This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer (raw, json) Hash identifier: 8W0QfWTAirVkK7hf/9zDHWXhC0eQ6cpjT6x5ZI7d0Y4= Subject key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A35B5CC3EF96CB3D44D793A3A8FC99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.36.147.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5b:5c:c3:ef:96:cb:3d:44:d7:93:a3:a8:fc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:e8:67:fc:54:2e:fb:1c:82:18:a8:12:8f: 72:09:a9:1b:ae:0e:9c:7f:d7:c7:bc:4a:82:c4:46: aa:23:30:eb:a8:42:49:9d:e9:f2:aa:fb:ee:95:45: e2:ce:c7:ff:c2:0c:22:93:54:1b:29:14:46:fa:e9: ff:df:dc:52:0c:2e:5f:c6:13:55:cb:e6:52:a3:b7: ec:fb:4b:d8:62:16:34:e0:ce:a3:68:6a:bc:ea:3a: 63:ba:c6:f9:bf:5d:0f:79:90:37:65:64:0e:c7:75: 14:17:fe:2a:88:0c:d6:56:51:a4:73:0a:2b:05:2d: 07:db:aa:5b:49:f3:e7:4e:98:db:cc:2d:a0:14:fb: cd:b0:53:18:6c:2b:b8:2c:c8:7d:5d:e1:39:35:04: de:6b:90:0f:27:38:c4:a0:92:84:9b:a1:72:b4:86: 19:f1:11:f2:ae:cc:bd:a0:cc:32:9d:42:b1:4c:83: 27:21:bd:f4:9c:62:44:23:6d:01:dc:55:5f:0f:3d: 6e:a9:fa:75:f2:af:43:b3:d5:23:7d:82:44:2a:c9: b2:67:d2:20:4b:fd:09:1f:80:8a:5c:7c:ff:7e:dd: a2:a3:fb:10:86:f9:a0:1a:32:3e:97:a1:8c:50:68: 70:07:64:f4:12:09:45:33:d5:05:13:8b:be:f6:2a: 46:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.147.0/24 Signature Algorithm: sha256WithRSAEncryption 70:45:d3:c4:18:3d:9c:28:6a:69:91:7e:df:55:36:85:1c:d3: 58:8c:62:b8:ad:58:ca:f1:99:5f:a8:13:9a:9f:cf:53:f5:b8: 13:53:c5:a6:4a:63:7d:82:b9:23:c7:85:bf:eb:c4:24:cb:ae: 55:38:ff:23:b1:de:00:31:2d:0d:75:d3:1d:d9:65:3a:93:cd: f2:59:04:66:5d:52:3a:78:2c:45:56:89:fa:76:27:35:40:d9: 5f:29:2f:0c:92:a8:bc:98:b7:32:d9:b5:ff:2b:e8:d2:b8:79: 16:34:c6:34:7d:f1:3b:da:3f:5e:a1:2c:18:82:d0:07:5b:ce: 02:2b:b7:f0:1d:98:21:57:10:83:c4:87:f3:e2:2f:fc:07:2e: ca:90:e0:0c:7a:38:45:b8:be:db:68:1f:34:f9:9a:57:dc:ab: da:74:12:18:18:cd:fc:5c:bc:d1:a2:7b:dd:c0:e6:29:de:b1: 78:c0:6d:8f:10:ef:f0:44:6d:4c:6a:92:28:96:59:df:8b:33: 79:71:30:bd:5e:a0:36:ee:d7:2a:8e:9a:57:58:a8:13:3a:ad: e5:96:f2:e3:c3:1f:38:cd:2c:09:b6:8b:9d:ac:35:f9:f9:f1: 61:75:08:08:53:99:da:f7:f1:61:b2:0e:48:fc:4b:65:6e:7f: db:17:23:f8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4o1tcw++Wyz1E15OjqPyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWJjNTJiMTUwNjljMWM0N2I1NGU5N2I5ZjU2OTRiNzU1YjVjZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQjoZ/xULvscghioEo9yCakbrg6c f9fHvEqCxEaqIzDrqEJJnenyqvvulUXizsf/wgwik1QbKRRG+un/39xSDC5fxhNV y+ZSo7fs+0vYYhY04M6jaGq86jpjusb5v10PeZA3ZWQOx3UUF/4qiAzWVlGkcwor BS0H26pbSfPnTpjbzC2gFPvNsFMYbCu4LMh9XeE5NQTea5APJzjEoJKEm6FytIYZ 8RHyrsy9oMwynUKxTIMnIb30nGJEI20B3FVfDz1uqfp18q9Ds9UjfYJEKsmyZ9Ig S/0JH4CKXHz/ft2io/sQhvmgGjI+l6GMUGhwB2T0EglFM9UFE4u+9ipGzQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFm8UrFQacHEe1Tpe59WlLdVtc6xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2QxZmNk MC01NWMxLTQ2YmEtOWRiMS0yYzEwYjE5ZDRjMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZDFmY2Qw LTU1YzEtNDZiYS05ZGIxLTJjMTBiMTlkNGMyYS8xL1dieFNzVkJwd2NSN1ZPbDdu MWFVdDFXMXpyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuSSTMA0GCSqGSIb3DQEBCwUAA4IBAQBwRdPE GD2cKGppkX7fVTaFHNNYjGK4rVjK8ZlfqBOan89T9bgTU8WmSmN9grkjx4W/68Qk y65VOP8jsd4AMS0NddMd2WU6k83yWQRmXVI6eCxFVon6dic1QNlfKS8Mkqi8mLcy 2bX/K+jSuHkWNMY0ffE72j9eoSwYgtAHW84CK7fwHZghVxCDxIfz4i/8By7KkOAM ejhFuL7baB80+ZpX3KvadBIYGM38XLzRonvdwOYp3rF4wG2PEO/wRG1MapIollnf izN5cTC9XqA27tcqjppXWKgTOq3llvLjwx84zSwJtoudrDX5+fFhdQgIU5na9/Fh sg5I/Etlbn/bFyP4 -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:15 2026 by rpki-client