This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer File: t-0w6W6la5gOa3k9GobGLdXAvB8.cer (raw, json) Hash identifier: DZtLk8iVlkE20NbLPGm7Ps+7fGui6F5YrOc1mg3gjnk= Subject key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3623A6F09ABC33C5CD56D8B92D9C3F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213208 IP: 37.200.85.0/24 IP: 2a07:5200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:23:a6:f0:9a:bc:33:c5:cd:56:d8:b9:2d:9c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:35:6b:5d:56:33:19:6b:5d:df:60:4c:89: 7e:21:44:ea:f8:12:f7:6d:4a:07:ef:1b:1c:e8:84: 36:01:16:5b:67:19:1f:11:0e:82:64:a1:92:fa:a1: 6e:c2:ef:49:cc:1b:e3:49:d9:1b:fd:bb:61:a7:0a: b8:34:aa:d3:7c:6d:82:d9:2d:97:1c:3b:b5:c1:04: 78:ef:ff:aa:83:f7:7c:82:52:7d:76:c0:c2:e6:6d: 18:24:e8:b7:8a:1f:b4:78:af:21:0e:66:4d:9a:7e: 3a:4f:e3:d4:df:69:9d:9c:56:48:24:b5:8d:72:f9: 08:1f:6f:b2:60:a3:94:73:f6:69:3e:1a:dd:e2:50: 2c:b0:07:e0:b3:40:66:4d:d0:96:84:e3:fa:05:35: 84:a7:be:5d:65:42:f2:03:be:8b:e3:84:ba:83:38: db:a9:20:cb:f7:5f:bb:8b:57:78:b2:1c:eb:61:c6: 7b:89:83:41:a7:1f:e8:c5:08:c1:aa:a0:e1:23:6a: 3b:be:7c:3a:93:b2:ad:69:27:5e:76:ad:5f:ef:d6: 72:a3:cc:b0:c0:9a:ce:f9:10:95:03:dc:9e:7e:81: a4:2b:0b:ef:d2:17:c2:80:d0:8d:a0:c8:80:59:71: 08:39:fc:aa:1b:b1:60:15:b6:f8:41:f4:ce:64:ce: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.200.85.0/24 IPv6: 2a07:5200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213208 Signature Algorithm: sha256WithRSAEncryption 8c:2a:bb:0a:d0:08:7b:9c:62:17:e3:ba:b0:e5:45:ea:74:72: 1e:7e:5e:64:c5:11:4a:9a:12:89:f8:54:52:14:39:22:be:f1: 86:12:01:d0:f3:41:37:5b:16:63:46:48:ff:ad:f5:24:a1:de: 07:1e:dc:c7:82:b8:13:36:a8:97:37:4f:94:29:aa:10:d6:e7: 66:79:fd:0d:a1:9b:58:56:a1:e5:ca:78:0e:6d:07:de:75:fa: 76:b1:ae:9a:27:88:22:0b:ea:78:67:80:5d:63:c2:4c:9f:8a: b4:21:b9:40:32:8b:9e:31:21:55:cc:b5:e2:a2:7d:bc:04:9d: b5:57:0b:e8:95:96:81:90:9e:e3:32:5e:83:e0:c3:2f:11:6f: c2:a0:b1:81:a8:1f:e2:31:68:22:a0:85:e4:9a:6d:4d:ab:fe: 4a:e0:6e:81:b0:95:3e:4b:0d:13:73:d3:92:ea:dd:b4:60:eb: 82:05:86:fd:30:94:c6:cc:ab:db:46:2f:7f:45:31:e2:76:9d: a1:b7:30:57:40:cf:5c:97:85:b0:8d:e8:4a:a3:02:cb:d8:d0: bb:2e:3a:cb:3c:87:56:0f:ed:a6:9c:e6:3d:78:36:d8:dc:68: b6:8c:23:aa:f2:40:e1:3f:c9:1e:67:12:b7:e6:67:b0:79:28: c7:99:d9:71 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NiOm8Jq8M8XNVti5LZw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2VkMzBlOTZlYTU2Yjk4MGU2Yjc5M2QxYTg2YzYyZGQ1YzBiYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwo1a11WMxlrXd9gTIl+IUTq+BL3 bUoH7xsc6IQ2ARZbZxkfEQ6CZKGS+qFuwu9JzBvjSdkb/bthpwq4NKrTfG2C2S2X HDu1wQR47/+qg/d8glJ9dsDC5m0YJOi3ih+0eK8hDmZNmn46T+PU32mdnFZIJLWN cvkIH2+yYKOUc/ZpPhrd4lAssAfgs0BmTdCWhOP6BTWEp75dZULyA76L44S6gzjb qSDL91+7i1d4shzrYcZ7iYNBpx/oxQjBqqDhI2o7vnw6k7KtaSdedq1f79Zyo8yw wJrO+RCVA9yefoGkKwvv0hfCgNCNoMiAWXEIOfyqG7FgFbb4QfTOZM7UTQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLftMOlupWuYDmt5PRqGxi3VwLwfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2ZhNzlk ZC0wZmNhLTQ2NjEtODg2NC05NTU1MzdjYjY5ZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvZmE3OWRk LTBmY2EtNDY2MS04ODY0LTk1NTUzN2NiNjlmMi8xL3QtMHc2VzZsYTVnT2EzazlH b2JHTGRYQXZCOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAJchVMA0EAgACMAcDBQMqB1IAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNA2DANBgkqhkiG9w0BAQsFAAOCAQEAjCq7CtAIe5xi F+O6sOVF6nRyHn5eZMURSpoSifhUUhQ5Ir7xhhIB0PNBN1sWY0ZI/631JKHeBx7c x4K4EzaolzdPlCmqENbnZnn9DaGbWFah5cp4Dm0H3nX6drGumieIIgvqeGeAXWPC TJ+KtCG5QDKLnjEhVcy14qJ9vASdtVcL6JWWgZCe4zJeg+DDLxFvwqCxgagf4jFo IqCF5JptTav+SuBugbCVPksNE3PTkurdtGDrggWG/TCUxsyr20Yvf0Ux4nadobcw V0DPXJeFsI3oSqMCy9jQuy46yzyHVg/tppzmPXg22NxotowjqvJA4T/JHmcSt+Zn sHkox5nZcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:06 2026 by rpki-client