This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer File: WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer (raw, json) Hash identifier: 5ctO/kmOw46aJUBwqEyR57ah5gJmK0NlFobVQD5QS1Y= Subject key identifier: 58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C05905E651D21E8050B7B98785B9A959B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 17:04:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39307 AS: 212393 IP: 185.210.160.0/24 IP: 185.222.23.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:90:5e:65:1d:21:e8:05:0b:7b:98:78:5b:9a:95:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 17:04:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5812db6bf70652bfb45bebfb25054a57f9799f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:3a:a5:0b:94:85:4c:2b:cd:3b:fc:52:84: b1:39:98:5f:9d:b5:79:a3:13:c7:31:a9:72:4a:dc: 4f:10:63:6f:3f:35:b0:f5:0d:d3:06:05:65:ad:7d: 1e:b7:1d:e7:a1:01:3a:82:00:63:23:82:3d:e2:46: 3d:f0:93:92:30:92:24:9d:23:e9:28:d6:08:1a:b5: 8c:7c:54:c6:63:02:5a:cc:4d:aa:38:d7:21:2d:a5: 7a:a7:68:d1:9f:c6:92:bc:af:d4:83:71:93:71:44: 90:b1:e8:b1:f8:38:36:55:96:fd:3b:fc:53:7f:a8: 35:47:3e:b1:a6:b5:c6:74:2c:a5:6b:bf:7c:c7:57: ec:7c:9f:66:9c:2e:0a:11:21:ed:44:e5:08:ee:94: 2e:22:48:a0:e4:08:e1:f1:4a:25:97:7e:9d:d6:bc: 72:73:a7:f3:f1:9d:ef:6f:1f:29:d0:62:ba:58:15: 40:50:5a:f8:2f:0d:c0:ac:f3:e5:b3:fa:64:a3:d1: b1:da:42:22:2a:df:42:10:34:a7:7b:ec:a2:f8:3a: 8f:76:06:70:8c:99:e4:95:5b:96:22:4e:8f:69:c0: 8b:38:1f:ed:57:ad:7d:5f:00:4f:39:a6:7f:79:e3: 69:df:79:83:30:d1:3a:28:bb:f1:eb:36:9a:24:96: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.160.0/24 185.222.23.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39307 212393 Signature Algorithm: sha256WithRSAEncryption 6d:97:be:2b:4a:ef:bf:94:2e:b5:c0:33:8d:04:50:1b:b9:e6: 9c:95:a7:96:e2:27:ce:70:65:e5:e4:59:bd:60:42:02:c2:77: 89:4b:e9:d5:7c:74:87:8a:83:54:29:9d:fa:9f:0b:6e:cc:d2: a6:0b:9f:b6:4b:39:08:34:20:f8:fc:84:c7:93:62:b8:5b:8c: 41:70:20:04:2c:40:0a:46:df:2c:32:d3:96:09:71:05:8f:a7: 28:1b:16:62:c8:fe:f9:55:28:3a:33:6c:a4:17:15:51:80:b6: 37:4f:b0:0e:31:16:9e:d6:de:3c:d9:e3:39:94:d8:23:db:0a: 81:0d:a9:c7:02:2e:b5:0d:31:91:10:23:56:67:c5:32:b1:17: 34:3d:10:1e:17:cc:22:97:a8:8e:2e:79:9d:7b:ba:d3:97:f6: 41:70:b4:a1:16:d6:99:5f:f7:c0:23:29:a3:d6:af:0d:8e:fc: 1a:18:89:25:18:c3:ed:15:c8:f5:bb:16:37:0d:ab:53:7a:03: 8e:79:5f:8a:ea:7c:64:fd:2f:28:56:59:d4:7b:8d:11:04:5b: 05:b6:03:6c:e2:b8:6f:ab:d6:b3:01:08:d9:21:88:b9:fe:00: 62:7d:20:b3:60:14:04:6f:d7:6c:d9:70:69:1c:34:a3:b4:0d: 74:2e:ed:6e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZwFkF5lHSHoBQt7mHhbmpWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MTcwNDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODEyZGI2YmY3MDY1MmJmYjQ1YmViZmIyNTA1NGE1N2Y5Nzk5Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xk6pQuUhUwrzTv8UoSxOZhfnbV5 oxPHMalyStxPEGNvPzWw9Q3TBgVlrX0etx3noQE6ggBjI4I94kY98JOSMJIknSPp KNYIGrWMfFTGYwJazE2qONchLaV6p2jRn8aSvK/Ug3GTcUSQseix+Dg2VZb9O/xT f6g1Rz6xprXGdCyla798x1fsfJ9mnC4KESHtROUI7pQuIkig5Ajh8Uoll36d1rxy c6fz8Z3vbx8p0GK6WBVAUFr4Lw3ArPPls/pko9Gx2kIiKt9CEDSne+yi+DqPdgZw jJnklVuWIk6PacCLOB/tV619XwBPOaZ/eeNp33mDMNE6KLvx6zaaJJam/wIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFFgS22v3BlK/tFvr+yUFSlf5eZ90MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2EwM2Yz Zi1lMTIwLTRlOTctYTI4MC1hMDU4YzRhNTVlMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYTAzZjNm LWUxMjAtNGU5Ny1hMjgwLWEwNThjNGE1NWUyYi8xL1dCTGJhX2NHVXItMFctdjdK UVZLVl9sNW4zUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAudKgAwQAud4XMB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCZiwIDAz2pMA0GCSqGSIb3DQEBCwUAA4IBAQBtl74rSu+/lC61wDON BFAbueaclaeW4ifOcGXl5Fm9YEICwneJS+nVfHSHioNUKZ36nwtuzNKmC5+2SzkI NCD4/ITHk2K4W4xBcCAELEAKRt8sMtOWCXEFj6coGxZiyP75VSg6M2ykFxVRgLY3 T7AOMRae1t482eM5lNgj2wqBDanHAi61DTGRECNWZ8UysRc0PRAeF8wil6iOLnmd e7rTl/ZBcLShFtaZX/fAIymj1q8NjvwaGIklGMPtFcj1uxY3DatTegOOeV+K6nxk /S8oVlnUe40RBFsFtgNs4rhvq9azAQjZIYi5/gBifSCzYBQEb9ds2XBpHDSjtA10 Lu1u -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:27 2026 by rpki-client