This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer File: WFRbn70B0owOptCPW0cts0-tLqM.cer (raw, json) Hash identifier: MaQu6LgDyQrhjS8GQ828QvfiwzIFYN5SscM2sDG8Bgg= Subject key identifier: 58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA378BD8C06A722B2E4B5FF49979CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41129 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:37:8b:d8:c0:6a:72:2b:2e:4b:5f:f4:99:79:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:86:38:09:1d:4e:60:90:9e:7f:6d:f4:98: fb:95:de:27:68:66:9c:fd:2a:91:3a:60:c8:6a:4e: 84:a0:ea:53:da:50:7d:13:f1:5f:14:bc:1e:0c:99: 30:f8:48:f9:ce:78:4f:cc:da:7b:76:a8:cd:71:ed: b1:ec:75:92:5a:15:1d:e1:1a:67:bf:59:4c:9d:70: d9:49:7c:d4:fb:3d:da:9d:b3:bc:7f:70:f9:56:7b: 51:9c:4d:6d:7b:19:90:80:ca:2a:f5:17:a1:32:15: 50:5b:da:33:6f:03:a6:a8:f0:26:46:09:90:87:ce: 94:38:eb:23:3f:8d:1d:fd:31:ee:fd:fd:6b:07:df: 39:10:8b:3e:b9:15:24:6c:d0:84:22:a6:6c:65:1c: e5:db:cd:dc:6a:6c:07:32:4e:62:5b:48:7b:63:e8: d9:d3:c3:b2:40:da:ff:53:d2:5e:0e:0b:12:94:96: b7:ff:26:e8:ba:81:c3:68:6f:22:0e:c5:84:2b:ae: 06:10:48:31:9c:47:ee:80:a7:15:1e:45:41:4c:89: 8b:d2:8b:aa:a6:75:e8:97:16:30:18:56:e6:5d:31: c9:f0:b3:64:dc:91:ce:03:b0:78:62:1b:6a:70:52: 64:06:4b:2f:11:71:b2:84:92:d2:53:8d:05:2c:18: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 41129 Signature Algorithm: sha256WithRSAEncryption 93:9a:b1:e4:22:9f:da:54:26:09:df:5e:f3:fd:b0:3a:41:1a: 7c:85:02:d9:4f:b5:0b:38:21:ff:78:42:e6:b2:5e:59:ef:81: 7f:ad:f5:be:a8:bf:09:99:3d:91:32:9d:74:8e:21:7d:09:2b: 1d:c5:2b:dc:d4:c5:1d:cd:c7:08:ed:41:83:22:03:ce:45:64: 00:7f:47:a0:fc:17:f9:67:72:c1:4d:38:27:ca:cc:b7:27:38: b2:6d:7a:e4:5a:31:07:71:c4:ba:be:47:4c:8f:b4:56:a6:f4: 32:4c:bb:21:21:6f:e9:39:8e:76:a9:2a:1a:54:da:9a:35:15: da:85:61:a8:6a:34:aa:8d:bb:4a:0c:ba:e4:22:56:2e:e8:f2: 19:5e:bc:0e:fe:1e:a8:b6:b0:6e:62:0e:12:1e:77:81:4a:57: cb:17:8d:90:22:4b:4c:6d:49:0e:fd:f5:b4:f2:e4:74:d5:9a: bd:7f:d8:06:ee:13:7f:38:08:b3:84:5f:c7:e6:c9:7e:98:85: f0:49:13:fb:f8:79:8b:fe:5b:af:a8:b6:d9:c9:68:50:35:ce: ff:ce:89:70:b7:19:fc:38:cb:73:37:ae:4e:40:75:1f:a1:9a: a7:3e:53:30:f5:67:e8:ab:02:24:f0:ee:1d:5e:da:42:2a:b5: 88:9d:41:7f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9yjeL2MBqcisuS1/0mXnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODU0NWI5ZmJkMDFkMjhjMGVhNmQwOGY1YjQ3MmRiMzRmYWQyZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/6GOAkdTmCQnn9t9Jj7ld4naGac /SqROmDIak6EoOpT2lB9E/FfFLweDJkw+Ej5znhPzNp7dqjNce2x7HWSWhUd4Rpn v1lMnXDZSXzU+z3anbO8f3D5VntRnE1texmQgMoq9RehMhVQW9ozbwOmqPAmRgmQ h86UOOsjP40d/THu/f1rB985EIs+uRUkbNCEIqZsZRzl283camwHMk5iW0h7Y+jZ 08OyQNr/U9JeDgsSlJa3/ybouoHDaG8iDsWEK64GEEgxnEfugKcVHkVBTImL0ouq pnXolxYwGFbmXTHJ8LNk3JHOA7B4YhtqcFJkBksvEXGyhJLSU40FLBgoNwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFhUW5+9AdKMDqbQj1tHLbNPrS6jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzljZmM3 OS04YmRhLTQ4NjItYTdkOC00ZjhkOTM1NWQ4NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvOWNmYzc5 LThiZGEtNDg2Mi1hN2Q4LTRmOGQ5MzU1ZDg2Mi8xL1dGUmJuNzBCMG93T3B0Q1BX MGN0czAtdExxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCgqTANBgkqhkiG9w0BAQsFAAOCAQEAk5qx5CKf2lQm Cd9e8/2wOkEafIUC2U+1Czgh/3hC5rJeWe+Bf631vqi/CZk9kTKddI4hfQkrHcUr 3NTFHc3HCO1BgyIDzkVkAH9HoPwX+WdywU04J8rMtyc4sm165FoxB3HEur5HTI+0 Vqb0Mky7ISFv6TmOdqkqGlTamjUV2oVhqGo0qo27Sgy65CJWLujyGV68Dv4eqLaw bmIOEh53gUpXyxeNkCJLTG1JDv31tPLkdNWavX/YBu4TfzgIs4Rfx+bJfpiF8EkT +/h5i/5br6i22cloUDXO/86JcLcZ/DjLczeuTkB1H6Gapz5TMPVn6KsCJPDuHV7a Qiq1iJ1Bfw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:56 2026 by rpki-client