This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer File: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer (raw, json) Hash identifier: DbdastVxc7Bg4qcJ8NZ7zGG9521fnX5VMsyIuAUBAXE= Subject key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC8B63B0777D2E3CF4992D758A2976A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200475 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:b6:3b:07:77:d2:e3:cf:49:92:d7:58:a2:97:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:c2:19:13:81:e3:67:4b:ae:de:53:57:0b: 9c:e0:49:1b:a5:3b:30:9b:fc:59:7f:63:c2:90:d2: a1:d4:7e:94:f3:d4:9e:73:96:60:40:ba:4f:65:cf: 22:4d:42:66:48:97:1d:a9:ec:d0:28:37:44:2e:04: 37:c7:d8:2e:ab:54:67:88:cd:cb:fc:d5:c6:7c:94: 68:3d:5b:95:51:1e:a0:62:34:b3:43:42:1d:49:2a: 0f:e2:bb:5b:a2:30:b5:ec:db:0f:36:c8:d3:72:d6: bb:68:60:d2:87:34:7d:37:f4:90:6a:0e:94:1d:0d: 0b:63:52:99:a6:41:9e:25:58:55:e8:66:ec:c8:ff: 42:51:fd:1c:a2:05:d9:76:a7:b6:b6:df:3f:d9:74: d1:39:4f:23:d4:c6:eb:34:15:08:09:ed:b3:93:47: 01:1e:65:b6:8b:7f:4e:d9:fd:01:88:a5:db:1a:79: 92:6d:6f:35:6c:20:a9:24:b9:db:d1:4c:1f:ad:0a: 88:2b:de:e0:bc:8a:18:53:62:f5:3c:bf:5b:26:66: ee:f4:ce:ff:3a:cb:23:0d:29:25:2d:6a:2a:1e:49: 8f:cb:cd:77:44:f0:cc:0f:ec:c0:94:69:7e:c2:95: 69:01:a4:be:66:4b:68:fb:85:95:8e:20:bf:75:46: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200475 Signature Algorithm: sha256WithRSAEncryption 8f:c3:63:3a:d7:c5:43:64:67:6e:16:10:df:ac:b2:ed:4a:85: 28:ef:df:a9:e5:5c:f5:9c:0e:fa:c6:08:6a:ab:ff:f8:99:32: f4:57:03:3d:4f:ba:9f:7b:43:12:28:08:53:bd:ef:ad:04:85: 93:a3:99:d5:1d:14:7c:25:c4:be:73:9c:cd:76:e7:31:11:fc: 94:81:16:10:77:b2:29:5b:a8:68:92:02:20:4f:4a:d6:5a:62: 90:09:c0:db:79:7f:ae:d6:5c:6f:88:86:c2:f3:50:d7:4e:ad: a7:63:ff:1f:f8:c9:e0:82:26:fb:76:48:23:c3:0d:06:1d:bf: b7:b2:17:28:ca:1e:ba:fc:15:7d:dc:be:0a:8c:79:66:0f:b9: 4e:4f:7e:fa:7f:2e:f4:07:5b:2c:24:e7:72:c0:ca:b9:53:1f: 95:ff:f8:98:e0:af:83:dd:04:a7:95:73:fb:67:5f:1c:8b:aa: fd:a8:55:9b:e3:11:90:25:3b:6d:66:4d:80:8f:97:2c:c3:78: 3a:0b:df:1d:1c:3d:a6:d7:69:2b:68:3c:86:46:2c:f8:a7:9c: f5:7d:03:d6:2b:15:74:e8:a9:47:a6:4e:75:28:f1:e3:aa:f5: 9b:d8:1c:ad:71:f8:c1:c7:9b:a2:28:b5:7d:14:82:62:d7:36: 48:f0:98:8c -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9yLY7B3fS489JktdYopdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTAzN2E5ZmU1NjI1ZWRhMDEwODFlYjJlOTA3Y2ZkOWI1YTVkYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya/CGROB42dLrt5TVwuc4EkbpTsw m/xZf2PCkNKh1H6U89Sec5ZgQLpPZc8iTUJmSJcdqezQKDdELgQ3x9guq1RniM3L /NXGfJRoPVuVUR6gYjSzQ0IdSSoP4rtbojC17NsPNsjTcta7aGDShzR9N/SQag6U HQ0LY1KZpkGeJVhV6GbsyP9CUf0cogXZdqe2tt8/2XTROU8j1MbrNBUICe2zk0cB HmW2i39O2f0BiKXbGnmSbW81bCCpJLnb0UwfrQqIK97gvIoYU2L1PL9bJmbu9M7/ OssjDSklLWoqHkmPy813RPDMD+zAlGl+wpVpAaS+Zkto+4WVjiC/dUbl4wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFkDep/lYl7aAQgesukHz9m1pdyaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2VhYTdl Mi04YWYwLTRkZTEtODI0MS1hNTVmZmFlMmViZDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvZWFhN2Uy LThhZjAtNGRlMS04MjQxLWE1NWZmYWUyZWJkMC8xL1dRTjZuLVZpWHRvQkNCNnk2 UWZQMmJXbDNKby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMPGzANBgkqhkiG9w0BAQsFAAOCAQEAj8NjOtfFQ2Rn bhYQ36yy7UqFKO/fqeVc9ZwO+sYIaqv/+Jky9FcDPU+6n3tDEigIU73vrQSFk6OZ 1R0UfCXEvnOczXbnMRH8lIEWEHeyKVuoaJICIE9K1lpikAnA23l/rtZcb4iGwvNQ 106tp2P/H/jJ4IIm+3ZII8MNBh2/t7IXKMoeuvwVfdy+Cox5Zg+5Tk9++n8u9Adb LCTncsDKuVMflf/4mOCvg90Ep5Vz+2dfHIuq/ahVm+MRkCU7bWZNgI+XLMN4Ogvf HRw9ptdpK2g8hkYs+Kec9X0D1isVdOipR6ZOdSjx46r1m9gcrXH4wceboii1fRSC Ytc2SPCYjA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:02 2026 by rpki-client