This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
File:                     wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer (raw, json)
Hash identifier:          Q7aVSf4vazkjrfTad9AYrDGdrf74s1iJCuxw+eOY41Q=
Subject key identifier:   C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019C2E2F782400B4DA76571A8ADBAC80D832
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 05 Feb 2026 14:23:08 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 91.213.228.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2e:2f:78:24:00:b4:da:76:57:1a:8a:db:ac:80:d8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Feb  5 14:23:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:62:07:80:4d:31:2a:50:60:50:c2:3c:44:
                    bb:22:c8:11:0e:b9:16:bd:c4:76:92:eb:08:97:bd:
                    68:52:ca:58:8c:5d:2b:dd:39:8b:b5:f2:89:45:91:
                    8e:a6:cb:a9:29:a9:82:62:af:a1:69:46:c8:6d:b8:
                    0f:ec:95:e7:24:5c:a2:4c:9a:4f:35:07:be:15:6c:
                    ca:ff:4e:9b:26:f5:18:65:f2:8d:d7:13:4a:c9:42:
                    50:9a:82:00:56:3d:e2:00:f1:1b:14:f3:bf:1b:16:
                    4c:7e:42:11:74:16:23:e4:5e:ed:e5:54:18:e5:f7:
                    58:d8:67:f9:c2:40:3e:47:09:70:0f:ec:de:52:ae:
                    16:51:b4:6f:ab:e5:2e:9e:e5:3e:33:a5:29:53:f5:
                    51:65:13:b2:ad:67:46:81:f5:6c:7c:31:a9:bf:db:
                    02:f9:44:28:15:bd:b5:11:be:5f:37:a5:3d:49:d3:
                    cc:90:d2:35:ca:88:1f:97:f4:d1:ed:a1:66:18:49:
                    13:61:e6:e1:0a:99:ea:15:8b:64:19:0f:ce:9f:52:
                    02:97:42:be:7e:f2:ef:0c:51:89:b7:fd:54:41:62:
                    87:40:f0:39:bd:f3:ab:83:e0:8c:b3:e2:5a:aa:ec:
                    df:c3:10:5a:74:f1:55:ff:b3:1c:b8:89:71:92:bf:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d2:0b:f6:dc:a5:96:c6:e9:94:64:fa:fc:c2:d3:9c:9c:2c:
         91:c3:cc:56:39:4b:a2:b1:c6:4b:22:34:40:fe:f8:35:fc:8f:
         07:dd:cc:89:ea:79:0f:e7:5f:1a:b1:da:3d:2d:e2:fd:b1:c0:
         3b:60:11:6c:f5:f2:2f:09:fe:51:f8:c3:41:5d:d4:2d:ac:4b:
         6b:5f:69:43:1a:72:5a:fd:81:6e:a3:cd:9f:e9:a1:08:b2:51:
         d3:e4:b7:b3:cf:8c:7c:df:93:6f:26:a2:b2:61:41:dd:7f:73:
         cd:2a:e5:28:64:f9:21:78:f7:c7:6b:56:77:dd:ae:0b:09:3b:
         a0:8a:84:39:d8:b5:b2:73:e9:21:f4:40:b2:78:4b:b3:02:e0:
         69:d0:b5:33:a7:b8:79:3b:25:5b:af:65:b9:6f:9f:14:34:85:
         88:77:c0:6b:ee:56:30:0b:53:d2:49:c1:ff:70:02:9f:89:f5:
         f4:a4:b4:72:e2:e6:62:38:2d:b2:dd:aa:3e:15:9e:21:19:f0:
         af:32:b6:43:7d:40:d1:ba:da:59:31:62:9c:7a:9b:47:ab:39:
         53:be:de:49:df:20:cf:68:4e:ec:2e:3c:36:b9:80:9f:33:aa:
         ac:7d:91:01:a3:e8:55:a6:49:6f:b0:96:66:10:ea:49:32:8d:
         b9:06:8e:b0
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZwuL3gkALTadlcaitusgNgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMjA1MTQyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjczZmZmMTc4ZWQ1MmZkMWRlNzA5MzExMjQyM2I2NDE3Y2VhMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ThiB4BNMSpQYFDCPES7IsgRDrkW
vcR2kusIl71oUspYjF0r3TmLtfKJRZGOpsupKamCYq+haUbIbbgP7JXnJFyiTJpP
NQe+FWzK/06bJvUYZfKN1xNKyUJQmoIAVj3iAPEbFPO/GxZMfkIRdBYj5F7t5VQY
5fdY2Gf5wkA+RwlwD+zeUq4WUbRvq+UunuU+M6UpU/VRZROyrWdGgfVsfDGpv9sC
+UQoFb21Eb5fN6U9SdPMkNI1yogfl/TR7aFmGEkTYebhCpnqFYtkGQ/On1ICl0K+
fvLvDFGJt/1UQWKHQPA5vfOrg+CMs+JaquzfwxBadPFV/7McuIlxkr8pswIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMJz//F47VL9HecJMRJCO2QXzqLTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzA5OTZk
ZC03OTg1LTQ1NWQtYmZiOS1mNjE2NDNmZTk4MjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMDk5NmRk
LTc5ODUtNDU1ZC1iZmI5LWY2MTY0M2ZlOTgyOC8xL3duUF84WGp0VXYwZDV3a3hF
a0k3WkJmT290TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9XkMA0GCSqGSIb3DQEBCwUAA4IBAQCW0gv2
3KWWxumUZPr8wtOcnCyRw8xWOUuiscZLIjRA/vg1/I8H3cyJ6nkP518asdo9LeL9
scA7YBFs9fIvCf5R+MNBXdQtrEtrX2lDGnJa/YFuo82f6aEIslHT5Lezz4x835Nv
JqKyYUHdf3PNKuUoZPkhePfHa1Z33a4LCTugioQ52LWyc+kh9ECyeEuzAuBp0LUz
p7h5OyVbr2W5b58UNIWId8Br7lYwC1PSScH/cAKfifX0pLRy4uZiOC2y3ao+FZ4h
GfCvMrZDfUDRutpZMWKceptHqzlTvt5J3yDPaE7sLjw2uYCfM6qsfZEBo+hVpklv
sJZmEOpJMo25Bo6w
-----END CERTIFICATE-----