This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer File: WPde8NYw4dCGeQygt45-744qz7s.cer (raw, json) Hash identifier: DFojQqm/q1U9VIoqgmMjRM+8z6oThodDahJuZQe7lpk= Subject key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3E92DD662C3F749249E6542A1011B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196725 IP: 109.73.240.0/20 IP: 151.252.96.0/21 IP: 185.186.176.0/22 IP: 2a01:4500::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e9:2d:d6:62:c3:f7:49:24:9e:65:42:a1:01:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0e:ec:0c:b2:94:41:bc:b4:fc:c5:e6:5b:70: 5b:2a:ae:07:d5:df:38:60:26:ad:76:d9:fe:c5:e3: f2:3f:c4:11:22:35:dd:32:11:62:4d:d7:1a:49:2f: ee:3d:dd:44:1a:5d:51:03:c2:7d:99:65:9a:91:39: 86:a0:5c:eb:4a:c5:0d:c9:17:45:21:37:c3:8f:54: c3:2c:fa:36:e3:7b:e0:16:a4:33:c6:41:f5:27:eb: 3a:34:4a:84:13:fe:08:9a:43:0a:f8:f5:38:7c:11: 0b:19:8b:9a:58:2c:fa:15:f8:85:7f:af:a2:c6:49: 6a:e4:13:64:65:a7:74:34:2c:d5:66:1b:b2:22:37: a8:1d:ca:33:a7:af:8d:5f:04:e2:f6:70:0d:eb:f7: 23:76:a9:27:fd:c6:dc:c5:e5:6d:4d:a3:cc:72:39: 79:2a:09:30:f7:69:31:57:07:e7:d7:ba:49:ed:36: 3c:78:c2:cd:47:9e:b2:19:ba:db:bf:49:29:f8:38: 90:93:b4:cc:f1:dd:ea:7e:83:06:e6:bc:c2:a5:88: 46:a8:fa:84:58:87:4d:99:88:65:23:45:28:d3:1a: 48:69:f1:90:c2:f3:13:8a:20:24:b8:ee:99:29:a5: 0f:8d:75:ee:e5:91:09:89:49:93:36:f7:bc:2c:e9: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.73.240.0/20 151.252.96.0/21 185.186.176.0/22 IPv6: 2a01:4500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196725 Signature Algorithm: sha256WithRSAEncryption 5f:15:27:95:5f:a9:35:6a:d6:66:d8:4e:b0:9f:a8:35:2d:36: b7:26:ba:c7:3b:31:ce:e8:1d:ba:68:d2:e1:09:6a:b0:f1:e9: 8d:1b:68:fb:8c:c4:91:2b:13:de:39:87:55:a0:ff:e9:b2:a1: b0:7c:1e:6b:bc:b7:60:4f:3c:18:9a:72:41:f6:eb:c0:e5:01: 29:de:2d:68:7f:92:a8:d6:7b:92:a0:fa:b3:44:86:83:20:17: 9e:d5:5e:e7:48:e3:8e:db:56:85:31:21:01:95:b4:7c:ee:46: 68:22:4e:d7:97:95:de:b4:16:d3:52:42:af:13:63:08:4f:fa: d4:e7:1f:f2:4f:0d:26:ac:83:07:6c:f1:3c:9f:67:31:d6:eb: 78:27:40:1a:52:aa:a9:12:88:ae:87:35:d7:26:f0:67:55:af: 30:38:c2:d2:9f:2d:37:f9:71:95:0e:be:86:aa:9a:ed:e5:62: cd:89:13:fa:5e:8a:bf:06:c0:f7:ce:a1:34:f7:e2:db:e9:2d: 6d:2a:99:af:51:a3:e7:d9:da:9c:f5:1d:61:6f:89:9d:44:94: bd:24:cf:92:33:40:cf:6e:24:6e:30:25:f8:8f:15:66:70:75: a3:55:19:7e:5f:b8:66:0f:01:d8:1f:01:c0:df:40:83:5f:56: de:5b:d1:98 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt7o+kt1mLD90kknmVCoQEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGY3NWVmMGQ2MzBlMWQwODY3OTBjYTBiNzhlN2VlZjhlMmFjZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA7sDLKUQby0/MXmW3BbKq4H1d84 YCatdtn+xePyP8QRIjXdMhFiTdcaSS/uPd1EGl1RA8J9mWWakTmGoFzrSsUNyRdF ITfDj1TDLPo243vgFqQzxkH1J+s6NEqEE/4ImkMK+PU4fBELGYuaWCz6FfiFf6+i xklq5BNkZad0NCzVZhuyIjeoHcozp6+NXwTi9nAN6/cjdqkn/cbcxeVtTaPMcjl5 Kgkw92kxVwfn17pJ7TY8eMLNR56yGbrbv0kp+DiQk7TM8d3qfoMG5rzCpYhGqPqE WIdNmYhlI0Uo0xpIafGQwvMTiiAkuO6ZKaUPjXXu5ZEJiUmTNve8LOlBIwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFFj3XvDWMOHQhnkMoLeOfu+OKs+7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzM0YmQ2 ZS03OWE3LTQxMjYtOGEzMi0yZmQyODBlMGQ1NGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvMzRiZDZl LTc5YTctNDEyNi04YTMyLTJmZDI4MGUwZDU0YS8xL1dQZGU4Tll3NGRDR2VReWd0 NDUtNzQ0cXo3cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEbUnwAwQDl/xgAwQCubqwMA0EAgACMAcDBQAq AUUAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMAdTANBgkqhkiG9w0BAQsFAAOC AQEAXxUnlV+pNWrWZthOsJ+oNS02tya6xzsxzugdumjS4QlqsPHpjRto+4zEkSsT 3jmHVaD/6bKhsHwea7y3YE88GJpyQfbrwOUBKd4taH+SqNZ7kqD6s0SGgyAXntVe 50jjjttWhTEhAZW0fO5GaCJO15eV3rQW01JCrxNjCE/61Ocf8k8NJqyDB2zxPJ9n MdbreCdAGlKqqRKIroc11ybwZ1WvMDjC0p8tN/lxlQ6+hqqa7eVizYkT+l6KvwbA 986hNPfi2+ktbSqZr1Gj59nanPUdYW+JnUSUvSTPkjNAz24kbjAl+I8VZnB1o1UZ fl+4Zg8B2B8BwN9Ag19W3lvRmA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:32 2026 by rpki-client