This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer (raw, json) Hash identifier: slVBS/4wPLq3IjCPHm83zP893JsUKKB18x5hw6wVb1s= Subject key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8BCC0BCB101003BA34D941A7E7AC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204723 IP: 2001:678:5d0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:bc:c0:bc:b1:01:00:3b:a3:4d:94:1a:7e:7a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a127453dfba17e10c347fa34bbebab14905a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:c5:da:02:cc:e9:4f:a8:7c:ad:89:e1:ce: 62:bd:a5:db:91:35:08:24:09:9b:09:17:99:cc:be: bc:7a:7c:ad:d5:a9:47:b1:ec:63:e8:4d:d0:fd:a7: c1:ca:fd:24:2e:18:e6:f5:a4:62:08:19:4a:aa:d5: f1:d6:74:d4:91:1e:63:bc:ca:06:58:a4:20:b3:91: 0d:27:e8:22:b9:58:29:61:b3:b8:c3:73:0d:c7:a6: 4e:30:cd:0d:62:80:71:da:62:76:44:d9:4c:52:8f: 49:3f:75:8b:2b:e1:c4:2e:c2:ec:51:9a:51:7a:39: 2f:cd:2f:c6:d3:c9:14:a6:d6:3f:ef:1d:ee:f6:47: 6c:93:f2:ed:84:4b:13:0e:3b:4d:64:03:36:5c:11: 5b:0e:ea:4f:14:9d:e8:0d:0f:9f:ca:d3:57:51:ee: d0:de:77:fc:de:00:a0:f7:aa:eb:0f:8c:1b:54:04: 02:01:66:c8:d4:e3:f1:b4:a5:4e:65:b6:12:5d:b9: 54:9c:44:bf:55:1d:64:24:c5:2c:1c:2d:15:eb:28: cc:2e:ce:ce:0b:cd:be:bd:74:f9:b7:cd:a6:80:42: 60:b0:2e:4f:cb:d5:48:e4:03:e3:b2:40:26:09:48: c0:36:2b:33:91:9f:1a:54:3e:65:72:05:34:89:bc: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:5d0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204723 Signature Algorithm: sha256WithRSAEncryption 32:2e:14:35:41:36:84:d1:c6:0e:56:23:e4:36:1b:7c:8d:cc: ca:ed:0b:e1:69:a4:a7:e4:e7:17:c6:fb:eb:b0:e8:2b:07:2a: 8c:66:8e:4d:93:8f:ce:3c:24:81:69:53:5c:66:cb:27:44:2c: bb:72:c4:1d:2c:75:df:c0:99:85:99:f8:2f:6b:8c:a7:14:2b: cf:8a:13:92:18:d0:6c:f9:49:0c:7e:cd:ba:3a:5a:83:c9:52: 10:86:4a:07:84:ea:0f:1b:71:4c:1f:15:e3:a6:cd:32:a8:09: 94:5e:26:73:43:83:92:41:3d:0a:b5:a4:c9:83:0b:bc:8c:5c: fc:1a:0a:9e:64:9e:5b:cb:8c:cd:8b:65:0e:3a:50:01:cb:5b: 92:ed:a9:9f:19:f7:9e:d3:34:a2:ff:14:d4:fc:d4:88:88:c1: c2:7b:98:c5:d4:ad:ca:59:0d:11:66:2c:7a:16:78:06:d3:59: c6:d8:73:df:c5:e4:4d:12:fd:97:ae:37:9e:f7:0e:9b:d9:2b: ef:3c:61:ea:0a:b4:01:a1:29:f5:06:9e:c5:62:82:57:ef:39: 29:8b:e5:6b:c6:ac:a6:c6:e2:7d:90:6f:fc:00:47:2d:1f:6a: 54:db:1d:47:d3:61:d2:a0:2a:98:b5:ff:d4:94:34:60:e3:c2: 20:f8:61:6a -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6yLzAvLEBADujTZQafnrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGExMjc0NTNkZmJhMTdlMTBjMzQ3ZmEzNGJiZWJhYjE0OTA1YTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRPF2gLM6U+ofK2J4c5ivaXbkTUI JAmbCReZzL68enyt1alHsexj6E3Q/afByv0kLhjm9aRiCBlKqtXx1nTUkR5jvMoG WKQgs5ENJ+giuVgpYbO4w3MNx6ZOMM0NYoBx2mJ2RNlMUo9JP3WLK+HELsLsUZpR ejkvzS/G08kUptY/7x3u9kdsk/LthEsTDjtNZAM2XBFbDupPFJ3oDQ+fytNXUe7Q 3nf83gCg96rrD4wbVAQCAWbI1OPxtKVOZbYSXblUnES/VR1kJMUsHC0V6yjMLs7O C82+vXT5t82mgEJgsC5Py9VI5APjskAmCUjANiszkZ8aVD5lcgU0ibwCkQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFFihJ0U9+6F+EMNH+jS766sUkFpXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzL2YxZGZl My0yNjA5LTQ2YjgtYjAzZi1kYTk2MDE5ZDRjMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvZjFkZmUz LTI2MDktNDZiOC1iMDNmLWRhOTYwMTlkNGMyMC8xL1dLRW5SVDM3b1g0UXcwZjZO THZycXhTUVdsYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAXQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMfszANBgkqhkiG9w0BAQsFAAOCAQEAMi4UNUE2hNHGDlYj5DYbfI3Myu0L 4Wmkp+TnF8b767DoKwcqjGaOTZOPzjwkgWlTXGbLJ0Qsu3LEHSx138CZhZn4L2uM pxQrz4oTkhjQbPlJDH7Nujpag8lSEIZKB4TqDxtxTB8V46bNMqgJlF4mc0ODkkE9 CrWkyYMLvIxc/BoKnmSeW8uMzYtlDjpQActbku2pnxn3ntM0ov8U1PzUiIjBwnuY xdStylkNEWYsehZ4BtNZxthz38XkTRL9l643nvcOm9kr7zxh6gq0AaEp9QaexWKC V+85KYvla8aspsbifZBv/ABHLR9qVNsdR9Nh0qAqmLX/1JQ0YOPCIPhhag== -----END CERTIFICATE-----Generated at Tue Jan 27 11:16:01 2026 by rpki-client