This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer File: wzCs3wQbXcx-XsbPj_i9BkjoZww.cer (raw, json) Hash identifier: kri+HGFyWZAjT22XxuwBzoVY0xhjUi6twmqUz+fh0nM= Subject key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37C3AF6A795AF771B8D02BA1C8A1CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207858 IP: 193.28.255.0/24 IP: 193.29.1.0/24 IP: 193.29.4.0/24 IP: 193.29.8.0/24 IP: 2a0f:7a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c3:af:6a:79:5a:f7:71:b8:d0:2b:a1:c8:a1:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:16:a0:fc:9c:d7:5a:5e:ac:67:2f:51:2c:0d: 2a:54:f9:e2:4c:35:da:88:06:24:4a:f5:ca:e0:83: 79:e8:8b:c5:45:51:4a:f3:8a:c3:3e:84:c4:2b:36: 02:33:d8:39:4c:7a:a1:56:ea:18:e8:9d:41:f3:2d: d7:3a:b8:a6:fe:d3:4f:85:ce:96:29:e8:de:a0:8f: 91:83:30:1b:de:2c:c6:62:ba:89:41:9b:36:cf:98: 95:45:12:b8:11:c7:8e:aa:c2:71:7e:80:e6:25:db: a5:f7:17:40:21:c5:94:57:c2:2c:16:26:7b:67:d6: 7a:fe:ad:76:32:42:9f:d1:b7:4e:4e:62:9a:52:17: 74:6f:a9:ed:a7:57:82:54:da:93:b1:ea:90:9e:14: 59:e9:9f:00:a2:2e:23:d4:63:01:91:4a:66:1c:d5: a5:1b:31:e1:47:0a:f8:be:2c:ad:e8:a2:6d:5e:f0: 2f:a1:45:28:67:f8:2c:08:91:3d:b1:e6:b9:b7:57: a0:9b:36:17:33:b3:56:0b:06:ae:b2:48:13:62:6c: 74:bc:f5:be:0f:b2:34:98:45:77:23:6c:8a:0c:00: d9:47:d6:91:a8:be:d7:45:23:52:e4:0e:fe:21:a5: 5a:e9:d5:cd:b6:0b:93:bb:3e:dd:34:b4:5d:cb:4e: 76:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.255.0/24 193.29.1.0/24 193.29.4.0/24 193.29.8.0/24 IPv6: 2a0f:7a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207858 Signature Algorithm: sha256WithRSAEncryption a2:25:6b:35:62:cf:59:21:f5:bd:fa:11:e9:0e:2e:da:cf:4e: 0a:55:7d:7e:fc:b1:f6:7e:7d:24:0d:77:57:ab:82:b7:3d:40: d6:04:6f:fc:53:e9:07:a4:61:54:30:3c:7e:e6:e7:ca:fc:4d: 8e:cd:e3:d3:3a:c7:e5:41:80:f7:b7:fe:70:6f:1f:e9:34:ae: f0:0e:58:c0:d2:c9:f8:dd:9d:13:6e:b9:14:c6:1c:d9:76:3b: b6:6e:9b:c8:65:74:e8:9a:8c:09:4b:1d:97:43:fc:53:08:0b: 51:d5:80:95:4d:26:9d:8a:2e:29:f9:76:c7:d8:f8:16:20:d7: 1a:e3:01:58:b2:90:82:8f:97:be:6e:c4:52:33:cd:42:46:22: e0:d8:60:c3:d2:3e:bc:3f:a3:a8:4f:f5:20:0e:3a:49:6a:c6: fd:79:63:2b:0f:0f:fe:81:79:5c:61:8c:f5:99:31:01:91:66: 25:6b:63:db:33:93:4b:0f:b2:4c:df:d0:f5:bd:9b:ff:fb:e2: 00:ac:15:2e:c7:2e:5d:c6:00:76:8f:91:e2:d4:12:29:e3:65: 54:f6:53:87:b1:d6:76:ba:01:ee:b2:8e:4c:2a:0e:4f:ec:11: d0:36:89:5d:3b:af:60:98:ba:27:6d:ad:5a:9c:54:7f:33:39: 07:c5:5f:c3 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+N8Ovanla93G40CuhyKHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzMwYWNkZjA0MWI1ZGNjN2U1ZWM2Y2Y4ZmY4YmQwNjQ4ZTg2NzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBag/JzXWl6sZy9RLA0qVPniTDXa iAYkSvXK4IN56IvFRVFK84rDPoTEKzYCM9g5THqhVuoY6J1B8y3XOrim/tNPhc6W KejeoI+RgzAb3izGYrqJQZs2z5iVRRK4EceOqsJxfoDmJdul9xdAIcWUV8IsFiZ7 Z9Z6/q12MkKf0bdOTmKaUhd0b6ntp1eCVNqTseqQnhRZ6Z8Aoi4j1GMBkUpmHNWl GzHhRwr4viyt6KJtXvAvoUUoZ/gsCJE9sea5t1egmzYXM7NWCwauskgTYmx0vPW+ D7I0mEV3I2yKDADZR9aRqL7XRSNS5A7+IaVa6dXNtguTuz7dNLRdy052IQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFMMwrN8EG13Mfl7Gz4/4vQZI6GcMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzJhODRl OS02OGIzLTRlM2YtYjYxNS1hMGFkNjFkMTk0YTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvMmE4NGU5 LTY4YjMtNGUzZi1iNjE1LWEwYWQ2MWQxOTRhMS8xL3d6Q3Mzd1FiWGN4LVhzYlBq X2k5Qmtqb1p3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAwRz/AwQAwR0BAwQAwR0EAwQAwR0IMA0EAgAC MAcDBQMqD3pAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMr8jANBgkqhkiG9w0B AQsFAAOCAQEAoiVrNWLPWSH1vfoR6Q4u2s9OClV9fvyx9n59JA13V6uCtz1A1gRv /FPpB6RhVDA8fubnyvxNjs3j0zrH5UGA97f+cG8f6TSu8A5YwNLJ+N2dE265FMYc 2XY7tm6byGV06JqMCUsdl0P8UwgLUdWAlU0mnYouKfl2x9j4FiDXGuMBWLKQgo+X vm7EUjPNQkYi4Nhgw9I+vD+jqE/1IA46SWrG/XljKw8P/oF5XGGM9ZkxAZFmJWtj 2zOTSw+yTN/Q9b2b//viAKwVLscuXcYAdo+R4tQSKeNlVPZTh7HWdroB7rKOTCoO T+wR0DaJXTuvYJi6J22tWpxUfzM5B8Vfww== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:54 2026 by rpki-client