This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer File: WNLScV9D90e-p2Lc4Wa8pLjpZes.cer (raw, json) Hash identifier: DotHGK33jtAxgLuxTe2v91+o5LJ61YnQ8iM616NFCNo= Subject key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB461FD712673056762A93FA4E7289 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6724 IP: 81.169.128.0/17 IP: 85.214.0.0/15 IP: 185.56.148.0/22 IP: 192.67.197.0 -- 192.67.198.255 IP: 193.141.3.0/24 IP: 194.45.97.0/24 IP: 2a01:238::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:46:1f:d7:12:67:30:56:76:2a:93:fa:4e:72:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58d2d2715f43f747bea762dce166bca4b8e965eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:ec:f1:6c:fa:c2:fc:eb:48:69:f0:d6:64: 91:94:26:a6:05:3a:28:d1:23:84:d4:69:93:1a:29: 64:ad:72:ab:17:df:33:94:d3:2f:00:a2:fb:89:21: da:78:82:a3:17:b7:1f:95:c7:87:84:d0:53:ab:35: c9:e7:30:8d:34:ab:a5:10:d8:e7:45:32:b0:5b:3e: ea:02:de:31:3b:0e:57:47:fe:83:ce:2a:79:b6:9b: 48:44:91:ae:fb:d5:d6:bc:bc:96:8a:02:46:3a:24: 69:3d:af:b8:a1:26:d2:cc:b6:83:21:9d:1a:be:ab: 7a:15:37:51:67:2a:fe:21:97:7d:b4:de:4d:30:b9: a4:89:10:be:ff:70:a7:87:49:e4:cc:2a:0a:6d:bc: 21:fa:36:2b:1a:e4:3a:35:2f:72:f0:7b:6d:b3:06: 93:de:8a:e7:1e:1c:b0:9e:50:72:99:16:09:4e:47: 17:f0:d4:dc:87:c0:e4:33:6c:34:c8:5e:f0:78:55: 41:aa:b0:56:d5:f4:d5:19:89:c1:1d:6b:3d:3a:7d: 24:ca:e6:c5:03:49:83:74:64:88:6d:8c:fa:3c:ac: c5:cf:25:51:1c:4a:f7:c6:70:64:5e:21:96:5f:20: d1:b3:6e:18:19:8d:d4:b7:d4:e2:98:e0:1f:80:0d: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.169.128.0/17 85.214.0.0/15 185.56.148.0/22 192.67.197.0-192.67.198.255 193.141.3.0/24 194.45.97.0/24 IPv6: 2a01:238::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6724 Signature Algorithm: sha256WithRSAEncryption 54:2e:c4:c9:20:62:4c:67:e1:79:14:a6:e4:ba:61:e3:60:b5: 1e:cb:30:cf:13:17:03:53:0a:6e:87:6f:42:4c:24:4b:41:34: 71:ab:49:07:a4:5f:aa:d9:ee:db:f7:65:a2:9a:91:ff:5f:be: c5:b1:05:2b:8b:73:7b:ca:49:06:36:1d:b3:97:b3:b1:4d:a7: 26:3e:e6:00:6c:97:fa:5d:b6:a7:77:b7:3f:7d:54:80:9b:41: 9d:7f:b5:45:a0:6c:9f:b1:5f:02:1a:33:12:08:5c:0f:b8:fb: 96:56:03:c8:30:81:dc:b7:a7:59:09:c0:3a:db:88:4f:85:08: 14:1f:fd:8f:7a:ba:5e:53:b3:f3:3d:ab:9c:a3:6e:5d:66:6b: 5a:44:5d:dc:f0:4f:a5:9b:6a:2a:bc:fd:1c:00:ff:82:9d:73: 9b:d0:66:3c:fb:6d:68:db:5a:20:42:86:b4:26:57:60:53:ca: bd:0e:6f:41:76:e2:69:68:29:19:89:5b:f0:70:21:7c:15:d0: 50:13:f8:b9:30:dc:3f:51:67:ba:0b:df:a6:f6:5d:d6:e0:e1: cd:b4:36:18:2c:73:79:83:44:7e:a1:c8:a5:32:77:bd:bd:ca: 92:43:f8:95:ab:7d:6d:7c:ed:ed:3e:59:c9:84:bc:22:37:3f: fa:23:69:3b -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt260Yf1xJnMFZ2KpP6TnKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGQyZDI3MTVmNDNmNzQ3YmVhNzYyZGNlMTY2YmNhNGI4ZTk2NWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXTs8Wz6wvzrSGnw1mSRlCamBToo 0SOE1GmTGilkrXKrF98zlNMvAKL7iSHaeIKjF7cflceHhNBTqzXJ5zCNNKulENjn RTKwWz7qAt4xOw5XR/6Dzip5tptIRJGu+9XWvLyWigJGOiRpPa+4oSbSzLaDIZ0a vqt6FTdRZyr+IZd9tN5NMLmkiRC+/3Cnh0nkzCoKbbwh+jYrGuQ6NS9y8HttswaT 3ornHhywnlBymRYJTkcX8NTch8DkM2w0yF7weFVBqrBW1fTVGYnBHWs9On0kyubF A0mDdGSIbYz6PKzFzyVRHEr3xnBkXiGWXyDRs24YGY3Ut9TimOAfgA0sxQIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFFjS0nFfQ/dHvqdi3OFmvKS46WXrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2Q2N2I3 Yi1jNzk4LTQ5MDEtODBmOS1lMzgzNDUxNmZjMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvZDY3Yjdi LWM3OTgtNDkwMS04MGY5LWUzODM0NTE2ZmMwOC8xL1dOTFNjVjlEOTBlLXAyTGM0 V2E4cExqcFplcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAxBAIAATArAwQHUamAAwMBVdYDBAK5OJQwDAMEAMBDxQMEAMBD xgMEAMGNAwMEAMItYTANBAIAAjAHAwUDKgECODAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgIaRDANBgkqhkiG9w0BAQsFAAOCAQEAVC7EySBiTGfheRSm5Lph42C1Hssw zxMXA1MKbodvQkwkS0E0catJB6Rfqtnu2/dlopqR/1++xbEFK4tze8pJBjYds5ez sU2nJj7mAGyX+l22p3e3P31UgJtBnX+1RaBsn7FfAhozEghcD7j7llYDyDCB3Len WQnAOtuIT4UIFB/9j3q6XlOz8z2rnKNuXWZrWkRd3PBPpZtqKrz9HAD/gp1zm9Bm PPttaNtaIEKGtCZXYFPKvQ5vQXbiaWgpGYlb8HAhfBXQUBP4uTDcP1FnugvfpvZd 1uDhzbQ2GCxzeYNEfqHIpTJ3vb3KkkP4lat9bXzt7T5ZyYS8Ijc/+iNpOw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:09 2026 by rpki-client