This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer (raw, json) Hash identifier: 3sh3epaIq3H9vNqvgNJwyIfm99J2h+p93DYWLNZrn+w= Subject key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F858482DF3916941C1F668BD7345A2B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29152 IP: 2a00:1b10::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:84:82:df:39:16:94:1c:1f:66:8b:d7:34:5a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58dd42ab3460279709c134b570f76e34e4d95b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:05:ef:03:b6:b3:e8:52:f5:a4:4a:37:f7: 5c:65:8c:ed:2c:2f:46:5a:a3:71:de:f7:52:68:93: 98:95:97:9d:d7:bf:ea:00:e4:65:79:e7:e6:7b:f0: f0:8d:a6:cd:d3:7f:90:e9:8c:f5:0d:f9:37:b8:8b: 86:95:ad:a8:3e:e1:cd:d3:7d:96:3e:84:bc:e8:18: 3d:3a:32:51:b5:62:fb:57:ee:ae:ca:6d:32:68:c2: bb:36:3a:7b:e3:f2:28:4d:5f:23:e1:75:be:b9:2f: 19:cb:51:1a:ee:8d:85:e5:6d:50:b6:92:b2:e7:d4: 4f:8a:f1:b7:e7:db:da:8b:11:a5:6a:cb:6e:7f:d6: 7b:2b:9b:6b:07:88:28:22:37:1f:16:16:2a:c3:f6: 89:3c:87:58:da:a4:40:f2:ad:2e:8b:ce:c4:b9:b6: d3:26:41:07:49:82:0d:de:97:10:05:58:27:c5:d6: 8f:f3:aa:f8:de:a4:39:da:68:e0:46:26:66:22:ce: ad:81:02:19:94:a6:e2:f2:ac:ff:4e:a3:57:b8:23: 56:92:56:03:0d:10:e5:27:18:ce:50:b2:f3:63:96: b5:97:12:5e:60:70:e6:6b:c2:4f:d3:e9:3d:49:e3: 82:a0:0c:48:fd:dd:37:27:24:ef:f5:b8:6e:a0:ea: d3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1b10::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29152 Signature Algorithm: sha256WithRSAEncryption 00:96:7b:8e:4f:ec:50:84:a9:b2:be:01:d7:64:72:6f:4d:56: 13:5b:c2:27:53:ed:9a:a1:52:33:dd:19:5a:e4:2b:12:fb:dc: 63:14:0e:b3:c9:82:dd:0e:b4:f4:4d:25:cd:b7:10:b9:7f:21: 11:b1:c1:0e:aa:fd:6c:fd:ca:f6:a2:f7:7f:5a:9b:c2:9b:11: 63:6a:d3:89:e2:4a:d4:1d:1f:5a:44:a9:00:e5:a5:3c:31:7d: 26:96:12:c1:20:fc:66:17:70:73:79:87:5b:60:60:d6:de:b2: 7e:be:3f:90:7d:fc:27:e2:5a:d7:30:17:7a:2c:4f:b3:a3:99: 42:6e:f5:0d:c1:e0:25:11:37:19:e7:57:29:a6:e4:3c:d5:45: 0f:5a:38:0b:6d:0a:19:fb:ac:29:9d:26:0d:65:9d:40:0b:01: f3:52:bf:a5:6c:d2:ff:7a:96:6c:00:f7:bc:8f:e4:f1:be:60: 1d:da:46:f6:8d:71:38:ef:5c:0d:75:6e:f5:4a:a1:05:43:f6: 39:68:90:28:fc:f1:9c:41:63:00:28:1a:09:15:d5:48:77:ba: 4b:72:6a:c6:66:72:54:7c:49:1a:57:01:a5:71:bc:ad:b6:61: 5b:f2:67:5f:bf:64:a8:63:f2:1c:71:08:9c:c7:80:56:cf:a4: ab:ac:3b:a2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hYSC3zkWlBwfZovXNForMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGRkNDJhYjM0NjAyNzk3MDljMTM0YjU3MGY3NmUzNGU0ZDk1YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGAF7wO2s+hS9aRKN/dcZYztLC9G WqNx3vdSaJOYlZed17/qAORleefme/DwjabN03+Q6Yz1Dfk3uIuGla2oPuHN032W PoS86Bg9OjJRtWL7V+6uym0yaMK7Njp74/IoTV8j4XW+uS8Zy1Ea7o2F5W1QtpKy 59RPivG359vaixGlastuf9Z7K5trB4goIjcfFhYqw/aJPIdY2qRA8q0ui87EubbT JkEHSYIN3pcQBVgnxdaP86r43qQ52mjgRiZmIs6tgQIZlKbi8qz/TqNXuCNWklYD DRDlJxjOULLzY5a1lxJeYHDma8JP0+k9SeOCoAxI/d03JyTv9bhuoOrTMQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFFjdQqs0YCeXCcE0tXD3bjTk2VuRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzQwYjhm Ni02ODVkLTRlODYtOTdkOC02ZTMxMzQ3ZDA0ZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvNDBiOGY2 LTY4NWQtNGU4Ni05N2Q4LTZlMzEzNDdkMDRkOS8xL1dOMUNxelJnSjVjSndUUzFj UGR1Tk9UWlc1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgAbEDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJx4DANBgkqhkiG9w0BAQsFAAOCAQEAAJZ7jk/sUISpsr4B12Ryb01WE1vCJ1Pt mqFSM90ZWuQrEvvcYxQOs8mC3Q609E0lzbcQuX8hEbHBDqr9bP3K9qL3f1qbwpsR Y2rTieJK1B0fWkSpAOWlPDF9JpYSwSD8Zhdwc3mHW2Bg1t6yfr4/kH38J+Ja1zAX eixPs6OZQm71DcHgJRE3GedXKabkPNVFD1o4C20KGfusKZ0mDWWdQAsB81K/pWzS /3qWbAD3vI/k8b5gHdpG9o1xOO9cDXVu9UqhBUP2OWiQKPzxnEFjACgaCRXVSHe6 S3JqxmZyVHxJGlcBpXG8rbZhW/JnX79kqGPyHHEInMeAVs+kq6w7og== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:35 2026 by rpki-client