This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer (raw, json) Hash identifier: fL+/P27Jp9KROWRIwOzWkFX3toBVUay5BB0mtBpLfg8= Subject key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECA1103695C05537969C92C88AF88B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.208.216.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a1:10:36:95:c0:55:37:96:9c:92:c8:8a:f8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:82:87:70:65:47:5c:fc:e4:5b:92:cd:37: c1:ac:e0:a5:47:80:b1:06:05:56:1c:8b:fc:4c:ba: 8a:5b:1f:e1:32:c3:ed:e6:c7:8a:17:d3:b5:d2:cb: 6a:df:ed:a4:bd:d8:3f:67:a5:1b:74:8b:e9:15:c0: 38:38:df:9d:ff:7c:05:46:93:a9:1d:ef:62:b9:c2: 1e:d4:89:e7:67:e6:58:af:79:9d:7a:6e:3f:b1:83: af:86:ac:e2:35:da:d5:a3:ac:bc:7a:fd:e6:c5:8e: dd:49:6d:6f:39:63:52:fe:d3:3a:b2:0f:b3:26:38: d4:e0:7e:0a:f6:ff:91:dc:fc:9c:1f:24:09:bc:53: 90:64:ee:6b:8d:0c:bd:1d:b1:d1:68:e1:5e:39:81: b1:79:ef:99:f0:24:e3:1f:db:cb:3b:0e:80:d9:95: 23:95:32:aa:cc:29:3f:0b:81:4b:2f:a4:e6:0c:9f: 00:19:bd:37:85:ea:ae:aa:f4:b2:b0:fc:04:a6:27: 2f:4d:83:87:d4:41:93:51:3c:aa:67:86:d1:b3:8a: 79:05:5e:13:4d:e3:af:e3:2d:a6:e7:88:86:06:0c: 01:c6:fa:1d:f6:b1:08:e0:cd:21:7a:b5:90:fc:78: 00:d5:f7:c3:0f:4b:a4:ea:06:20:52:6c:6b:ca:19: 9a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.216.0/22 Signature Algorithm: sha256WithRSAEncryption ad:48:bd:14:a2:2b:67:d3:47:83:9e:7b:0d:0f:ea:78:b1:50: 8c:e7:49:6d:39:d2:c4:99:57:df:ad:b7:d3:85:1f:fd:b4:1c: f8:96:88:8c:15:dc:0d:4e:12:67:8a:b8:f4:1c:ad:8f:47:c1: aa:19:c9:ea:e8:5f:91:12:34:ba:b5:80:5c:d9:13:b1:85:85: 28:ad:2d:b7:ca:4b:e8:71:32:59:74:fa:6e:f7:9d:d4:49:3d: 04:93:a0:a6:65:08:f0:9e:a5:22:3b:50:99:9d:49:93:2d:09: 9e:5b:f0:a2:14:ed:01:46:c9:d5:d7:6b:09:5f:b4:ee:7a:40: 33:4f:5d:ee:4a:49:59:b5:11:f9:3b:43:2a:70:f7:55:4f:1d: 2c:91:ef:a2:c5:39:b6:1a:69:96:94:02:4e:36:cc:e1:bd:43: bc:07:14:39:78:3e:fc:3f:a2:7c:cd:d0:ed:f1:f4:ac:17:64: aa:38:c0:2b:32:be:01:80:6d:61:8b:4e:82:c6:fc:20:6c:df: 35:65:6e:ab:1a:9c:8b:9e:7a:4b:c9:0e:4f:e0:24:81:d0:1e: 38:54:5f:e4:74:fb:c3:84:40:7c:25:2b:96:66:b4:94:08:4d: 00:b0:23:4f:86:8a:6a:fc:09:c5:fa:0d:95:d8:57:dc:56:df: 4c:fc:99:35 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57KEQNpXAVTeWnJLIiviLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGIyYjJmNjExM2JhNDMwZjcyZTU1NDQ1YjVjNzg0OWRjN2NmYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1KCh3BlR1z85FuSzTfBrOClR4Cx BgVWHIv8TLqKWx/hMsPt5seKF9O10stq3+2kvdg/Z6UbdIvpFcA4ON+d/3wFRpOp He9iucIe1InnZ+ZYr3mdem4/sYOvhqziNdrVo6y8ev3mxY7dSW1vOWNS/tM6sg+z JjjU4H4K9v+R3PycHyQJvFOQZO5rjQy9HbHRaOFeOYGxee+Z8CTjH9vLOw6A2ZUj lTKqzCk/C4FLL6TmDJ8AGb03hequqvSysPwEpicvTYOH1EGTUTyqZ4bRs4p5BV4T TeOv4y2m54iGBgwBxvod9rEI4M0herWQ/HgA1ffDD0uk6gYgUmxryhmawQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFiysvYRO6Qw9y5VRFtceEncfPrtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzdiMzY5 Zi1iMDZlLTRhZjAtOWFjYi1hNGNjY2VmOGM0YTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvN2IzNjlm LWIwNmUtNGFmMC05YWNiLWE0Y2NjZWY4YzRhOC8xL1dMS3k5aEU3cEREM0xsVkVX MXg0U2R4OC11MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCudDYMA0GCSqGSIb3DQEBCwUAA4IBAQCtSL0U oitn00eDnnsND+p4sVCM50ltOdLEmVffrbfThR/9tBz4loiMFdwNThJnirj0HK2P R8GqGcnq6F+REjS6tYBc2ROxhYUorS23ykvocTJZdPpu953UST0Ek6CmZQjwnqUi O1CZnUmTLQmeW/CiFO0BRsnV12sJX7TuekAzT13uSklZtRH5O0MqcPdVTx0ske+i xTm2GmmWlAJONszhvUO8BxQ5eD78P6J8zdDt8fSsF2SqOMArMr4BgG1hi06Cxvwg bN81ZW6rGpyLnnpLyQ5P4CSB0B44VF/kdPvDhEB8JSuWZrSUCE0AsCNPhopq/AnF +g2V2FfcVt9M/Jk1 -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:34 2026 by rpki-client