This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer File: WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer (raw, json) Hash identifier: P40chNeEIfOPilyUW2wpXqSWvBUHCfuXYddJOuqdZfk= Subject key identifier: 58:3F:AF:07:E3:EC:92:00:76:4F:27:3A:10:E7:B6:C4:B1:58:2E:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5240ECE4C2F0A8ADBDBDE757B926E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.72.130.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:24:0e:ce:4c:2f:0a:8a:db:db:de:75:7b:92:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=583faf07e3ec9200764f273a10e7b6c4b1582ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:dc:76:46:d0:29:da:eb:0c:da:a7:a6:72: bf:80:fe:67:17:60:e2:f7:15:89:28:fa:5d:ff:77: 20:d3:8f:6e:38:37:89:30:b9:33:66:62:e7:48:1f: df:7b:96:83:bd:b9:33:09:60:ce:f3:1f:b7:2a:fe: b4:0d:7c:fb:40:f9:07:a0:a2:8d:54:3a:b3:1c:5a: 7b:c1:75:32:63:c7:80:ab:73:cd:ab:74:b6:77:17: f5:15:17:4c:8a:8c:93:ec:20:14:24:09:16:a6:d8: 35:8b:64:1c:2f:8d:8c:95:98:c0:fc:8d:1b:ac:ba: c6:4c:1b:7a:05:6d:2e:a3:1c:95:e1:91:1f:6e:89: 3d:06:ff:83:9a:a6:c1:cf:3e:d9:a6:47:cd:5e:d6: e6:cc:a2:4d:de:d6:b3:56:fd:7a:24:58:4e:7d:68: 2f:c8:a5:ff:31:0b:0b:2d:7b:cc:7f:6b:a3:d4:c1: 2c:c1:44:61:f7:66:03:aa:35:cb:5b:02:4d:d4:a4: 1a:21:c2:60:41:ab:2a:8f:f6:a7:6a:51:6d:7b:e1: 75:76:95:e6:38:4a:06:97:c6:2b:56:58:e8:94:40: be:9c:9e:33:a7:61:2b:5c:43:15:88:52:09:20:97: d8:3b:f7:da:0c:65:17:76:91:54:3f:dc:b5:b9:96: 4d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3F:AF:07:E3:EC:92:00:76:4F:27:3A:10:E7:B6:C4:B1:58:2E:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.130.0/24 Signature Algorithm: sha256WithRSAEncryption a1:ed:7c:8c:96:b1:79:5a:53:3d:ef:99:b5:6d:e3:34:d4:99: 85:4a:6e:95:60:e3:dc:6d:a3:57:0e:76:2b:c8:c7:5c:a1:e9: dd:7b:f0:33:6b:41:19:d5:82:2f:3d:b7:6c:c8:57:75:6f:93: 05:c9:0a:c3:8f:be:7f:4b:4b:7b:27:22:9c:64:75:8c:37:2c: cc:65:a9:d2:b1:af:63:76:e8:29:8a:46:84:42:14:87:d9:ee: 00:a3:80:45:3d:c3:cc:2c:6f:41:2e:b0:83:f6:45:d1:93:fe: d6:84:11:52:cf:d9:79:a2:5e:6e:2a:82:a7:13:6a:1b:d1:68: 11:10:b0:c4:47:b4:cf:ff:c2:2b:23:20:1d:04:c8:da:87:ff: fb:1a:26:4a:1e:8d:7a:2d:db:f6:6f:6a:af:cf:65:5b:18:4d: 62:00:a8:fa:1f:ea:45:b2:10:93:4b:4e:0c:5a:6a:4b:04:0c: f3:50:05:1d:4b:36:b4:39:fb:6b:be:aa:81:0e:be:75:30:96: 03:5d:23:21:fb:54:fe:7f:9e:61:6c:c1:98:15:b8:59:75:d5: bb:b8:69:32:eb:7e:c7:8d:4a:cf:ff:7f:48:9f:e8:74:d2:70: 02:04:8e:be:c6:f7:d3:3b:f2:a5:d0:2a:28:dc:b0:80:c1:bd: 3e:02:2c:91 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pSQOzkwvCorb2951e5JuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODNmYWYwN2UzZWM5MjAwNzY0ZjI3M2ExMGU3YjZjNGIxNTgyZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeLcdkbQKdrrDNqnpnK/gP5nF2Di 9xWJKPpd/3cg049uODeJMLkzZmLnSB/fe5aDvbkzCWDO8x+3Kv60DXz7QPkHoKKN VDqzHFp7wXUyY8eAq3PNq3S2dxf1FRdMioyT7CAUJAkWptg1i2QcL42MlZjA/I0b rLrGTBt6BW0uoxyV4ZEfbok9Bv+DmqbBzz7ZpkfNXtbmzKJN3tazVv16JFhOfWgv yKX/MQsLLXvMf2uj1MEswURh92YDqjXLWwJN1KQaIcJgQasqj/analFte+F1dpXm OEoGl8YrVljolEC+nJ4zp2ErXEMViFIJIJfYO/faDGUXdpFUP9y1uZZNqwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFg/rwfj7JIAdk8nOhDntsSxWC6nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzUxN2E4 Ni00YmFlLTQ2Y2QtOThlMi1jZjk0YjFmZDQ2OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNTE3YTg2 LTRiYWUtNDZjZC05OGUyLWNmOTRiMWZkNDY5ZS8xL1dELXZCLVBza2dCMlR5YzZF T2UyeExGWUxxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAJUiCMA0GCSqGSIb3DQEBCwUAA4IBAQCh7XyM lrF5WlM975m1beM01JmFSm6VYOPcbaNXDnYryMdcoende/Aza0EZ1YIvPbdsyFd1 b5MFyQrDj75/S0t7JyKcZHWMNyzMZanSsa9jdugpikaEQhSH2e4Ao4BFPcPMLG9B LrCD9kXRk/7WhBFSz9l5ol5uKoKnE2ob0WgRELDER7TP/8IrIyAdBMjah//7GiZK Ho16Ldv2b2qvz2VbGE1iAKj6H+pFshCTS04MWmpLBAzzUAUdSza0OftrvqqBDr51 MJYDXSMh+1T+f55hbMGYFbhZddW7uGky637HjUrP/39In+h00nACBI6+xvfTO/Kl 0Coo3LCAwb0+AiyR -----END CERTIFICATE-----Generated at Fri Jan 23 23:04:41 2026 by rpki-client