This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer File: tW-ivPsboZnQpll_uIlUwKbFEtU.cer (raw, json) Hash identifier: fRQasfFMvjgd6q4CvUpLy7VfXVPujat/euXgpnijrL8= Subject key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECAD67A1710BC27B96DE4356188895 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.11.32.0/22 IP: 2a0e:5d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ad:67:a1:71:0b:c2:7b:96:de:43:56:18:88:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ac:58:ff:a6:3e:5a:d8:b8:fa:3f:d9:05:45: 85:db:a7:86:ca:79:23:f6:17:1a:d8:60:cb:b1:e7: 51:78:7b:2b:e1:67:38:87:d6:0c:22:e3:9f:ad:81: 1b:ab:ef:4d:ab:ee:05:6f:99:ef:f3:78:84:3b:91: b2:b2:86:d4:43:00:10:46:84:ae:b2:89:ad:68:ca: ad:a2:b5:ff:4a:c2:6e:a5:52:9c:b8:e9:1e:72:31: 86:0b:3a:35:98:b2:ee:f9:94:85:d3:7e:54:0e:d8: f9:f0:d1:68:3a:51:93:6d:8e:70:34:34:b2:5a:b1: c9:0e:e4:33:22:93:0c:fe:f2:94:19:5f:dd:f5:c8: 57:ad:f2:c4:0c:27:74:52:87:39:0c:bc:6b:80:1e: 8e:0c:a6:d5:60:e9:7a:e8:d7:fe:84:73:7e:d8:9e: c7:b1:eb:fb:56:86:33:63:4f:8f:88:0c:71:19:1d: 4f:bd:b7:68:69:b9:98:09:2a:54:c1:a5:45:01:36: fe:be:75:f9:53:58:8f:7d:9b:29:11:99:df:84:8c: 61:80:a0:a0:c0:f1:17:00:7b:6b:73:8e:0f:98:d2: dd:f3:c4:00:7c:ae:e9:81:1c:d7:d5:a2:22:3c:84: 75:43:cd:81:52:12:34:4b:23:1f:da:3f:e0:2b:1c: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.32.0/22 IPv6: 2a0e:5d00::/29 Signature Algorithm: sha256WithRSAEncryption a0:58:7e:5b:d5:53:0a:67:ae:54:1c:d1:91:32:64:2f:63:8a: 64:d1:ec:36:af:06:6f:48:4f:b1:7f:e4:f6:fc:11:b6:d5:f8: e3:b5:4f:7f:63:2d:20:23:e1:a8:e1:3c:fb:04:01:77:bc:67: e7:2b:69:4b:1a:16:3d:58:49:0b:a9:31:9e:f4:15:99:34:92: 46:5c:69:b2:b0:bf:4f:98:c8:9f:ed:2c:a1:27:39:22:05:d8: ec:a0:ca:be:92:50:33:1b:04:37:3d:7b:9b:86:57:d9:e2:74: 19:36:76:99:fc:9a:46:bf:aa:8d:2e:ae:62:a5:e1:e4:02:a5: 3b:db:69:6f:de:56:54:4f:5f:6b:9d:53:85:5b:3b:54:cd:a0: e8:5d:32:2c:0b:f4:45:b2:99:bc:6c:a4:23:94:35:2f:e0:46: 77:32:de:53:b3:94:ba:48:eb:03:00:8b:3f:61:11:c4:68:3f: c6:cd:69:ca:1c:11:68:06:34:1f:72:13:4b:b4:ce:66:9c:02: 7e:5c:e3:1b:2f:18:84:7c:1d:2e:6b:73:a9:8e:77:22:87:d4: b6:ca:9a:36:5c:1c:86:70:60:e4:fb:1e:a1:82:3f:37:88:34: a9:77:69:f3:e8:e9:52:16:bd:b6:0d:70:c7:1b:2a:61:c0:15: 43:d4:dc:d7 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57K1noXELwnuW3kNWGIiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTZmYTJiY2ZiMWJhMTk5ZDBhNjU5N2ZiODg5NTRjMGE2YzUxMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraxY/6Y+Wti4+j/ZBUWF26eGynkj 9hca2GDLsedReHsr4Wc4h9YMIuOfrYEbq+9Nq+4Fb5nv83iEO5GysobUQwAQRoSu somtaMqtorX/SsJupVKcuOkecjGGCzo1mLLu+ZSF035UDtj58NFoOlGTbY5wNDSy WrHJDuQzIpMM/vKUGV/d9chXrfLEDCd0Uoc5DLxrgB6ODKbVYOl66Nf+hHN+2J7H sev7VoYzY0+PiAxxGR1PvbdoabmYCSpUwaVFATb+vnX5U1iPfZspEZnfhIxhgKCg wPEXAHtrc44PmNLd88QAfK7pgRzX1aIiPIR1Q82BUhI0SyMf2j/gKxy2BQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLVvorz7G6GZ0KZZf7iJVMCmxRLVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzgxNDZk OC0zMWIwLTQwMjItYWY3ZS1mYTViMjE5OWE3MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvODE0NmQ4 LTMxYjAtNDAyMi1hZjdlLWZhNWIyMTk5YTczOS8xL3RXLWl2UHNib1puUXBsbF91 SWxVd0tiRkV0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQsgMA0EAgACMAcDBQMqDl0AMA0GCSqGSIb3 DQEBCwUAA4IBAQCgWH5b1VMKZ65UHNGRMmQvY4pk0ew2rwZvSE+xf+T2/BG21fjj tU9/Yy0gI+Go4Tz7BAF3vGfnK2lLGhY9WEkLqTGe9BWZNJJGXGmysL9PmMif7Syh JzkiBdjsoMq+klAzGwQ3PXubhlfZ4nQZNnaZ/JpGv6qNLq5ipeHkAqU722lv3lZU T19rnVOFWztUzaDoXTIsC/RFspm8bKQjlDUv4EZ3Mt5Ts5S6SOsDAIs/YRHEaD/G zWnKHBFoBjQfchNLtM5mnAJ+XOMbLxiEfB0ua3Opjncih9S2ypo2XByGcGDk+x6h gj83iDSpd2nz6OlSFr22DXDHGyphwBVD1NzX -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:05 2026 by rpki-client