This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer File: WdCj-cNDB7Cls20ubRiZrv57vrQ.cer (raw, json) Hash identifier: LIrMHDASl8PC3HPxwRPggqHnjqQ+2CWQAd5mh7XHu+s= Subject key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80D9C84B9E886941EBC3F43E62472E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43352 AS: 60369 AS: 210563 IP: 37.9.200.0/21 IP: 185.4.208.0/22 IP: 195.155.128.0/19 IP: 2a02:cb00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d9:c8:4b:9e:88:69:41:eb:c3:f4:3e:62:47:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:1d:92:c4:4f:1e:29:70:58:9e:b5:46:ea: b4:ba:db:ec:39:c5:ad:88:02:34:27:51:33:29:0f: 21:d4:7a:93:81:28:9e:e6:5a:d8:23:89:c7:85:6d: 9f:9b:50:65:d5:26:af:54:52:81:97:4a:e8:32:86: 6b:33:c3:43:1d:cf:02:fb:49:fd:a9:59:61:41:cd: 2d:c2:51:90:70:40:61:70:4e:9f:4d:02:78:1e:a4: cd:55:73:f6:c3:74:b3:7d:a2:dd:c8:67:a9:9d:9f: 13:38:64:7f:2a:50:0e:94:fe:85:ce:cf:f9:27:e7: a0:f1:59:a1:09:5c:f5:03:67:c2:c8:8a:8a:b4:55: d5:45:30:31:f6:85:41:3d:db:9a:3e:47:b4:34:28: ae:1a:66:d2:27:52:96:6c:08:89:8b:e8:68:56:71: e2:70:25:49:69:f1:58:aa:c6:02:15:56:10:df:a4: da:44:05:a8:6b:66:d5:43:93:76:3c:e4:b4:34:2c: 56:eb:21:24:43:4e:a4:97:52:35:cc:bc:ad:c5:0a: cc:42:d3:28:59:4f:96:f5:01:dc:da:25:61:57:a4: 01:21:8e:49:e3:fa:91:50:33:1a:12:5b:73:7d:04: 03:db:fe:8d:ac:0a:de:20:4e:2d:ef:57:dc:83:fa: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.9.200.0/21 185.4.208.0/22 195.155.128.0/19 IPv6: 2a02:cb00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43352 60369 210563 Signature Algorithm: sha256WithRSAEncryption 78:8f:ae:6e:38:58:22:72:ba:35:1f:66:ae:79:f8:14:dc:cc: 6b:e1:78:bb:81:ed:b6:97:98:9d:fb:aa:83:66:71:14:e7:d8: e7:f5:c3:e1:0c:c4:ba:cb:08:a8:4d:b5:a4:b0:d7:ee:fb:36: 55:20:63:6d:fd:a9:ec:20:a0:1c:1d:45:d0:0e:05:fe:ca:2f: 32:6d:cb:97:80:9f:ba:ac:02:94:76:50:fa:75:c2:75:8c:a4: 2f:76:ea:97:e1:88:98:3c:4c:5c:9a:18:cf:8c:68:46:a7:ef: d6:73:4a:86:47:ac:80:d2:cb:aa:e3:33:c8:10:51:12:e2:08: 70:d1:d9:32:8a:d1:a6:67:c2:2b:5c:fd:14:75:32:3c:4c:12: 58:fb:02:b6:1d:0c:94:47:d9:fa:72:e9:5f:6b:74:39:49:15: c7:e1:0c:e7:a7:88:b8:fc:2d:0a:b1:9e:c8:cc:4f:bb:64:65: 97:59:81:9b:f0:10:dc:25:d8:5c:db:97:0f:02:4b:0b:3b:2a: dc:62:74:5e:f9:70:65:f3:16:27:53:c7:8e:be:aa:f0:08:b9: 86:a1:db:2e:90:b9:f2:46:15:0e:85:cc:1c:51:1b:ff:c6:b2: 8b:0d:06:7e:4c:dc:f5:7b:c7:54:a0:ed:f7:b5:74:02:0f:25: 81:fc:45:67 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt8gNnIS56IaUHrw/Q+YkcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWQwYTNmOWMzNDMwN2IwYTViMzZkMmU2ZDE4OTlhZWZlN2JiZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmodksRPHilwWJ61Ruq0utvsOcWt iAI0J1EzKQ8h1HqTgSie5lrYI4nHhW2fm1Bl1SavVFKBl0roMoZrM8NDHc8C+0n9 qVlhQc0twlGQcEBhcE6fTQJ4HqTNVXP2w3SzfaLdyGepnZ8TOGR/KlAOlP6Fzs/5 J+eg8VmhCVz1A2fCyIqKtFXVRTAx9oVBPduaPke0NCiuGmbSJ1KWbAiJi+hoVnHi cCVJafFYqsYCFVYQ36TaRAWoa2bVQ5N2POS0NCxW6yEkQ06kl1I1zLytxQrMQtMo WU+W9QHc2iVhV6QBIY5J4/qRUDMaEltzfQQD2/6NrAreIE4t71fcg/o26wIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFFnQo/nDQwewpbNtLm0Yma7+e760MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4Lzc5MWMz My1hMTBlLTQzYTktYWMyOS1lMGQxMzIzMGI5ZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNzkxYzMz LWExMGUtNDNhOS1hYzI5LWUwZDEzMjMwYjlkNS8xL1dkQ2otY05EQjdDbHMyMHVi UmlacnY1N3ZyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDJQnIAwQCuQTQAwQFw5uAMA0EAgACMAcDBQMq AssAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwCpWAIDAOvRAgMDNoMwDQYJKoZI hvcNAQELBQADggEBAHiPrm44WCJyujUfZq55+BTczGvheLuB7baXmJ37qoNmcRTn 2Of1w+EMxLrLCKhNtaSw1+77NlUgY239qewgoBwdRdAOBf7KLzJty5eAn7qsApR2 UPp1wnWMpC926pfhiJg8TFyaGM+MaEan79ZzSoZHrIDSy6rjM8gQURLiCHDR2TKK 0aZnwitc/RR1MjxMElj7ArYdDJRH2fpy6V9rdDlJFcfhDOeniLj8LQqxnsjMT7tk ZZdZgZvwENwl2Fzblw8CSws7KtxidF75cGXzFidTx46+qvAIuYah2y6QufJGFQ6F zBxRG//GsosNBn5M3PV7x1Sg7fe1dAIPJYH8RWc= -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:14 2026 by rpki-client