This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer File: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer (raw, json) Hash identifier: bt267aClxwfvaLEamNIqw6P5mqYC8nUYnA6lzu3qb1Y= Subject key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1C0DB8956B66702AD3F0CA8FAFA6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209835 IP: 83.143.108.0/22 IP: 2a05:eec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1c:0d:b8:95:6b:66:70:2a:d3:f0:ca:8f:af:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58f7d27ebc269bf14b8d6895791affd429f70222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:5d:04:ec:20:62:f7:cb:0a:ee:9c:26:0c: dd:3c:18:08:4d:b3:e8:d4:13:23:07:f6:1a:63:7d: 2b:b7:d3:bb:63:58:b1:cf:14:f9:4d:c6:1d:ee:0a: 1b:5b:dc:4d:71:14:e8:5d:e3:b2:fa:4f:3d:3d:97: 1e:e0:4f:1c:af:2e:48:8c:10:6e:ab:a2:0a:29:15: ce:c1:96:2c:55:38:a5:2c:80:f5:97:50:22:cc:4c: ff:4c:2c:4a:d6:23:9b:a5:62:2a:c4:e2:81:a8:45: a8:33:dd:18:4e:d9:0d:d4:07:29:cc:0e:c4:8c:ce: 06:a8:7e:d6:59:1c:27:2d:21:78:e4:79:09:db:d8: a7:fa:a4:f8:d0:0d:11:2b:00:52:66:37:19:fa:45: 81:f5:3e:4f:af:fc:c4:87:cc:de:6b:fb:96:03:15: a2:86:b9:02:45:21:25:fd:54:6a:81:20:e4:49:3a: 28:c1:60:b4:c4:ca:a8:07:bb:2b:b0:36:9d:26:e0: da:24:67:d2:c8:0a:9d:93:bd:ed:bb:f3:9d:34:9e: 80:9b:a2:0e:7b:c1:ea:89:2f:e8:6a:77:fb:12:0f: 22:08:ac:06:1a:7c:c0:1b:3f:31:4e:38:1d:03:af: cf:a1:e6:dd:24:c7:c3:86:cd:8a:f0:77:7d:08:d9: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.108.0/22 IPv6: 2a05:eec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209835 Signature Algorithm: sha256WithRSAEncryption 78:aa:00:27:88:3d:44:fd:27:ef:00:1b:48:81:41:38:46:fa: 74:b4:23:a5:51:b7:c5:29:32:ad:1f:5f:d4:e0:0d:49:ee:1a: 5c:88:31:ac:d7:bc:dd:c0:86:76:33:a3:2e:9b:42:ef:c9:23: 52:c7:7f:7c:37:fc:dc:b3:89:97:27:84:1b:56:92:06:ec:a2: a9:04:f1:04:fa:5f:ac:a8:77:d6:c4:71:ab:81:de:ad:8e:01: 01:53:32:df:9a:90:47:1d:59:55:ee:28:ca:2c:33:29:23:84: 87:f0:ea:92:9f:40:ef:60:2f:7f:93:5d:5d:b7:4c:96:61:f0: f2:e8:d6:09:d8:43:2e:69:e4:d0:01:51:09:7c:3f:ca:32:bb: b4:57:25:1e:6a:bc:5b:cc:a9:e9:90:91:2d:db:4c:37:99:43: a1:1d:ea:66:bf:cc:73:a5:95:22:d4:8d:0b:e4:64:83:4f:92: 3a:91:33:44:fa:53:98:ad:2b:01:b6:02:75:48:5e:c0:c7:5c: 71:1a:3d:79:ec:30:17:09:09:6d:43:91:3a:a3:91:75:02:49: 2d:25:5a:db:fd:0e:b7:01:e7:81:56:3b:fa:a3:15:08:f5:c9: f8:4f:de:de:67:0e:e5:bc:33:ed:5f:3c:f4:78:87:2f:d2:70: 82:14:e1:95 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WxwNuJVrZnAq0/DKj6+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGY3ZDI3ZWJjMjY5YmYxNGI4ZDY4OTU3OTFhZmZkNDI5ZjcwMjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tBdBOwgYvfLCu6cJgzdPBgITbPo 1BMjB/YaY30rt9O7Y1ixzxT5TcYd7gobW9xNcRToXeOy+k89PZce4E8cry5IjBBu q6IKKRXOwZYsVTilLID1l1AizEz/TCxK1iObpWIqxOKBqEWoM90YTtkN1AcpzA7E jM4GqH7WWRwnLSF45HkJ29in+qT40A0RKwBSZjcZ+kWB9T5Pr/zEh8zea/uWAxWi hrkCRSEl/VRqgSDkSToowWC0xMqoB7srsDadJuDaJGfSyAqdk73tu/OdNJ6Am6IO e8HqiS/oanf7Eg8iCKwGGnzAGz8xTjgdA6/PoebdJMfDhs2K8Hd9CNkUBQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFj30n68JpvxS41olXka/9Qp9wIiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkLzkwNGEy YS02ZGQxLTQ5NzQtYmIyOS00YzkyY2VjMDhiYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvOTA0YTJh LTZkZDEtNDk3NC1iYjI5LTRjOTJjZWMwOGJhOC8xL1dQZlNmcndtbV9GTGpXaVZl UnJfMUNuM0FpSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCU49sMA0EAgACMAcDBQMqBe7AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMzqzANBgkqhkiG9w0BAQsFAAOCAQEAeKoAJ4g9RP0n 7wAbSIFBOEb6dLQjpVG3xSkyrR9f1OANSe4aXIgxrNe83cCGdjOjLptC78kjUsd/ fDf83LOJlyeEG1aSBuyiqQTxBPpfrKh31sRxq4HerY4BAVMy35qQRx1ZVe4oyiwz KSOEh/Dqkp9A72Avf5NdXbdMlmHw8ujWCdhDLmnk0AFRCXw/yjK7tFclHmq8W8yp 6ZCRLdtMN5lDoR3qZr/Mc6WVItSNC+Rkg0+SOpEzRPpTmK0rAbYCdUhewMdccRo9 eewwFwkJbUOROqORdQJJLSVa2/0OtwHngVY7+qMVCPXJ+E/e3mcO5bwz7V889HiH L9JwghThlQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:46 2026 by rpki-client