This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
File:                     wBekqCFysgav7hwT0pbuJgOFtXE.cer (raw, json)
Hash identifier:          LRt1Gxrfeeb1um5HfW0OCHs44Bjdpy4bJ0rnSbKyIYM=
Subject key identifier:   C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C75786137F5C1F51B9C291CFA1E91B
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:31 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 200874
                          IP: 185.89.116.0/22
                          IP: 2a03:8320::/32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:57:86:13:7f:5c:1f:51:b9:c2:91:cf:a1:e9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c017a4a82172b206afee1c13d296ee260385b571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:17:ab:f3:f3:e0:20:e8:25:10:fb:4f:07:
                    30:e8:9d:a9:92:e7:96:72:31:e9:3c:6f:03:28:88:
                    8d:50:f4:a0:f9:da:22:39:40:0f:7e:38:db:e0:3c:
                    05:38:73:6a:e8:66:92:62:51:6b:02:30:de:20:30:
                    fe:ff:55:01:c7:bb:56:cd:f4:47:66:40:88:1d:2a:
                    c1:ba:89:1d:62:8e:84:55:3a:72:ed:2b:1e:f5:73:
                    b8:2b:64:d6:57:c4:68:af:74:02:54:fc:b7:e0:d8:
                    08:96:26:ad:24:63:cc:2b:10:69:84:29:2d:ce:d7:
                    3f:29:7d:40:71:a4:96:98:00:e4:4d:e5:ef:5c:40:
                    eb:10:3b:d8:da:40:cf:0c:45:70:de:57:13:c4:23:
                    10:5c:ff:c7:30:e8:04:75:e7:b2:f5:08:59:4d:13:
                    52:6c:8a:37:bf:59:2c:36:7d:47:e4:5c:39:17:be:
                    80:e2:79:01:bb:a6:a5:92:2a:ac:54:75:76:1b:f2:
                    44:9e:22:d8:9b:e3:0b:6c:b6:fe:2f:e0:6e:c3:76:
                    4e:be:9e:e0:61:6a:31:bd:96:21:a4:b1:63:32:3e:
                    7e:a4:23:c1:7f:ea:bf:e7:91:53:80:01:2a:f8:63:
                    62:45:d6:39:4b:68:e4:40:f4:8e:a7:07:6d:0a:82:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.116.0/22
                IPv6:
                  2a03:8320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200874

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:55:da:47:68:72:f4:39:53:99:0b:a4:2b:4e:00:d2:57:
         ee:6f:6e:22:40:6a:c6:de:e7:62:0e:5b:c6:35:4f:24:6c:7b:
         91:02:97:ef:3f:f4:6d:58:99:86:68:f9:01:8c:71:64:b9:1b:
         8a:c1:b7:f5:63:d0:5a:35:60:5f:e4:7a:6f:6d:24:2f:d6:2f:
         13:29:ee:6e:4b:1b:bc:b2:fe:5a:98:e4:53:11:7f:3b:67:b0:
         0c:75:94:28:45:83:c1:2a:6e:7f:5e:f3:c3:c6:47:af:54:f3:
         31:cb:22:6a:b3:64:7c:44:79:99:26:cf:70:62:0d:17:47:1a:
         99:cf:6a:51:67:7f:62:fd:66:92:3c:77:e7:e9:3b:b7:76:cf:
         2d:94:9c:1b:ba:b1:b5:8a:18:10:28:00:f7:21:b7:11:a4:4f:
         4c:78:9d:9f:be:08:01:4c:9c:09:42:1d:7c:92:66:75:b6:4c:
         f6:3b:42:52:48:b0:99:00:03:5b:c7:a4:27:4b:0c:bd:78:ee:
         03:2a:33:aa:5a:a3:e9:a0:f6:9e:19:ea:39:24:06:2d:3e:2d:
         70:e8:a3:8b:cf:43:6b:24:6e:e4:36:c7:59:42:e6:15:bc:f2:
         72:b3:8d:05:b2:a9:eb:d1:7e:a3:d4:12:c6:94:20:ad:bc:86:
         7a:b8:96:1b
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt3x1eGE39cH1G5wpHPoekbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDE3YTRhODIxNzJiMjA2YWZlZTFjMTNkMjk2ZWUyNjAzODViNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirwXq/Pz4CDoJRD7Twcw6J2pkueW
cjHpPG8DKIiNUPSg+doiOUAPfjjb4DwFOHNq6GaSYlFrAjDeIDD+/1UBx7tWzfRH
ZkCIHSrBuokdYo6EVTpy7Sse9XO4K2TWV8Ror3QCVPy34NgIliatJGPMKxBphCkt
ztc/KX1AcaSWmADkTeXvXEDrEDvY2kDPDEVw3lcTxCMQXP/HMOgEdeey9QhZTRNS
bIo3v1ksNn1H5Fw5F76A4nkBu6alkiqsVHV2G/JEniLYm+MLbLb+L+Buw3ZOvp7g
YWoxvZYhpLFjMj5+pCPBf+q/55FTgAEq+GNiRdY5S2jkQPSOpwdtCoJ1oQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFMAXpKghcrIGr+4cE9KW7iYDhbVxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzMzMDUx
ZC1jMmEwLTRhYzctYjdmMy05MGFkZWM4NWRkODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMzMwNTFk
LWMyYTAtNGFjNy1iN2YzLTkwYWRlYzg1ZGQ4NS8xL3dCZWtxQ0Z5c2dhdjdod1Qw
cGJ1SmdPRnRYRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVl0MA0EAgACMAcDBQAqA4MgMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMQqjANBgkqhkiG9w0BAQsFAAOCAQEAIstV2kdocvQ5
U5kLpCtOANJX7m9uIkBqxt7nYg5bxjVPJGx7kQKX7z/0bViZhmj5AYxxZLkbisG3
9WPQWjVgX+R6b20kL9YvEynubksbvLL+WpjkUxF/O2ewDHWUKEWDwSpuf17zw8ZH
r1TzMcsiarNkfER5mSbPcGINF0camc9qUWd/Yv1mkjx35+k7t3bPLZScG7qxtYoY
ECgA9yG3EaRPTHidn74IAUycCUIdfJJmdbZM9jtCUkiwmQADW8ekJ0sMvXjuAyoz
qlqj6aD2nhnqOSQGLT4tcOiji89DayRu5DbHWULmFbzycrONBbKp69F+o9QSxpQg
rbyGeriWGw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 15:11:16 2026 by rpki-client