This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer File: pTW_JFBXN0H5Q16UghAWoi5rwUc.cer (raw, json) Hash identifier: EjY1cRu6mbzwACzH2eWiGHRl64/lRL7ZyuQOrTpoTaI= Subject key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EDCF74C7711FCEC60817B3027C9CA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209520 IP: 2001:678:8fc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:dc:f7:4c:77:11:fc:ec:60:81:7b:30:27:c9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a535bf2450573741f9435e94821016a22e6bc147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:44:54:ba:2f:12:b1:3c:d0:de:0f:f4:07: a1:18:41:52:60:c4:f3:46:b6:af:ee:6f:5f:f8:19: 2f:24:56:84:38:1d:2c:fa:7f:ae:88:37:bd:6e:a9: 09:f3:fb:d9:41:94:0a:e8:97:76:6f:4b:0a:95:e2: 72:a7:fc:63:56:3f:35:d6:a3:1c:4d:4f:35:c8:5f: 88:24:b7:6f:dd:23:3e:77:d3:95:f5:6e:71:1f:7e: 29:98:26:4f:90:64:4e:8f:a9:42:13:ed:06:d3:88: 38:58:25:ea:5b:3b:d1:0e:e5:99:6a:d4:d2:53:91: c5:57:4c:7f:e9:6d:39:15:fd:1d:f2:69:60:a6:4b: 98:3f:1d:e9:fa:3d:a8:3b:8c:c8:86:51:73:b2:75: e8:07:97:8d:c4:a5:84:cb:04:2f:bc:e8:d5:86:b4: 7b:a2:7d:bc:cf:b8:dd:8a:77:28:f8:0b:c8:a5:98: f3:28:ab:45:a2:08:e7:b6:af:52:6c:88:c9:92:2a: 03:d5:2b:be:a1:33:9d:10:9e:18:78:88:f5:91:30: cf:59:4e:ed:d6:c3:81:83:c9:85:4f:cd:12:d4:ba: e4:1a:ba:b9:f0:b3:7d:34:73:20:ce:4b:3a:49:59: a8:68:fc:e3:1c:15:5a:ae:6c:1a:28:0b:96:11:22: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:8fc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209520 Signature Algorithm: sha256WithRSAEncryption 37:c9:ce:7b:09:64:cc:ae:58:95:89:3b:3b:ea:77:9d:f0:ba: 43:47:b1:d5:07:7c:9b:34:6d:61:fb:49:e9:81:19:46:6f:47: 01:f4:db:51:6e:ea:84:2b:cd:59:0b:fd:cc:1f:d2:6d:4b:06: ef:3f:08:5f:45:29:89:51:d7:e6:64:d0:5f:52:8a:f5:90:d5: 8f:b8:cb:79:66:23:fa:b1:4c:b8:bd:4a:cb:3b:d1:17:03:a4: 2c:45:1d:f5:64:53:35:8a:8d:03:86:4a:18:17:c4:df:a0:7b: 0e:fd:08:9b:a9:96:d3:25:df:33:64:aa:27:ac:58:84:d8:8d: 6b:2f:a0:14:09:8f:6f:dc:0c:27:ba:7e:e7:83:57:1f:23:9f: 73:8b:cf:2c:34:8e:e0:11:a7:f8:df:e8:f9:98:40:85:91:05: d2:47:d6:80:f4:5f:1d:c6:15:76:93:b5:ed:aa:4f:b6:f4:39: 33:30:78:7e:2e:ce:55:8f:ff:55:67:a0:23:14:e1:e1:32:74: f9:0d:93:d9:af:0c:59:78:cb:89:35:91:33:75:d9:8b:31:cc: bf:18:a8:60:b8:93:b3:7d:56:ad:16:03:df:fa:58:9c:05:e7: 08:96:c4:37:ce:69:a7:2d:c2:1f:72:0e:98:c7:7c:67:14:44: 26:96:f9:15 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5ftz3THcR/OxggXswJ8nKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTM1YmYyNDUwNTczNzQxZjk0MzVlOTQ4MjEwMTZhMjJlNmJjMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArexEVLovErE80N4P9AehGEFSYMTz Rrav7m9f+BkvJFaEOB0s+n+uiDe9bqkJ8/vZQZQK6Jd2b0sKleJyp/xjVj811qMc TU81yF+IJLdv3SM+d9OV9W5xH34pmCZPkGROj6lCE+0G04g4WCXqWzvRDuWZatTS U5HFV0x/6W05Ff0d8mlgpkuYPx3p+j2oO4zIhlFzsnXoB5eNxKWEywQvvOjVhrR7 on28z7jdinco+AvIpZjzKKtFogjntq9SbIjJkioD1Su+oTOdEJ4YeIj1kTDPWU7t 1sOBg8mFT80S1LrkGrq58LN9NHMgzks6SVmoaPzjHBVarmwaKAuWESKSvwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFKU1vyRQVzdB+UNelIIQFqIua8FHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzJmOGQ3 MS1lZWM1LTRkM2QtYTdhMS1iMDMyMTEyMDUxYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMmY4ZDcx LWVlYzUtNGQzZC1hN2ExLWIwMzIxMTIwNTFiMS8xL3BUV19KRkJYTjBINVExNlVn aEFXb2k1cndVYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAj8MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMycDANBgkqhkiG9w0BAQsFAAOCAQEAN8nOewlkzK5YlYk7O+p3nfC6Q0ex 1Qd8mzRtYftJ6YEZRm9HAfTbUW7qhCvNWQv9zB/SbUsG7z8IX0UpiVHX5mTQX1KK 9ZDVj7jLeWYj+rFMuL1KyzvRFwOkLEUd9WRTNYqNA4ZKGBfE36B7Dv0Im6mW0yXf M2SqJ6xYhNiNay+gFAmPb9wMJ7p+54NXHyOfc4vPLDSO4BGn+N/o+ZhAhZEF0kfW gPRfHcYVdpO17apPtvQ5MzB4fi7OVY//VWegIxTh4TJ0+Q2T2a8MWXjLiTWRM3XZ izHMvxioYLiTs31WrRYD3/pYnAXnCJbEN85ppy3CH3IOmMd8ZxREJpb5FQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:12 2026 by rpki-client