This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer (raw, json) Hash identifier: ZEfySmqvCZOsNQwa82G/fGVI+6e5TP8906IDLfBbBdA= Subject key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F850666F1831B5BBBF64438A7D399DD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205276 IP: 185.172.200.0/22 IP: 2a0b:2100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:06:66:f1:83:1b:5b:bb:f6:44:38:a7:d3:99:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:fa:87:eb:2b:67:20:dc:fc:5c:3a:0d:8e: 50:ad:c9:37:db:a8:b5:2a:18:66:19:c2:c6:a2:ad: c9:90:56:1c:dc:8a:a6:ee:49:a5:56:0e:96:5e:27: 5a:87:7b:61:1b:95:ad:d9:41:2f:27:1a:38:02:f7: 88:c9:d6:e9:d3:de:88:38:e2:26:ed:e4:59:a7:6a: a8:1a:23:ed:fa:b0:f0:c4:a5:e8:d3:95:5a:f5:43: b1:de:a6:83:c6:5a:ef:a5:bb:98:1f:7c:17:9f:d7: be:08:1b:ae:17:88:65:03:a2:8e:89:5b:b5:a6:55: 2e:70:7b:8d:e3:e5:66:8d:0f:5c:69:1d:e2:87:1a: a8:7f:d9:91:e7:49:2a:31:c9:08:e1:22:cf:39:68: ac:60:f3:4e:e4:73:3b:75:fc:ed:e1:d7:63:3d:2d: 97:ea:c2:05:67:6b:15:97:4e:81:f2:85:c3:e5:fe: e3:3f:0f:cd:5d:53:f7:bc:6b:03:cb:f3:97:2d:80: 9d:d9:93:de:c2:48:77:5a:18:3d:20:fa:dd:af:ae: 95:a2:e2:e4:0e:b9:6d:9c:13:78:e3:d6:88:94:a0: c3:17:30:f1:c8:84:d4:97:68:d2:62:a3:7a:6a:bd: 2c:49:a8:02:30:57:11:49:19:33:36:81:be:e0:09: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.200.0/22 IPv6: 2a0b:2100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205276 Signature Algorithm: sha256WithRSAEncryption 2c:a1:76:ce:00:b9:72:5e:94:74:04:51:4c:98:7b:18:21:97: 7f:90:12:01:6f:46:5d:44:75:d0:49:82:db:07:f3:8e:6e:91: b1:e4:45:18:63:0f:43:ae:36:d3:86:37:d4:ed:f4:8d:a7:6e: 17:8d:d8:f7:07:1e:f8:b1:a0:29:ca:76:45:f0:97:b5:9c:7a: 6b:e7:7d:59:f2:12:8b:52:ed:ae:6a:88:01:81:fe:14:d2:b9: 2c:4b:11:3c:37:70:a7:4d:08:65:13:e3:99:f9:ac:bd:b2:e7: 85:26:dd:0d:ea:a9:d0:51:de:cd:0c:eb:7f:51:78:4e:4e:03: 55:b7:61:4e:ef:67:cd:fb:bb:ea:67:7f:cc:4a:61:f0:aa:2a: f0:f4:9a:33:50:16:b5:8e:51:4c:23:ba:b8:42:bd:e4:20:cd: 4f:db:58:9a:7a:a4:a7:0e:19:d3:4c:7f:5a:08:50:28:0f:a0: 96:57:51:5f:a9:e3:81:4c:88:cf:f3:73:c6:2e:1d:3c:ce:cf: 13:c5:b2:9e:39:7a:06:7a:1e:43:24:03:91:31:5b:d1:fa:33: 24:30:c9:87:c7:8a:76:23:14:6d:03:2c:1c:74:1e:3c:b1:07: 65:fb:7a:de:26:8f:8f:5d:a6:d2:33:0a:b0:71:24:86:e2:c5: ec:db:c4:c6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hQZm8YMbW7v2RDin05ndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzM1OGU1YzRmODBhODIwNmNjYzUxMDNiZjJlYmUzYTRlOTZhMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK/6h+srZyDc/Fw6DY5Qrck326i1 KhhmGcLGoq3JkFYc3Iqm7kmlVg6WXidah3thG5Wt2UEvJxo4AveIydbp096IOOIm 7eRZp2qoGiPt+rDwxKXo05Va9UOx3qaDxlrvpbuYH3wXn9e+CBuuF4hlA6KOiVu1 plUucHuN4+VmjQ9caR3ihxqof9mR50kqMckI4SLPOWisYPNO5HM7dfzt4ddjPS2X 6sIFZ2sVl06B8oXD5f7jPw/NXVP3vGsDy/OXLYCd2ZPewkh3Whg9IPrdr66VouLk DrltnBN449aIlKDDFzDxyITUl2jSYqN6ar0sSagCMFcRSRkzNoG+4Ak7RwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMM1jlxPgKggbMxRA78uvjpOlqDxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzY1MGM0 MS03ODA0LTRhMjQtOTM0ZS0wZGJhN2ZhNmE0MDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNjUwYzQx LTc4MDQtNGEyNC05MzRlLTBkYmE3ZmE2YTQwMy8xL3d6V09YRS1BcUNCc3pGRUR2 eTYtT2s2V29QRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuazIMA0EAgACMAcDBQMqCyEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMh3DANBgkqhkiG9w0BAQsFAAOCAQEALKF2zgC5cl6U dARRTJh7GCGXf5ASAW9GXUR10EmC2wfzjm6RseRFGGMPQ64204Y31O30jaduF43Y 9wce+LGgKcp2RfCXtZx6a+d9WfISi1LtrmqIAYH+FNK5LEsRPDdwp00IZRPjmfms vbLnhSbdDeqp0FHezQzrf1F4Tk4DVbdhTu9nzfu76md/zEph8Koq8PSaM1AWtY5R TCO6uEK95CDNT9tYmnqkpw4Z00x/WghQKA+glldRX6njgUyIz/Nzxi4dPM7PE8Wy njl6BnoeQyQDkTFb0fozJDDJh8eKdiMUbQMsHHQePLEHZft63iaPj12m0jMKsHEk huLF7NvExg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:24 2026 by rpki-client