This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer File: WNidwYngCTYayyZVaA5mnAvEdFY.cer (raw, json) Hash identifier: 0se9dX9lsNnsKthYW9PwHZOsg1yOZbeIE4wH6G0oCvE= Subject key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F139FD2CBAAC8A772B01E41BDEB9234 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.241.204.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9f:d2:cb:aa:c8:a7:72:b0:1e:41:bd:eb:92:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58d89dc189e009361acb2655680e669c0bc47456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:5c:5d:d8:56:20:ef:1b:24:7e:73:8e:8f: b1:44:ac:4e:22:d8:f0:e3:97:e0:9a:f1:e3:f5:47: 42:25:40:49:ec:a4:d3:dc:ee:87:7c:92:97:ff:ed: 2e:5d:c3:93:a2:fe:52:22:0e:65:5e:74:fe:c7:f6: 26:0a:26:a2:31:57:e5:85:50:1f:7e:ef:f2:d9:b6: 92:14:e5:b3:59:94:b1:27:f2:1c:dd:7e:6f:ad:19: f8:f8:69:a3:6f:cf:2f:d6:20:82:53:4e:57:c3:fb: cc:4d:65:1b:41:d4:db:c4:24:46:dc:79:04:9a:63: 31:0e:47:15:ca:7b:40:86:36:6c:73:ba:57:1e:99: 60:43:2f:e9:2c:23:e6:1a:79:d7:53:a4:b6:eb:43: 6c:03:56:af:5a:08:23:b9:9a:fb:10:70:2a:2a:b6: 43:c5:5f:d8:08:0a:9b:66:ef:57:43:a2:d9:c3:68: 95:e8:86:7b:64:0b:5b:79:02:8d:03:84:6d:3b:75: 7f:3a:4f:22:43:5d:79:3c:39:92:ec:5e:50:58:18: 6a:ca:48:86:91:83:95:4e:79:3d:9d:58:50:c7:e8: 98:de:bc:10:c0:69:6a:b6:c5:6b:5d:25:d9:11:da: 6d:c8:bb:58:3b:97:c3:21:12:c2:84:c3:13:f4:0b: c3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.204.0/24 Signature Algorithm: sha256WithRSAEncryption 03:35:0c:34:93:9d:58:8b:21:12:b4:5f:27:bf:97:05:e4:a2: bf:03:1b:46:0d:2b:cd:1e:03:f2:f2:bf:5d:f7:e2:2c:6b:bf: db:f6:41:34:bd:0f:5b:a9:67:df:52:ed:78:7e:8a:4d:8c:44: fb:80:54:fe:38:f9:37:e9:36:6f:b7:8c:d7:7a:ee:6d:c8:96: 98:91:02:3a:07:f2:fd:41:de:a5:9f:25:07:df:f5:17:83:8b: c3:2c:18:37:26:ac:e9:4d:2f:6c:9d:3f:f0:80:5f:a7:24:de: c6:b5:09:6f:3f:91:cf:b5:26:fa:f0:4a:5f:66:b7:4d:60:7c: 2c:63:55:55:d5:b9:e7:58:04:d0:aa:88:39:05:ce:a7:e4:2d: 53:4f:12:3f:f3:45:b7:85:5c:8d:a6:ac:6b:1c:d3:27:0b:4a: 04:4c:f9:bd:50:e2:10:a0:74:0f:66:80:b7:61:d3:a0:ec:32: ff:f2:17:e0:63:1c:da:80:3b:b6:bd:96:72:bb:8a:23:bf:69: 55:7f:a4:08:e9:6e:62:dd:a2:7f:42:f0:a4:4c:b1:fc:35:0f: 86:14:f7:db:e6:c9:22:ad:33:e3:f6:e4:6c:fb:40:58:01:45: 54:8a:3c:01:63:98:69:ca:ff:f1:86:06:33:1c:6a:15:74:1c: 15:f8:9b:b6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/E5/Sy6rIp3KwHkG965I0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGQ4OWRjMTg5ZTAwOTM2MWFjYjI2NTU2ODBlNjY5YzBiYzQ3NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkNcXdhWIO8bJH5zjo+xRKxOItjw 45fgmvHj9UdCJUBJ7KTT3O6HfJKX/+0uXcOTov5SIg5lXnT+x/YmCiaiMVflhVAf fu/y2baSFOWzWZSxJ/Ic3X5vrRn4+Gmjb88v1iCCU05Xw/vMTWUbQdTbxCRG3HkE mmMxDkcVyntAhjZsc7pXHplgQy/pLCPmGnnXU6S260NsA1avWggjuZr7EHAqKrZD xV/YCAqbZu9XQ6LZw2iV6IZ7ZAtbeQKNA4RtO3V/Ok8iQ115PDmS7F5QWBhqykiG kYOVTnk9nVhQx+iY3rwQwGlqtsVrXSXZEdptyLtYO5fDIRLChMMT9AvDrQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFjYncGJ4Ak2GssmVWgOZpwLxHRWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzUxZWY0 Ni1kMDY5LTQ3NGMtOWI0Yi05ZGZmNWJkNTQ4OGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvNTFlZjQ2 LWQwNjktNDc0Yy05YjRiLTlkZmY1YmQ1NDg4YS8xL1dOaWR3WW5nQ1RZYXl5WlZh QTVtbkF2RWRGWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAufHMMA0GCSqGSIb3DQEBCwUAA4IBAQADNQw0 k51YiyEStF8nv5cF5KK/AxtGDSvNHgPy8r9d9+Isa7/b9kE0vQ9bqWffUu14fopN jET7gFT+OPk36TZvt4zXeu5tyJaYkQI6B/L9Qd6lnyUH3/UXg4vDLBg3JqzpTS9s nT/wgF+nJN7GtQlvP5HPtSb68EpfZrdNYHwsY1VV1bnnWATQqog5Bc6n5C1TTxI/ 80W3hVyNpqxrHNMnC0oETPm9UOIQoHQPZoC3YdOg7DL/8hfgYxzagDu2vZZyu4oj v2lVf6QI6W5i3aJ/QvCkTLH8NQ+GFPfb5skirTPj9uRs+0BYAUVUijwBY5hpyv/x hgYzHGoVdBwV+Ju2 -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:03 2026 by rpki-client