This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer File: WNh9kviQwtNllt7KHLCwu4sHoSI.cer (raw, json) Hash identifier: p1dbilix8hMgG9q7DAxr6v4by4wRO6MUiskubbc5h0c= Subject key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE52E9639E9AB02C99056C9124DABA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 80.255.32.0/19 IP: 82.206.128.0/17 IP: 213.185.96.0/19 IP: 2a00:fd8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:52:e9:63:9e:9a:b0:2c:99:05:6c:91:24:da:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:78:3c:ca:d5:6f:a1:bb:a9:a2:13:72:71: 2b:80:71:0d:16:bb:94:00:56:b3:9d:57:f2:53:81: 06:9b:53:12:c2:ca:98:21:1f:98:df:87:9c:19:73: bb:f0:22:fb:0c:d8:dc:6e:bd:e2:f4:0a:dc:df:96: 1b:a4:c5:68:4e:d6:81:38:10:a2:13:2b:10:67:c4: 8a:82:78:28:06:35:db:42:68:7b:75:5e:bf:c6:be: a9:37:66:4a:37:a7:c2:80:7c:79:b9:bd:bb:ba:4d: 5c:88:7e:5a:03:58:fb:5f:3b:aa:ab:dd:3d:4f:f8: 60:d8:59:35:07:90:18:98:08:94:48:0a:32:20:a2: 7e:ac:d0:92:68:4a:12:a7:d9:83:5a:d8:53:10:da: 6f:73:19:0e:4a:fe:3e:34:68:bb:0f:6c:f8:b9:0b: dc:d2:1b:6b:eb:98:71:7d:7a:a9:85:f9:2b:7f:23: 8b:20:f7:76:be:5c:21:ee:57:89:ab:04:68:13:55: 86:e0:cd:07:85:83:0f:26:e4:07:9e:ab:1b:f2:e2: af:15:ef:d4:70:f9:be:fc:dd:6f:b3:53:07:52:83: ae:46:b5:db:0c:91:19:10:8f:3f:79:5d:f2:ca:73: 73:65:69:44:1f:f5:72:b6:0a:d0:a6:26:7d:4d:35: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.255.32.0/19 82.206.128.0/17 213.185.96.0/19 IPv6: 2a00:fd8::/32 Signature Algorithm: sha256WithRSAEncryption 32:5e:ba:bd:9e:9f:b4:fd:2f:54:d1:74:a7:2e:9a:ff:ca:dd: 5e:d7:24:16:24:4c:a0:6c:8d:bf:7b:6a:2a:95:92:6b:c4:c2: 62:79:6f:e9:42:ac:7d:77:83:1d:e0:c9:b9:29:37:e2:78:7c: 21:f4:19:f7:7c:96:58:47:21:f4:51:2f:78:de:8d:0d:4d:ee: 9b:cb:cb:99:f9:e4:a9:1d:5c:c7:85:bb:6c:ec:99:75:31:bf: f5:15:50:d1:45:8d:c4:9d:39:f0:f7:c0:9e:5e:f1:14:52:48: 57:39:d8:53:d9:8e:8c:32:ef:62:03:02:70:b7:f5:a0:01:a8: 05:e4:ea:10:cf:7c:59:b4:d0:75:cb:8f:0e:b9:4b:01:45:04: 35:25:aa:73:6e:28:1b:21:69:85:df:5e:56:8b:05:03:a4:e1: 83:5a:fa:5e:4c:ba:d3:a1:5c:86:10:7a:b5:bd:04:c4:13:4a: 96:a7:2e:2e:11:08:f1:5a:a5:f5:0a:9e:6c:ef:aa:e6:6b:ea: 70:17:21:24:2f:76:a8:11:39:fc:52:18:85:30:d1:0b:7b:22: d9:df:88:8c:18:88:26:dc:68:70:57:94:6a:f5:53:60:b4:39: 40:f0:cd:77:ae:c3:e7:63:48:8a:58:8c:35:cc:96:c1:ca:73: 1b:e2:8b:4f -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt87lLpY56asCyZBWyRJNq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGQ4N2Q5MmY4OTBjMmQzNjU5NmRlY2ExY2IwYjBiYjhiMDdhMTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXd4PMrVb6G7qaITcnErgHENFruU AFaznVfyU4EGm1MSwsqYIR+Y34ecGXO78CL7DNjcbr3i9Arc35YbpMVoTtaBOBCi EysQZ8SKgngoBjXbQmh7dV6/xr6pN2ZKN6fCgHx5ub27uk1ciH5aA1j7Xzuqq909 T/hg2Fk1B5AYmAiUSAoyIKJ+rNCSaEoSp9mDWthTENpvcxkOSv4+NGi7D2z4uQvc 0htr65hxfXqphfkrfyOLIPd2vlwh7leJqwRoE1WG4M0HhYMPJuQHnqsb8uKvFe/U cPm+/N1vs1MHUoOuRrXbDJEZEI8/eV3yynNzZWlEH/VytgrQpiZ9TTVFJwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFjYfZL4kMLTZZbeyhywsLuLB6EiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzFkYjIx My00YWZkLTQ0MDctYmE5Yy1iZDczNjA5ZWU1ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvMWRiMjEz LTRhZmQtNDQwNy1iYTljLWJkNzM2MDllZTVkYS8xL1dOaDlrdmlRd3RObGx0N0tI TEN3dTRzSG9TSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFUP8gAwQHUs6AAwQF1blgMA0EAgACMAcDBQAq AA/YMA0GCSqGSIb3DQEBCwUAA4IBAQAyXrq9np+0/S9U0XSnLpr/yt1e1yQWJEyg bI2/e2oqlZJrxMJieW/pQqx9d4Md4Mm5KTfieHwh9Bn3fJZYRyH0US943o0NTe6b y8uZ+eSpHVzHhbts7Jl1Mb/1FVDRRY3EnTnw98CeXvEUUkhXOdhT2Y6MMu9iAwJw t/WgAagF5OoQz3xZtNB1y48OuUsBRQQ1JapzbigbIWmF315WiwUDpOGDWvpeTLrT oVyGEHq1vQTEE0qWpy4uEQjxWqX1Cp5s76rma+pwFyEkL3aoETn8UhiFMNELeyLZ 34iMGIgm3GhwV5Rq9VNgtDlA8M13rsPnY0iKWIw1zJbBynMb4otP -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:02 2026 by rpki-client