This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer File: WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer (raw, json) Hash identifier: h317hARcuGZdDMIF01SxNfnCxGeYgJhue3h0J6c+/lo= Subject key identifier: 58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6DEDCC26B4EA667AD90E5E6666647 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197611 IP: 91.224.188.0/23 IP: 2001:678:a54::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:de:dc:c2:6b:4e:a6:67:ad:90:e5:e6:66:66:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5811ab97aac984b7524effad5fac68eb1e19cdce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e3:8a:c3:ef:f0:2f:84:0d:74:8c:5b:51:0f: f0:c7:73:e2:d5:97:f8:8c:a8:50:31:6b:9c:5b:8b: 96:07:5a:e5:a1:22:f3:f4:db:ea:a9:bd:2d:7b:e6: a0:c4:15:13:fe:e9:f9:7e:eb:5d:e3:4c:03:86:0f: b0:1d:4b:d5:cd:2e:53:1f:6c:95:ad:fd:93:ff:e4: ee:5b:58:12:83:c4:0c:ea:4d:f2:b7:a4:e1:2e:24: 16:69:e9:cb:8c:9f:9b:46:35:b3:80:77:4f:19:4c: b4:38:25:ab:1e:67:01:6f:9d:13:e3:2a:11:b7:7f: cb:37:6b:b1:e7:ef:13:fc:9d:38:d3:e8:1d:72:09: 60:44:63:5c:2b:3c:12:ad:41:cd:8b:7c:b1:e1:db: fd:31:3a:bc:c3:6c:fd:11:94:17:63:f8:35:93:68: 50:81:d7:d9:89:f9:4d:d9:f6:0a:ad:1c:0d:37:df: d8:c7:d7:4d:44:f4:39:48:33:d3:21:75:e6:e1:9e: 42:a6:ae:35:94:33:97:86:35:0b:b0:e5:f1:4a:ae: e8:cf:e1:8d:b9:ed:9c:31:c9:b0:57:81:26:bc:e0: a3:20:99:9b:b9:2c:54:02:80:11:1e:2c:d1:e6:ca: 21:3a:71:9e:a7:8f:25:0a:85:5f:74:48:3c:87:51: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.188.0/23 IPv6: 2001:678:a54::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197611 Signature Algorithm: sha256WithRSAEncryption 5a:43:37:22:1b:a5:37:55:04:bd:e8:ce:f1:39:7c:50:14:70: 44:c6:99:80:fd:0b:3e:fc:3e:f9:4a:1b:88:2a:af:3b:0e:bd: e2:40:4f:e5:d5:b5:69:36:dc:69:6d:3d:41:e5:7e:92:37:78: a6:5d:dd:eb:d2:b6:a8:12:9f:6c:b6:70:1f:25:ef:96:cb:d4: 4c:67:67:56:e2:52:33:9f:17:46:f3:87:4c:e3:45:83:c1:db: bb:da:95:fa:47:ad:99:d9:12:0d:87:ae:16:65:d4:b5:0a:96: e1:7e:6b:ea:19:2b:5d:42:7d:1c:fd:b8:fb:84:8e:42:5f:b6: 96:56:1d:3c:8b:6e:00:9c:f2:bb:2f:b3:6a:cd:a6:3e:c4:f1: 80:72:6f:d5:40:21:76:9b:36:c4:92:e9:61:00:32:bc:b4:6b: ce:11:0d:55:3a:4a:66:81:da:50:23:aa:85:f1:ef:49:eb:eb: 3a:e0:b8:c6:30:65:98:12:b1:ae:2d:e2:76:10:7e:7d:ae:b1: fc:26:66:0f:1d:6d:db:e3:17:d5:87:f1:c3:8d:44:b7:69:8f: a2:4b:6d:e9:64:85:3d:2a:19:7d:ae:40:ae:3f:1e:f2:fa:94: a4:e0:39:57:c3:da:b6:75:27:48:14:f9:74:81:c1:f9:7a:59: ea:fa:5e:1e -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt3xt7cwmtOpmetkOXmZmZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODExYWI5N2FhYzk4NGI3NTI0ZWZmYWQ1ZmFjNjhlYjFlMTljZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuOKw+/wL4QNdIxbUQ/wx3Pi1Zf4 jKhQMWucW4uWB1rloSLz9Nvqqb0te+agxBUT/un5futd40wDhg+wHUvVzS5TH2yV rf2T/+TuW1gSg8QM6k3yt6ThLiQWaenLjJ+bRjWzgHdPGUy0OCWrHmcBb50T4yoR t3/LN2ux5+8T/J040+gdcglgRGNcKzwSrUHNi3yx4dv9MTq8w2z9EZQXY/g1k2hQ gdfZiflN2fYKrRwNN9/Yx9dNRPQ5SDPTIXXm4Z5Cpq41lDOXhjULsOXxSq7oz+GN ue2cMcmwV4EmvOCjIJmbuSxUAoARHizR5sohOnGep48lCoVfdEg8h1G+ZwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFFgRq5eqyYS3Uk7/rV+saOseGc3OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2IzNjFj Yi1lNjEwLTRlOGMtOWIyMi1kZDYxYjdlNDRiYWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvYjM2MWNi LWU2MTAtNGU4Yy05YjIyLWRkNjFiN2U0NGJhZi8xL1dCR3JsNnJKaExkU1R2LXRY NnhvNng0WnpjNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBW+C8MA8EAgACMAkDBwAgAQZ4ClQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwPrMA0GCSqGSIb3DQEBCwUAA4IBAQBaQzciG6U3 VQS96M7xOXxQFHBExpmA/Qs+/D75ShuIKq87Dr3iQE/l1bVpNtxpbT1B5X6SN3im Xd3r0raoEp9stnAfJe+Wy9RMZ2dW4lIznxdG84dM40WDwdu72pX6R62Z2RINh64W ZdS1CpbhfmvqGStdQn0c/bj7hI5CX7aWVh08i24AnPK7L7NqzaY+xPGAcm/VQCF2 mzbEkulhADK8tGvOEQ1VOkpmgdpQI6qF8e9J6+s64LjGMGWYErGuLeJ2EH59rrH8 JmYPHW3b4xfVh/HDjUS3aY+iS23pZIU9Khl9rkCuPx7y+pSk4DlXw9q2dSdIFPl0 gcH5elnq+l4e -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:53 2026 by rpki-client