This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sWtWoh33vti5p1TYT-WTEnNh1qs.cer File: sWtWoh33vti5p1TYT-WTEnNh1qs.cer (raw, json) Hash identifier: 0l40vybMfYau0qPMBJLUQ2S9ZN74UyFMuS34zU8SlgM= Subject key identifier: B1:6B:56:A2:1D:F7:BE:D8:B9:A7:54:D8:4F:E5:93:12:73:61:D6:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B184883C7CC231A83C676E3DB3A08D7BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 13 Dec 2025 15:16:04 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 209058 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:48:83:c7:cc:23:1a:83:c6:76:e3:db:3a:08:d7:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 13 15:16:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b16b56a21df7bed8b9a754d84fe593127361d6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:29:d6:ce:53:d0:4b:ca:10:63:b8:a3:31: 34:5a:eb:dd:85:39:4b:a3:30:09:48:72:bc:f3:f3: c4:1d:70:e9:c9:10:66:51:45:a6:77:f9:7f:40:e7: 47:10:ca:8c:9f:e0:46:c6:fd:a9:43:15:2b:8e:4f: a6:b5:f8:da:03:c6:be:51:59:67:f1:84:2f:0b:48: e7:d3:75:09:05:cf:36:c9:21:34:aa:c6:77:ae:ba: 14:af:4f:ec:51:e4:82:21:fe:b2:98:cb:ee:8d:64: 3b:81:64:b3:a7:14:2f:f5:23:c2:79:ee:00:a1:67: 63:69:3a:95:68:e0:3a:cd:85:fd:c1:35:7c:7a:27: ba:57:be:db:9d:75:08:bd:58:0b:f7:87:6f:10:60: eb:0f:8a:1d:4f:a4:3f:d4:f1:56:8b:73:86:59:1f: 34:ce:b1:32:65:f8:0f:5c:54:8c:09:39:87:1c:eb: d0:45:a8:b7:a4:a3:09:82:74:e2:e3:9e:de:8d:53: d7:83:0a:92:ed:8a:c8:37:7b:9f:4c:6d:8b:45:a4: 73:66:d1:7f:f2:26:fd:7e:90:8f:8d:27:b2:da:bf: f1:42:79:31:2e:51:d5:44:e5:02:f5:98:ca:05:a8: 10:60:c6:cb:15:5b:01:8c:5d:3e:93:57:de:5e:56: 93:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6B:56:A2:1D:F7:BE:D8:B9:A7:54:D8:4F:E5:93:12:73:61:D6:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/91ae0a57-9f10-4612-8f65-c9032b41535c/0/B16B56A21DF7BED8B9A754D84FE593127361D6AB.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209058 Signature Algorithm: sha256WithRSAEncryption 87:70:d8:60:a9:bf:a1:ef:b7:cf:97:4e:c2:07:b2:5e:ab:de: 7c:03:89:eb:1a:61:5c:43:b2:2c:b5:9a:ab:e2:e4:ab:1c:2d: d1:41:47:68:52:6e:23:aa:02:2c:be:2a:9d:85:54:7d:c9:68: 0d:bb:5f:c5:96:a8:1b:95:7d:33:cb:c3:ac:99:2f:9c:d9:ad: 15:94:84:7a:dd:db:6d:33:88:af:0f:4f:75:7e:9a:33:da:79: be:7c:80:88:30:c7:c3:58:f2:b0:03:cc:b2:8e:80:98:56:a4: 32:ab:e9:7a:80:af:e6:55:f2:fd:4d:17:13:8d:49:c6:3d:06: 33:86:e6:c8:a9:87:cf:12:ea:62:54:ba:8f:a1:05:9a:2d:f0: 95:f4:ac:d9:23:ca:be:6b:9d:95:cb:18:6b:fc:7b:fd:0c:9a: 0a:3d:36:d5:bc:da:eb:25:7d:c0:58:d0:56:08:a2:42:93:98: 67:e3:c4:ff:e2:4b:00:b8:e0:c6:45:f7:2c:5c:6d:f9:24:5b: 69:36:96:63:fd:4f:19:c6:49:5e:9f:ac:87:ab:f4:4a:c1:d2: b7:17:65:47:30:aa:de:45:a8:fe:be:ee:74:79:f8:22:b2:1e: b5:7f:cf:f6:b3:77:93:66:8a:33:1a:8e:09:b3:56:b6:e0:8a: a1:8a:5e:f3 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZsYSIPHzCMag8Z249s6CNe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEzMTUxNjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTZiNTZhMjFkZjdiZWQ4YjlhNzU0ZDg0ZmU1OTMxMjczNjFkNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uwp1s5T0EvKEGO4ozE0WuvdhTlL ozAJSHK88/PEHXDpyRBmUUWmd/l/QOdHEMqMn+BGxv2pQxUrjk+mtfjaA8a+UVln 8YQvC0jn03UJBc82ySE0qsZ3rroUr0/sUeSCIf6ymMvujWQ7gWSzpxQv9SPCee4A oWdjaTqVaOA6zYX9wTV8eie6V77bnXUIvVgL94dvEGDrD4odT6Q/1PFWi3OGWR80 zrEyZfgPXFSMCTmHHOvQRai3pKMJgnTi457ejVPXgwqS7YrIN3ufTG2LRaRzZtF/ 8ib9fpCPjSey2r/xQnkxLlHVROUC9ZjKBagQYMbLFVsBjF0+k1feXlaTmQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFLFrVqId977YuadU2E/lkxJzYdarMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzkxYWUw YTU3LTlmMTAtNDYxMi04ZjY1LWM5MDMyYjQxNTM1Yy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTFh ZTBhNTctOWYxMC00NjEyLThmNjUtYzkwMzJiNDE1MzVjLzAvQjE2QjU2QTIxREY3 QkVEOEI5QTc1NEQ4NEZFNTkzMTI3MzYxRDZBQi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDMKIw DQYJKoZIhvcNAQELBQADggEBAIdw2GCpv6Hvt8+XTsIHsl6r3nwDiesaYVxDsiy1 mqvi5KscLdFBR2hSbiOqAiy+Kp2FVH3JaA27X8WWqBuVfTPLw6yZL5zZrRWUhHrd 220ziK8PT3V+mjPaeb58gIgwx8NY8rADzLKOgJhWpDKr6XqAr+ZV8v1NFxONScY9 BjOG5siph88S6mJUuo+hBZot8JX0rNkjyr5rnZXLGGv8e/0Mmgo9NtW82uslfcBY 0FYIokKTmGfjxP/iSwC44MZF9yxcbfkkW2k2lmP9TxnGSV6frIer9ErB0rcXZUcw qt5FqP6+7nR5+CKyHrV/z/azd5NmijMajgmzVrbgiqGKXvM= -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:22 2025 by rpki-client