This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer File: WNKjVqVHgVW-qovGJWqG9tWz9zw.cer (raw, json) Hash identifier: tPEHA5jKuBeI1r8s07F4CCoZ0dbJmf7kZ5UGd3nah0E= Subject key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED2EBF4E0AC6A0AF67D1E75102A06C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16218 IP: 185.60.208.0/22 IP: 217.113.32.0/20 IP: 2a02:ea0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2e:bf:4e:0a:c6:a0:af:67:d1:e7:51:02:a0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a7:f3:7f:e8:25:a8:c5:22:38:14:96:16:3f: 50:a5:03:37:ab:5a:cd:1a:5a:60:16:34:98:f6:05: f0:92:d1:f7:4a:8a:11:75:30:10:88:dd:b7:f2:43: 3e:53:8d:16:26:66:3e:da:86:07:f4:d3:75:36:62: 29:6e:8b:6a:05:54:75:c2:b7:44:a9:24:77:3e:4a: 99:84:07:32:9b:8a:43:cd:34:47:f8:98:3d:64:42: eb:56:5d:57:a8:67:83:bd:62:f1:b4:4d:55:80:60: 8c:af:2e:ef:b9:4c:fc:d8:88:7c:65:fd:35:b8:c3: 24:6f:71:a8:11:73:a3:04:d9:5f:9b:32:21:33:d8: 67:af:94:7b:b7:51:62:39:ad:07:db:2c:ec:6a:26: 62:37:2f:9c:07:94:2a:f0:b3:b4:0e:c4:72:c3:9c: 6c:d2:11:43:91:ce:e0:38:80:89:3e:57:0f:5e:96: 1b:fd:d1:a9:f3:67:5e:79:b1:18:38:f9:c0:f4:ed: 6c:3a:6b:35:05:02:bf:c2:37:7e:67:ec:a5:7b:5d: a5:9d:77:7d:27:d9:de:29:1b:4a:b6:c9:24:75:54: 56:63:bb:88:94:0f:b3:5e:17:7c:30:b5:a4:6a:ec: 4b:2b:67:ff:2b:58:66:c8:14:95:42:cf:d2:de:90: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.208.0/22 217.113.32.0/20 IPv6: 2a02:ea0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16218 Signature Algorithm: sha256WithRSAEncryption 7a:f9:68:aa:9f:46:da:f5:07:b2:3d:ec:6a:e2:79:27:d8:61: 47:9a:12:74:f4:cc:f0:03:ee:a7:71:55:d1:95:26:65:a3:f4: 3e:b7:fd:29:d4:48:70:e5:6f:07:db:03:a2:df:a6:94:ab:60: aa:31:c2:ed:28:e6:cd:24:e1:53:00:88:0d:3d:90:4c:69:b0: 53:e3:1d:cc:fe:5d:57:28:84:95:31:e3:27:27:8c:33:ed:01: d0:09:2e:3b:5e:17:7a:29:b4:1b:13:38:84:a4:29:2b:6b:88: 8c:b5:a9:c5:7e:51:cd:c1:d8:69:ea:88:57:78:94:d1:b5:cc: 28:45:7d:7f:86:00:09:d1:99:cc:38:c4:9f:c2:b4:cc:72:4f: 05:1f:32:b9:f9:0d:52:dd:23:94:b2:a8:d8:67:8a:51:92:ba: 1f:68:01:07:73:5a:b9:2e:88:47:ad:01:d2:09:81:b6:73:46: 16:7b:f0:a4:64:27:7f:b8:ea:58:96:f8:bb:d1:1e:8a:2c:7c: 55:66:57:ce:bb:53:62:e6:95:1a:40:14:9d:80:d3:eb:b8:a3: 42:42:32:c5:1d:99:f6:d3:c5:41:fe:80:f9:70:51:d1:ae:f6: e8:56:49:d3:26:a0:be:c9:3a:c2:04:40:3a:9a:88:8a:55:eb: 29:a0:b6:c5 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt57S6/TgrGoK9n0edRAqBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGQyYTM1NmE1NDc4MTU1YmVhYThiYzYyNTZhODZmNmQ1YjNmNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6fzf+glqMUiOBSWFj9QpQM3q1rN GlpgFjSY9gXwktH3SooRdTAQiN238kM+U40WJmY+2oYH9NN1NmIpbotqBVR1wrdE qSR3PkqZhAcym4pDzTRH+Jg9ZELrVl1XqGeDvWLxtE1VgGCMry7vuUz82Ih8Zf01 uMMkb3GoEXOjBNlfmzIhM9hnr5R7t1FiOa0H2yzsaiZiNy+cB5Qq8LO0DsRyw5xs 0hFDkc7gOICJPlcPXpYb/dGp82deebEYOPnA9O1sOms1BQK/wjd+Z+yle12lnXd9 J9neKRtKtskkdVRWY7uIlA+zXhd8MLWkauxLK2f/K1hmyBSVQs/S3pBmpwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFFjSo1alR4FVvqqLxiVqhvbVs/c8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2Q1YWZj Mi1iMDRjLTQ0NmQtOWEwNC05MDUzMDU0YTVjYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvZDVhZmMy LWIwNGMtNDQ2ZC05YTA0LTkwNTMwNTRhNWNhYi8xL1dOS2pWcVZIZ1ZXLXFvdkdK V3FHOXRXejl6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuTzQAwQE2XEgMA0EAgACMAcDBQMqAg6gMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAj9aMA0GCSqGSIb3DQEBCwUAA4IBAQB6+Wiq n0ba9QeyPexq4nkn2GFHmhJ09MzwA+6ncVXRlSZlo/Q+t/0p1Ehw5W8H2wOi36aU q2CqMcLtKObNJOFTAIgNPZBMabBT4x3M/l1XKISVMeMnJ4wz7QHQCS47Xhd6KbQb EziEpCkra4iMtanFflHNwdhp6ohXeJTRtcwoRX1/hgAJ0ZnMOMSfwrTMck8FHzK5 +Q1S3SOUsqjYZ4pRkrofaAEHc1q5LohHrQHSCYG2c0YWe/CkZCd/uOpYlvi70R6K LHxVZlfOu1Ni5pUaQBSdgNPruKNCQjLFHZn208VB/oD5cFHRrvboVknTJqC+yTrC BEA6moiKVespoLbF -----END CERTIFICATE-----Generated at Thu Jan 1 18:07:29 2026 by rpki-client