This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer File: WOBoeiTWo-QU15jZsvtsUlkcuyM.cer (raw, json) Hash identifier: Rd3+fCGIqEYT2tAs0xT7VH6aCkyL9OaIcglEeClLeps= Subject key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CEEBC626FE0B4A4A27F2A3E601876 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208149 IP: 185.89.96.0/24 IP: 2a10:1200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ee:bc:62:6f:e0:b4:a4:a2:7f:2a:3e:60:18:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:92:2b:58:4d:72:3b:49:b6:31:73:49:1e: 24:47:25:f8:5b:45:a5:d1:8c:53:4a:10:18:6a:31: 14:dc:7a:9c:64:e4:a3:0f:93:bc:8b:2e:05:69:85: ad:b7:4d:b2:69:89:c5:49:6e:01:23:96:23:4e:53: 06:e3:3d:98:f2:8e:b1:3c:6b:f4:31:b2:5c:a7:a8: 30:fa:db:a2:3c:d6:ff:e0:49:62:ab:1d:ec:21:e6: f6:6e:2b:d9:5f:f0:41:dc:c9:cf:3a:20:2c:45:bd: 96:91:bb:58:77:ab:da:3e:bd:19:2a:28:2d:19:b3: bd:34:3b:43:ce:ca:32:7a:6e:3b:f0:47:17:41:c7: 50:54:14:f0:40:92:4d:b8:c5:f7:72:9d:0b:12:55: ab:33:2f:38:4a:8c:3f:d0:19:74:02:54:f9:f6:e1: 32:d0:f7:6e:f0:47:16:4c:b8:fe:dc:20:9f:41:3f: 20:a4:53:f3:ad:42:3e:4a:73:2d:da:7f:65:15:c6: 30:5c:f2:e5:46:6e:f5:e2:dd:fa:97:e1:3f:e1:3f: 90:8c:cc:ea:89:ec:6d:1f:be:d8:19:6a:3e:86:6a: 3a:bb:db:42:33:13:09:ad:bd:73:53:cd:85:a5:3d: 86:47:d4:49:16:aa:46:fe:3d:9a:50:9c:d3:94:ec: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.96.0/24 IPv6: 2a10:1200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208149 Signature Algorithm: sha256WithRSAEncryption 2f:76:a1:22:9a:6e:09:ce:79:42:e7:35:00:c6:dc:91:d7:9b: da:6c:79:75:25:77:59:4c:6e:a1:72:59:40:60:3d:61:e2:8b: 03:08:01:f7:2a:7b:6a:13:5f:85:11:b4:d2:71:81:17:b6:23: d8:a6:2c:4a:e3:81:ee:3c:cd:f5:6b:d9:a5:05:10:64:7d:74: b5:9e:0c:73:d4:0b:5a:59:4c:8f:60:ea:c9:6c:ad:64:ad:5c: 4e:17:05:4a:86:68:ae:c4:48:f5:56:e2:c9:34:cc:bd:e6:1c: 0d:4a:94:65:02:91:51:d3:b0:2d:65:c4:72:4d:4a:d9:b8:dd: 9c:45:9d:01:47:8b:bb:9d:fe:16:10:5e:83:9f:19:17:a9:7b: 5c:a1:83:a0:b1:21:93:e7:c2:f6:b9:8e:ca:71:fd:56:d8:80: b5:1a:bb:68:3d:d9:d5:7d:e7:08:40:f5:aa:79:7d:ce:c7:13: a1:0b:6b:4e:24:1f:22:00:28:0b:00:fa:13:ba:05:57:88:00: 91:39:24:b0:28:df:92:cc:40:d7:3d:95:31:f9:d4:c9:ac:2f: ab:60:31:ef:17:4e:36:f4:65:d6:21:b0:93:b1:da:a7:01:90: 51:3d:6f:e7:bf:80:9e:af:1b:fe:82:df:f5:13:73:ae:0e:e2: de:37:71:b8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XO68Ym/gtKSifyo+YBh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGUwNjg3YTI0ZDZhM2U0MTRkNzk4ZDliMmZiNmM1MjU5MWNiYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWeSK1hNcjtJtjFzSR4kRyX4W0Wl 0YxTShAYajEU3HqcZOSjD5O8iy4FaYWtt02yaYnFSW4BI5YjTlMG4z2Y8o6xPGv0 MbJcp6gw+tuiPNb/4Eliqx3sIeb2bivZX/BB3MnPOiAsRb2WkbtYd6vaPr0ZKigt GbO9NDtDzsoyem478EcXQcdQVBTwQJJNuMX3cp0LElWrMy84Sow/0Bl0AlT59uEy 0Pdu8EcWTLj+3CCfQT8gpFPzrUI+SnMt2n9lFcYwXPLlRm714t36l+E/4T+QjMzq iextH77YGWo+hmo6u9tCMxMJrb1zU82FpT2GR9RJFqpG/j2aUJzTlOwh0QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFjgaHok1qPkFNeY2bL7bFJZHLsjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzJmOWEz My1jZDhjLTQxZTQtOWM0OC1lYjg2MTI0NTc3MTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMmY5YTMz LWNkOGMtNDFlNC05YzQ4LWViODYxMjQ1NzcxNS8xL1dPQm9laVRXby1RVTE1alpz dnRzVWxrY3V5TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuVlgMA0EAgACMAcDBQMqEBIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtFTANBgkqhkiG9w0BAQsFAAOCAQEAL3ahIppuCc55 Quc1AMbckdeb2mx5dSV3WUxuoXJZQGA9YeKLAwgB9yp7ahNfhRG00nGBF7Yj2KYs SuOB7jzN9WvZpQUQZH10tZ4Mc9QLWllMj2DqyWytZK1cThcFSoZorsRI9VbiyTTM veYcDUqUZQKRUdOwLWXEck1K2bjdnEWdAUeLu53+FhBeg58ZF6l7XKGDoLEhk+fC 9rmOynH9VtiAtRq7aD3Z1X3nCED1qnl9zscToQtrTiQfIgAoCwD6E7oFV4gAkTkk sCjfksxA1z2VMfnUyawvq2Ax7xdONvRl1iGwk7HapwGQUT1v57+Anq8b/oLf9RNz rg7i3jdxuA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:26:53 2026 by rpki-client