This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer File: pWT0IqqXs96coPZ5Gfv4LrH93dI.cer (raw, json) Hash identifier: P3vRcDY2FuelvBsUOaYCBcA+PpX7d3PUjvL7SM1uibs= Subject key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC8AD98F0A32CB4D48BD750D4D86E7B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43653 IP: 185.183.232.0/22 IP: 213.181.128.0/19 IP: 2a07:db40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:ad:98:f0:a3:2c:b4:d4:8b:d7:50:d4:d8:6e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:71:4e:29:0e:60:f0:d7:1c:ed:67:d4:b1: 18:91:86:0c:76:da:cd:a4:0e:45:eb:13:88:a1:c4: ff:7d:a0:48:44:40:ac:de:6c:46:fb:db:8a:f4:20: c3:96:07:52:4f:af:65:3e:84:e0:f1:b6:2b:94:ff: 50:8e:b4:f6:41:6f:5a:4d:20:4c:21:1b:9e:df:4d: 92:be:ff:05:81:b5:30:ea:d1:88:74:7a:e0:56:b7: 5c:24:21:db:ff:8f:7e:27:13:c6:ef:1d:bf:70:aa: f8:4f:88:31:ef:f7:86:0e:d3:90:f3:5f:6c:ea:d0: 49:01:7f:95:ce:44:79:4b:bd:d9:83:2f:23:2c:6a: ad:a1:2d:16:00:3b:0a:92:b4:e6:b4:e1:64:5c:c3: 33:d9:27:a5:4d:a6:af:a6:fc:2d:9d:75:23:8c:6a: 12:d4:9e:8c:e4:53:df:a1:38:24:52:1d:80:c5:ca: 9a:d4:60:88:4b:e0:c4:dd:bb:1a:ae:8d:29:9d:05: 92:70:03:15:d6:18:95:79:da:31:72:ba:44:4c:59: 7f:76:80:5b:42:5e:48:67:d0:8f:27:42:17:dc:3f: 37:c3:ac:ae:7a:cc:09:71:ce:39:69:18:e7:36:b4: 0b:3c:d3:a2:20:0a:0c:bf:9a:77:51:63:a0:fd:c2: 56:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.232.0/22 213.181.128.0/19 IPv6: 2a07:db40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43653 Signature Algorithm: sha256WithRSAEncryption 00:ab:37:9e:f2:b1:a9:71:f2:99:b3:8c:1e:82:8e:17:1f:63: 58:ac:12:10:d8:d0:e5:74:1a:e7:25:44:06:17:5f:2a:ac:3a: 17:5d:ff:99:f5:d8:27:e4:b6:59:fd:8c:75:2c:15:a4:60:9f: f3:a9:c2:ba:d3:09:2c:85:04:3a:7a:6f:f0:74:a0:8a:49:c3: 8b:77:36:88:32:5b:19:62:9f:95:35:4b:6a:2f:61:60:6a:cf: d1:22:3f:e8:90:d8:ac:20:fc:0f:32:95:66:22:56:d9:45:05: 0f:bd:9a:b1:f8:8f:25:90:d2:38:c9:3d:e8:69:2d:82:66:dd: 90:d1:ed:16:a6:26:96:54:83:b6:b5:b5:a9:34:15:a6:e0:ba: 8e:db:1a:81:7a:bc:98:b2:50:79:a0:5b:77:80:84:2b:f8:97: fa:c4:c2:bd:04:c2:f2:c7:02:34:45:58:66:97:47:15:19:ef: 5d:9b:cd:15:2c:27:64:fd:a1:20:bc:3d:0a:bd:8b:ce:9f:d8: d4:6d:0f:c4:57:5f:2d:7c:9a:c9:fa:91:96:48:6a:5a:07:d3: 8a:f9:18:4f:b5:31:be:d8:d5:82:71:49:c8:48:86:74:f3:63: b6:03:2c:ce:f8:26:19:38:92:e5:5d:b6:c0:ec:e2:a0:7d:3b: 47:94:a5:11 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yK2Y8KMstNSL11DU2G57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTY0ZjQyMmFhOTdiM2RlOWNhMGY2NzkxOWZiZjgyZWIxZmRkZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFhxTikOYPDXHO1n1LEYkYYMdtrN pA5F6xOIocT/faBIRECs3mxG+9uK9CDDlgdST69lPoTg8bYrlP9QjrT2QW9aTSBM IRue302Svv8FgbUw6tGIdHrgVrdcJCHb/49+JxPG7x2/cKr4T4gx7/eGDtOQ819s 6tBJAX+VzkR5S73Zgy8jLGqtoS0WADsKkrTmtOFkXMMz2SelTaavpvwtnXUjjGoS 1J6M5FPfoTgkUh2Axcqa1GCIS+DE3bsaro0pnQWScAMV1hiVedoxcrpETFl/doBb Ql5IZ9CPJ0IX3D83w6yueswJcc45aRjnNrQLPNOiIAoMv5p3UWOg/cJWtQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKVk9CKql7PenKD2eRn7+C6x/d3SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViL2Q1OWU5 OC0yMTBmLTRiNTUtYWM0YS0wMjY4MzgxMTA3YWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZDU5ZTk4 LTIxMGYtNGI1NS1hYzRhLTAyNjgzODExMDdhZi8xL3BXVDBJcXFYczk2Y29QWjVH ZnY0THJIOTNkSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCubfoAwQF1bWAMA0EAgACMAcDBQMqB9tAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqhTANBgkqhkiG9w0BAQsFAAOCAQEAAKs3 nvKxqXHymbOMHoKOFx9jWKwSENjQ5XQa5yVEBhdfKqw6F13/mfXYJ+S2Wf2MdSwV pGCf86nCutMJLIUEOnpv8HSgiknDi3c2iDJbGWKflTVLai9hYGrP0SI/6JDYrCD8 DzKVZiJW2UUFD72asfiPJZDSOMk96GktgmbdkNHtFqYmllSDtrW1qTQVpuC6jtsa gXq8mLJQeaBbd4CEK/iX+sTCvQTC8scCNEVYZpdHFRnvXZvNFSwnZP2hILw9Cr2L zp/Y1G0PxFdfLXyayfqRlkhqWgfTivkYT7UxvtjVgnFJyEiGdPNjtgMszvgmGTiS 5V22wOzioH07R5SlEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:09 2026 by rpki-client