This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer (raw, json) Hash identifier: VK7g1yPfGpViY+HstIPudQoAhvws3ucZRFiQhcSTW3w= Subject key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA50280EF2D94707AFE2D142D9F561B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202606 IP: 185.54.216.0/23 IP: 2a04:d240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:02:80:ef:2d:94:70:7a:fe:2d:14:2d:9f:56:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:b3:c1:36:d8:bb:31:f0:e4:bc:94:a2:61: a2:be:63:93:13:fc:16:f6:8e:29:c2:40:f2:fe:77: 3c:b1:06:e4:8d:d1:43:99:ce:f5:a8:5b:32:c4:74: 68:fa:30:10:b6:a7:6c:98:cf:32:fa:d8:6f:56:64: d2:d7:c0:74:a7:16:2f:52:d9:23:10:07:33:51:8f: f0:b9:5e:5b:48:29:c4:43:f6:90:4f:f9:94:52:5a: 74:4d:68:66:c7:05:de:12:93:1f:15:a7:b5:d6:66: 16:8b:b8:b9:c7:e0:df:cc:63:c5:9f:f4:de:30:46: f5:3b:3e:2c:06:8a:00:d8:5e:4a:25:b0:25:c3:fb: 51:58:7a:8b:3c:3e:e3:fe:c8:17:d9:aa:5c:ee:8b: 09:f9:e7:05:47:a7:21:45:86:e4:4f:8d:2a:ed:e8: 4e:e5:49:35:8a:c7:6e:50:a3:e7:8a:7e:0e:74:c4: 23:b0:2e:97:4a:47:e5:0f:9e:b7:4c:94:53:a4:e8: dd:e5:8b:71:a1:8e:c0:98:6b:ad:24:77:81:d7:e2: d2:3c:de:03:39:0a:38:ad:d3:59:bd:35:37:7f:3b: 1f:3b:8c:5e:8c:4e:b9:fe:c1:94:8e:d1:7e:b2:fe: fa:46:60:3e:75:bd:38:58:ef:fe:65:d6:fd:c0:94: 93:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.216.0/23 IPv6: 2a04:d240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202606 Signature Algorithm: sha256WithRSAEncryption 4a:bf:07:e4:1e:b0:03:b2:c0:ce:b0:9a:7f:93:f1:9b:cf:ac: ec:0c:2a:00:11:57:9c:44:5b:d0:e2:d7:6f:ce:e8:19:b3:cc: 80:60:3b:95:28:f2:76:fa:c0:e0:5b:0e:aa:c1:69:f8:34:c1: ea:96:ea:47:90:a0:c2:98:51:60:9a:a0:1d:43:7c:79:61:c1: 65:10:ae:07:70:17:7a:2f:13:68:19:d1:b6:0c:d2:33:72:94: 91:68:fe:87:33:92:ae:94:4a:2f:a8:50:6e:9a:01:7b:75:ca: e1:eb:5b:b2:84:97:db:7f:d0:20:a7:d2:f8:90:31:a3:01:4e: 69:88:28:fe:1e:ec:2b:77:ed:a4:e9:f3:63:a5:31:ab:b2:a8: 14:1c:13:87:c7:48:1d:81:c3:c5:c2:8c:8c:56:70:fd:92:68: 29:67:33:80:e5:bb:c4:be:47:d4:a9:06:73:59:ad:bc:42:bc: 78:b0:ef:ea:5b:2c:90:ed:7f:a0:90:c1:4b:e0:57:0e:5c:d2: 0e:c3:ed:1b:a0:f4:93:dd:bf:dd:1c:53:b0:2a:da:16:54:93: 77:37:50:b0:aa:66:64:cf:ed:55:f1:b4:a4:85:c7:86:23:91: 9a:94:cd:55:73:9b:2e:79:d5:fb:3b:61:23:07:7c:c7:f9:cc: 12:63:1c:4b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pQKA7y2UcHr+LRQtn1YbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWIzZTA5NTZhOWQ0ODE3Y2Q5Mjg1MmMyN2EyN2I3ZDJmMTExM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AqzwTbYuzHw5LyUomGivmOTE/wW 9o4pwkDy/nc8sQbkjdFDmc71qFsyxHRo+jAQtqdsmM8y+thvVmTS18B0pxYvUtkj EAczUY/wuV5bSCnEQ/aQT/mUUlp0TWhmxwXeEpMfFae11mYWi7i5x+DfzGPFn/Te MEb1Oz4sBooA2F5KJbAlw/tRWHqLPD7j/sgX2apc7osJ+ecFR6chRYbkT40q7ehO 5Uk1isduUKPnin4OdMQjsC6XSkflD563TJRTpOjd5YtxoY7AmGutJHeB1+LSPN4D OQo4rdNZvTU3fzsfO4xejE65/sGUjtF+sv76RmA+db04WO/+Zdb9wJSThQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFmz4JVqnUgXzZKFLCeie30vERPbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2MwN2E3 ZC0yNGU2LTQ2MTAtYjY1Ni1jNDcxNzJkNWQ4ODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvYzA3YTdk LTI0ZTYtNDYxMC1iNjU2LWM0NzE3MmQ1ZDg4Mi8xL1diUGdsV3FkU0JmTmtvVXNK Nko3ZlM4UkU5cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBuTbYMA0EAgACMAcDBQMqBNJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMXbjANBgkqhkiG9w0BAQsFAAOCAQEASr8H5B6wA7LA zrCaf5Pxm8+s7AwqABFXnERb0OLXb87oGbPMgGA7lSjydvrA4FsOqsFp+DTB6pbq R5CgwphRYJqgHUN8eWHBZRCuB3AXei8TaBnRtgzSM3KUkWj+hzOSrpRKL6hQbpoB e3XK4etbsoSX23/QIKfS+JAxowFOaYgo/h7sK3ftpOnzY6Uxq7KoFBwTh8dIHYHD xcKMjFZw/ZJoKWczgOW7xL5H1KkGc1mtvEK8eLDv6lsskO1/oJDBS+BXDlzSDsPt G6D0k92/3RxTsCraFlSTdzdQsKpmZM/tVfG0pIXHhiORmpTNVXObLnnV+zthIwd8 x/nMEmMcSw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:45 2026 by rpki-client