This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer File: wlbSXx_dANyA3W0iWyERm_ISHok.cer (raw, json) Hash identifier: Er9BQA+0mikI9HRV3HPCP48rk3eylk3JX20R1s9S2yQ= Subject key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED1E1B6C6948EDD1350C1B74D5FC76 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.255.216.0/22 IP: 2a0c:6040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1e:1b:6c:69:48:ed:d1:35:0c:1b:74:d5:fc:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8c:1f:5e:1a:38:5e:e4:f3:22:f8:99:3a:af: cc:1e:c4:83:1a:39:bf:5a:6d:45:b4:36:72:4f:b3: 81:69:2f:b2:c7:c2:f8:d9:ee:92:71:33:5b:d1:89: 86:22:ef:1a:ae:84:a8:90:2b:e2:fd:11:d7:d6:1b: cf:d1:99:20:5a:8f:44:dc:64:93:80:1b:0a:33:0a: cb:0e:fa:21:72:f4:fa:69:20:06:ad:0e:a1:ce:8f: 25:26:f0:79:3c:60:20:8b:53:f3:6b:1d:7f:2f:a3: 22:2a:00:b3:82:69:5a:6d:dd:33:5f:a8:10:4c:cc: 7d:0f:d4:12:d4:f1:87:9e:f9:1f:9e:00:8b:be:a8: 38:53:4b:d0:a7:4f:c5:3f:00:73:07:20:bd:d0:4f: 78:ac:ae:bd:9c:b3:e1:63:3e:04:50:ba:5a:c2:1f: 9c:a9:7a:29:5c:f9:b1:14:1f:fc:55:0e:8d:a5:44: 58:0e:20:f9:ce:b6:d4:7f:fb:61:cc:34:d1:1d:39: ef:72:b7:1a:3d:e7:48:6f:4a:39:0a:a3:99:6f:16: 44:bd:87:a2:74:41:45:94:e6:2f:86:96:f0:df:5f: 91:00:4d:83:b5:c4:18:2b:af:f2:7f:89:be:bb:b2: e1:e3:ec:31:14:20:7e:d0:f5:3d:b0:ff:c4:44:eb: 3d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.216.0/22 IPv6: 2a0c:6040::/29 Signature Algorithm: sha256WithRSAEncryption 1a:ea:d8:c2:11:70:28:94:d0:89:a2:4a:05:1b:1c:12:08:df: 9f:ef:b8:58:15:84:42:8f:02:ae:ec:ff:b0:ca:5d:ba:a7:4e: b2:09:d4:ed:0c:41:44:1e:99:df:d2:89:f9:d5:04:7d:23:4f: a7:a4:de:1c:de:3f:3b:dc:2d:68:63:7e:2e:9b:b8:14:57:40: 63:4e:6a:88:a1:09:6d:58:74:25:79:ed:5a:c6:3b:f0:90:a1: b7:01:2a:0f:de:66:7a:d5:ab:d8:1e:98:4d:34:9a:6c:88:a9: 46:45:5f:f5:f5:96:62:ba:83:35:d1:74:a0:d4:b3:07:ad:02: 8b:99:85:73:88:5d:06:37:20:af:58:5c:f5:57:ad:93:65:27: ea:dd:5a:2a:62:69:45:c3:9f:3f:71:2b:39:e2:6c:63:6a:b7: a8:48:df:a6:66:27:55:9b:c0:40:e2:27:42:2a:be:ed:06:53: 66:f2:7c:1f:3a:2b:87:04:a7:95:7c:91:f4:c5:de:c2:e7:38: 82:e5:aa:88:59:c2:31:6d:ff:11:83:c6:8e:07:06:4a:59:d1: 40:3a:14:2e:c0:41:27:7f:75:81:47:0f:c8:6c:15:0e:7e:b9: b7:b7:4b:96:94:35:76:13:f7:e6:82:e5:71:bb:0d:c7:fd:61: b3:5d:6b:c0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57R4bbGlI7dE1DBt01fx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjU2ZDI1ZjFmZGQwMGRjODBkZDZkMjI1YjIxMTE5YmYyMTIxZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4wfXho4XuTzIviZOq/MHsSDGjm/ Wm1FtDZyT7OBaS+yx8L42e6ScTNb0YmGIu8aroSokCvi/RHX1hvP0ZkgWo9E3GST gBsKMwrLDvohcvT6aSAGrQ6hzo8lJvB5PGAgi1Pzax1/L6MiKgCzgmlabd0zX6gQ TMx9D9QS1PGHnvkfngCLvqg4U0vQp0/FPwBzByC90E94rK69nLPhYz4EULpawh+c qXopXPmxFB/8VQ6NpURYDiD5zrbUf/thzDTRHTnvcrcaPedIb0o5CqOZbxZEvYei dEFFlOYvhpbw31+RAE2DtcQYK6/yf4m+u7Lh4+wxFCB+0PU9sP/EROs9nQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFMJW0l8f3QDcgN1tIlshEZvyEh6JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhL2U1YTgx NC0xNmE1LTQwM2ItOTNmMy1jZjMyYTBkOTI4MjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvZTVhODE0 LTE2YTUtNDAzYi05M2YzLWNmMzJhMGQ5MjgyNS8xL3dsYlNYeF9kQU55QTNXMGlX eUVSbV9JU0hvay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuf/YMA0EAgACMAcDBQMqDGBAMA0GCSqGSIb3 DQEBCwUAA4IBAQAa6tjCEXAolNCJokoFGxwSCN+f77hYFYRCjwKu7P+wyl26p06y CdTtDEFEHpnf0on51QR9I0+npN4c3j873C1oY34um7gUV0BjTmqIoQltWHQlee1a xjvwkKG3ASoP3mZ61avYHphNNJpsiKlGRV/19ZZiuoM10XSg1LMHrQKLmYVziF0G NyCvWFz1V62TZSfq3VoqYmlFw58/cSs54mxjareoSN+mZidVm8BA4idCKr7tBlNm 8nwfOiuHBKeVfJH0xd7C5ziC5aqIWcIxbf8Rg8aOBwZKWdFAOhQuwEEnf3WBRw/I bBUOfrm3t0uWlDV2E/fmguVxuw3H/WGzXWvA -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:48 2026 by rpki-client