlHUW/h+fylSw/EWpi Z2bt2iPgrCHUd8X1+/rurwD1E3+71Q6Y9seKU1iZ5hX9+PaT8LEcGbAPi0/BlzZN o2SI6SzrHetInRvfQDWe93ysnDuEwyFJUMzm0b0T11b5vdXoe04pjB3l5ekdd51v DH1+n/NRmg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:54 2026 by rpki-client