This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer (raw, json) Hash identifier: PYhyk9U5eFIpgvaXqoS64Kp/e478MdUQoNKfEkFq5xw= Subject key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB367E5B0D8FE35593F01024E0165F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:fc4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:36:7e:5b:0d:8f:e3:55:93:f0:10:24:e0:16:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:1a:0a:7b:8d:2b:20:c7:47:6e:a8:fa:61: 10:52:38:f2:26:bc:e1:09:39:d6:a5:94:d0:25:d5: 5b:2b:df:c2:af:f6:fd:27:b4:b0:09:ee:cd:90:43: 28:a5:c6:0a:8f:03:00:b6:da:09:f1:2f:bb:59:16: 7a:6a:62:74:0e:8e:8c:3c:d2:7d:00:90:4d:68:9b: 57:2f:da:8a:2a:d6:56:67:7f:2b:bf:d1:a2:f8:a8: d8:b4:37:cf:2c:34:72:0d:13:2f:e5:d7:f7:08:81: 9a:20:6e:c0:02:b6:5f:15:4c:e8:3a:59:54:74:84: 6a:05:4e:4b:a4:82:ba:76:f9:67:16:66:30:6a:63: 22:6f:c1:82:99:ed:7e:f0:6f:46:d4:29:4f:ec:6d: f4:ba:f7:00:0f:14:ad:d5:21:eb:06:4a:0d:08:f1: 06:1d:f3:89:d9:f8:92:b5:e3:35:96:a2:0b:80:4f: b5:6f:2b:cd:55:04:93:7d:b6:62:fa:9e:30:6c:82: de:42:c0:d1:30:18:7d:3e:9e:ee:f1:d3:ff:78:90: 7f:74:a9:f2:58:dd:1e:b4:7a:ca:4a:76:20:13:3d: 2f:da:74:4e:04:ab:5c:dd:2c:de:12:ca:ae:7a:0d: 90:0a:cd:f1:73:92:9e:22:c3:d6:1c:bd:d9:45:10: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:fc4::/48 Signature Algorithm: sha256WithRSAEncryption 07:60:0a:c0:7c:66:33:13:36:94:5c:43:1b:b6:af:ab:34:6e: c4:8c:ab:fb:eb:ab:7a:64:4e:f9:75:3e:54:6f:80:64:f1:b0: 53:37:59:0c:e3:1e:57:83:03:0e:fa:ba:87:ce:d6:8c:64:db: f9:1d:58:b0:41:37:85:48:9d:95:3f:4c:70:a1:e9:fc:72:03: 24:16:c0:83:b3:2c:d5:64:3f:d9:ad:3d:d4:e1:4a:72:c3:0f: f2:87:47:a8:a0:27:c6:c7:29:a3:d9:d6:10:af:e8:fe:d6:dd: 3e:57:2f:89:1f:aa:46:b7:55:aa:24:33:27:1c:6d:19:08:84: b6:3f:ee:f0:1e:17:ac:f0:df:4f:b2:cb:36:77:ad:72:f2:8d: 3d:de:7e:bb:ee:d5:4e:93:65:dc:d7:39:9f:96:a5:ae:22:f8: 9a:2c:b5:76:0a:b5:3b:e7:d3:fa:a9:73:93:58:37:3f:f8:62: 22:19:11:34:75:73:8d:3d:94:a4:ff:95:11:b2:e5:55:cc:d3: 38:41:75:1d:f1:1d:70:32:f2:c4:f1:41:ef:ec:14:87:00:e6: 6c:e1:8c:5a:b6:9c:8c:2e:1d:c5:d1:a4:d9:dd:bd:5e:3e:87: f8:8c:81:13:52:ed:2f:23:f4:6a:a3:d8:50:74:27:21:08:39: cd:15:b1:ee -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt9yzZ+Ww2P41WT8BAk4BZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGNlZGJhNjdhNDViNzM3ZDhhZDBmN2E3ODRjMzUwZDg2ZDY3MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCUaCnuNKyDHR26o+mEQUjjyJrzh CTnWpZTQJdVbK9/Cr/b9J7SwCe7NkEMopcYKjwMAttoJ8S+7WRZ6amJ0Do6MPNJ9 AJBNaJtXL9qKKtZWZ38rv9Gi+KjYtDfPLDRyDRMv5df3CIGaIG7AArZfFUzoOllU dIRqBU5LpIK6dvlnFmYwamMib8GCme1+8G9G1ClP7G30uvcADxSt1SHrBkoNCPEG HfOJ2fiSteM1lqILgE+1byvNVQSTfbZi+p4wbILeQsDRMBh9Pp7u8dP/eJB/dKny WN0etHrKSnYgEz0v2nROBKtc3SzeEsqueg2QCs3xc5KeIsPWHL3ZRRCXjQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFFjO26Z6Rbc32K0PenhMNQ2G1nEYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlL2UyZmJm ZC0wNWY5LTQ4ZWMtODM1Yi03MGM3NzBiMTA4N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvZTJmYmZk LTA1ZjktNDhlYy04MzViLTcwYzc3MGIxMDg3Yi8xL1dNN2JwbnBGdHpmWXJROTZl RXcxRFliV2NSZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA/EMA0GCSqGSIb3DQEBCwUAA4IBAQAH YArAfGYzEzaUXEMbtq+rNG7EjKv766t6ZE75dT5Ub4Bk8bBTN1kM4x5XgwMO+rqH ztaMZNv5HViwQTeFSJ2VP0xwoen8cgMkFsCDsyzVZD/ZrT3U4Upyww/yh0eooCfG xymj2dYQr+j+1t0+Vy+JH6pGt1WqJDMnHG0ZCIS2P+7wHhes8N9Psss2d61y8o09 3n677tVOk2Xc1zmflqWuIviaLLV2CrU759P6qXOTWDc/+GIiGRE0dXONPZSk/5UR suVVzNM4QXUd8R1wMvLE8UHv7BSHAOZs4YxatpyMLh3F0aTZ3b1ePof4jIETUu0v I/Rqo9hQdCchCDnNFbHu -----END CERTIFICATE-----Generated at Tue Feb 3 08:13:19 2026 by rpki-client