This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
File:                     wb_RnDPps9MzU8_rZBee9z0yMys.cer (raw, json)
Hash identifier:          s5gicorhvbpJZS8U+aEL/XIueNVtWG3Fy+qM6s0N+YI=
Subject key identifier:   C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7F848F2F46B8C725C35595DFDE9556E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Fri 02 Jan 2026 16:22:32 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 15923
                          IP: 193.41.6.0/23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:8f:2f:46:b8:c7:25:c3:55:95:df:de:95:56:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 16:22:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:13:ab:a8:02:79:45:a4:08:9d:22:ee:5d:
                    82:e9:11:1a:69:72:8f:ed:d8:fb:9a:02:31:20:b3:
                    f3:ad:d6:81:31:a6:79:a6:a2:0e:c2:a9:94:41:97:
                    5a:8d:0b:58:6b:5f:b4:80:e2:90:fe:0c:d0:5f:60:
                    79:a0:b4:1c:d9:bd:72:70:52:b0:99:f5:1c:33:26:
                    e7:5a:7b:77:01:18:dc:52:2c:8f:02:1f:dd:66:76:
                    e2:ed:c3:c1:5b:65:34:20:f8:75:28:cb:a8:12:83:
                    8e:5d:c1:26:3e:39:8f:7a:fe:2a:43:22:20:cd:11:
                    c8:22:b1:1f:7f:d8:fd:32:3b:32:5a:24:10:33:ae:
                    a2:2a:54:fa:3f:85:e3:e7:90:26:72:c9:54:d5:e2:
                    5b:58:12:7c:9b:96:1c:7a:a1:48:fc:c6:0e:74:33:
                    9c:f2:13:41:2a:57:06:2e:43:a6:eb:fe:ce:4f:34:
                    81:87:97:4f:a3:e7:e0:dd:be:6f:d0:20:5e:fa:41:
                    f7:54:25:a0:68:0b:8e:41:40:a3:82:87:04:1a:86:
                    84:83:03:fa:67:17:9e:56:da:4a:60:98:12:01:7a:
                    de:40:41:04:15:37:8c:35:9f:53:96:03:3c:d3:d4:
                    3a:3b:58:6e:ac:3b:ed:f9:55:51:08:2c:fc:b0:eb:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.41.6.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15923

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:fb:66:d2:f0:0d:03:8e:58:22:96:13:f2:88:5f:93:52:
         57:c4:f3:b1:dc:09:ec:42:b5:c9:7c:e8:2b:b1:a2:31:0b:55:
         b0:6e:ac:22:fb:44:0b:79:ef:e4:cf:9c:cb:fb:d9:ce:de:82:
         e4:2f:62:f3:52:72:5f:e3:14:51:8d:37:d8:a2:dc:96:26:ad:
         31:ed:71:a9:60:61:5c:e0:8d:94:e3:8b:b1:4a:43:9d:93:ce:
         ee:38:13:a1:71:ae:10:14:d1:a5:d0:fd:a6:8d:6b:d8:88:47:
         43:e3:43:a2:32:4a:e0:c4:4b:b1:0c:8a:35:84:cd:ba:11:67:
         6b:07:ca:87:30:50:70:c4:8d:53:0f:ff:cc:b1:9f:3f:57:89:
         fb:27:e6:25:bf:5f:3b:64:b0:b5:a5:5b:69:aa:b5:f8:27:49:
         0f:87:a3:55:23:2e:e5:a4:6c:82:98:e4:a8:8e:1e:3f:e6:bc:
         c8:4e:a4:cc:77:43:d1:a8:b0:d1:75:b3:79:ef:4d:79:92:ce:
         23:19:2e:7d:f1:30:06:f3:12:b0:fb:4c:01:51:1e:f7:9e:68:
         32:aa:63:ef:09:8e:cd:dd:d0:fb:28:86:41:07:41:9d:fa:88:
         56:56:65:23:c2:7b:99:d0:8c:2e:eb:4c:2d:01:04:6b:3f:e7:
         85:62:62:d2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZt/hI8vRrjHJcNVld/elVbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWJmZDE5YzMzZTliM2QzMzM1M2NmZWI2NDE3OWVmNzNkMzIzMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGMTq6gCeUWkCJ0i7l2C6REaaXKP
7dj7mgIxILPzrdaBMaZ5pqIOwqmUQZdajQtYa1+0gOKQ/gzQX2B5oLQc2b1ycFKw
mfUcMybnWnt3ARjcUiyPAh/dZnbi7cPBW2U0IPh1KMuoEoOOXcEmPjmPev4qQyIg
zRHIIrEff9j9MjsyWiQQM66iKlT6P4Xj55AmcslU1eJbWBJ8m5YceqFI/MYOdDOc
8hNBKlcGLkOm6/7OTzSBh5dPo+fg3b5v0CBe+kH3VCWgaAuOQUCjgocEGoaEgwP6
ZxeeVtpKYJgSAXreQEEEFTeMNZ9TlgM809Q6O1hurDvt+VVRCCz8sOuVRQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFMG/0Zwz6bPTM1PP62QXnvc9MjMrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2ZiNDFm
OS0zYzJlLTRjYzMtYjI0ZC01ZDhjN2FkYzc5NjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZmI0MWY5
LTNjMmUtNGNjMy1iMjRkLTVkOGM3YWRjNzk2Mi8xL3diX1JuRFBwczlNelU4X3Ja
QmVlOXoweU15cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwSkGMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
Aj4zMA0GCSqGSIb3DQEBCwUAA4IBAQCocftm0vANA45YIpYT8ohfk1JXxPOx3Ans
QrXJfOgrsaIxC1Wwbqwi+0QLee/kz5zL+9nO3oLkL2LzUnJf4xRRjTfYotyWJq0x
7XGpYGFc4I2U44uxSkOdk87uOBOhca4QFNGl0P2mjWvYiEdD40OiMkrgxEuxDIo1
hM26EWdrB8qHMFBwxI1TD//MsZ8/V4n7J+Ylv187ZLC1pVtpqrX4J0kPh6NVIy7l
pGyCmOSojh4/5rzITqTMd0PRqLDRdbN57015ks4jGS598TAG8xKw+0wBUR73nmgy
qmPvCY7N3dD7KIZBB0Gd+ohWVmUjwnuZ0Iwu60wtAQRrP+eFYmLS
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:26:47 2026 by rpki-client