This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer File: WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer (raw, json) Hash identifier: mtCoR/8WS1YnsFuAOKYnEioOLeHpKLzn3mi47XbBePI= Subject key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDFD5214F14F11C725E3B18901679A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203986 IP: 31.211.176.0/21 IP: 93.88.228.0 -- 93.88.239.255 IP: 185.78.176.0/22 IP: 2a00:67e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fd:52:14:f1:4f:11:c7:25:e3:b1:89:01:67:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ad9c45020072b3369c2b810fef4527244c5b741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:60:81:dd:ce:2c:02:ff:11:2c:a8:ba:2d:22: 09:9f:fb:5b:21:5a:bd:0d:16:be:f6:01:02:55:b4: 8c:3c:b8:05:63:bd:c3:70:92:36:9b:55:82:5c:ec: 9c:56:89:a7:a7:30:49:af:c6:bd:fb:41:f5:db:eb: 11:42:e2:10:88:75:ed:4a:40:94:9d:6c:7a:3d:69: d3:2f:0b:44:77:77:8a:72:3a:de:a2:62:61:1b:51: 3e:cd:a3:5d:b3:83:93:e5:f6:4a:f8:29:2d:ea:06: ee:56:2d:15:96:cc:fe:64:2f:81:40:9f:2c:f3:58: 5c:df:91:64:e4:30:91:5c:ae:48:2e:51:24:6a:11: 47:a5:71:dc:08:81:ec:fa:cb:07:70:3d:07:38:a5: d1:ba:8b:41:d7:65:bb:61:5e:4f:f7:55:c5:8b:ce: 3c:b4:f7:d9:13:90:89:cf:2e:31:44:38:6e:f3:a6: dc:cd:c2:b0:a7:84:3e:9e:c5:d4:ba:f8:dd:32:57: 8f:6d:41:4a:2c:38:58:59:cf:62:d2:ec:cc:5f:b5: c1:b3:2b:a0:0b:6a:ec:28:c4:16:20:7f:bd:62:c9: 8a:46:03:e4:1f:e8:0c:d2:68:bb:3d:bc:13:8e:8d: 58:f0:3e:94:26:07:21:a9:18:5d:23:e5:7e:cc:1b: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.211.176.0/21 93.88.228.0-93.88.239.255 185.78.176.0/22 IPv6: 2a00:67e0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203986 Signature Algorithm: sha256WithRSAEncryption b1:98:56:1f:80:8c:91:83:ff:74:6f:71:d0:8c:26:68:95:73: d5:87:15:7f:b6:4e:dd:f1:8e:c2:19:ca:d9:7c:c2:c0:de:cf: 21:60:eb:c2:83:5c:5b:15:1f:68:e0:73:0d:da:49:98:fb:ff: 88:a0:2d:e6:78:3b:99:75:7f:64:d4:d6:e5:95:0b:06:36:d3: 66:29:be:8f:01:35:b9:fa:74:65:df:12:db:a8:82:cc:8a:9e: a7:10:0d:5c:6a:90:f1:ee:8c:bf:c1:ae:4a:60:1a:2b:a2:8f: 5b:3b:18:85:59:a4:6d:8e:3a:b1:b4:93:7c:b4:16:49:39:16: 83:60:48:97:91:c9:f8:5c:07:7e:41:4b:ed:24:b1:08:14:04: 52:d7:36:ac:17:26:c5:cb:f8:6b:7d:37:d5:a3:5a:0a:8e:f1: ec:d3:2d:51:33:a3:c9:b4:b9:3e:93:0b:1f:69:e7:a3:7c:7a: 50:41:c5:96:e7:4a:fe:c1:ec:de:d4:93:62:4c:90:f9:d6:f8: ea:ae:58:9c:9a:fe:11:5c:da:46:98:37:3d:d4:86:d1:bc:2d: c7:8b:46:99:9c:41:54:93:9f:93:c5:45:ef:00:95:3d:ed:6e: 2a:18:ed:99:39:ec:35:b2:b7:d5:27:14:79:99:dd:42:1d:51: fb:4b:a5:ca -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt87f1SFPFPEccl47GJAWeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWQ5YzQ1MDIwMDcyYjMzNjljMmI4MTBmZWY0NTI3MjQ0YzViNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GCB3c4sAv8RLKi6LSIJn/tbIVq9 DRa+9gECVbSMPLgFY73DcJI2m1WCXOycVomnpzBJr8a9+0H12+sRQuIQiHXtSkCU nWx6PWnTLwtEd3eKcjreomJhG1E+zaNds4OT5fZK+Ckt6gbuVi0Vlsz+ZC+BQJ8s 81hc35Fk5DCRXK5ILlEkahFHpXHcCIHs+ssHcD0HOKXRuotB12W7YV5P91XFi848 tPfZE5CJzy4xRDhu86bczcKwp4Q+nsXUuvjdMlePbUFKLDhYWc9i0uzMX7XBsyug C2rsKMQWIH+9YsmKRgPkH+gM0mi7PbwTjo1Y8D6UJgchqRhdI+V+zBsKpQIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFFrZxFAgByszacK4EP70UnJExbdBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2NmMzY0 MS01YzMwLTRkZWEtYjAwNC1jOGU3ZmQ4MDlmOTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvY2YzNjQx LTVjMzAtNGRlYS1iMDA0LWM4ZTdmZDgwOWY5MC8xL1d0bkVVQ0FIS3pOcHdyZ1Ff dlJTY2tURnQwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQDH9OwMAwDBAJdWOQDBARdWOADBAK5TrAwDQQC AAIwBwMFAyoAZ+AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxzSMA0GCSqGSIb3 DQEBCwUAA4IBAQCxmFYfgIyRg/90b3HQjCZolXPVhxV/tk7d8Y7CGcrZfMLA3s8h YOvCg1xbFR9o4HMN2kmY+/+IoC3meDuZdX9k1NbllQsGNtNmKb6PATW5+nRl3xLb qILMip6nEA1capDx7oy/wa5KYBoroo9bOxiFWaRtjjqxtJN8tBZJORaDYEiXkcn4 XAd+QUvtJLEIFARS1zasFybFy/hrfTfVo1oKjvHs0y1RM6PJtLk+kwsfaeejfHpQ QcWW50r+weze1JNiTJD51vjqrlicmv4RXNpGmDc91IbRvC3Hi0aZnEFUk5+TxUXv AJU97W4qGO2ZOew1srfVJxR5md1CHVH7S6XK -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:30 2026 by rpki-client