This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer (raw, json) Hash identifier: jS/8qO41FsY60ztYG8DGQnwXH6c7QPKHQdrbwrPJUi0= Subject key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6DB6D55D7F172C51B5196C3D85248 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51625 IP: 46.31.112.0/21 IP: 185.204.232.0/22 IP: 2a04:10c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:db:6d:55:d7:f1:72:c5:1b:51:96:c3:d8:52:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e7:6a:6d:6f:af:d2:b7:37:48:39:2f:bb:4f: da:41:d8:ce:03:6b:73:0e:28:30:8e:a0:b2:3a:d9: fc:47:f1:b3:87:c8:6a:69:1e:8f:57:dc:30:b2:4a: 94:02:09:4e:79:6b:1b:78:2e:92:bf:8a:20:3c:1a: 32:d3:5e:71:48:b6:96:74:1b:63:3e:06:fc:3a:4f: c7:63:d2:7e:09:ac:fb:1d:f3:b9:c6:b7:3c:da:97: 98:11:11:b4:cb:02:5d:cf:e5:c6:0d:cb:86:bc:1e: 4d:2c:bc:08:29:b5:ad:56:c8:e7:5d:57:87:b9:7e: 6e:e3:5f:8f:1e:e1:95:3c:df:09:ab:6f:2d:7c:aa: e1:ad:b3:d1:63:01:e5:67:90:08:f1:6c:be:51:d0: f0:c8:32:be:66:c5:e8:6e:7a:38:fc:57:1b:8d:63: 88:44:a3:7b:d0:87:44:a6:47:34:f2:3c:da:7f:39: bd:95:75:d2:c7:28:b4:92:92:a4:d7:dd:8b:09:c8: 45:b6:af:52:4a:93:58:1d:05:ca:b1:bf:f8:b8:39: 35:e2:27:6c:70:4a:27:cb:f1:53:90:19:1c:8c:26: 96:38:3d:79:57:2d:bb:e3:2e:fb:03:77:47:bd:3b: 57:10:e3:d8:9a:0e:f3:2b:b5:cb:b3:a1:03:65:2f: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.112.0/21 185.204.232.0/22 IPv6: 2a04:10c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51625 Signature Algorithm: sha256WithRSAEncryption 5d:27:ab:ac:de:73:b2:de:60:36:ec:70:47:d5:0b:8e:b8:fd: 25:8b:d1:56:bb:bb:55:9d:0e:a7:08:03:5b:60:07:44:d7:75: 04:4b:e4:15:ec:68:d4:08:db:77:89:e5:f6:e5:9b:79:a0:9c: fb:5a:a9:f4:5f:f7:5e:66:63:64:3b:0c:da:ee:19:ec:5e:40: fa:e3:72:39:42:cf:2b:78:7f:80:21:19:58:b3:37:b7:f7:a7: 95:45:9a:6d:64:49:db:a7:d7:9e:2d:88:77:d6:9a:62:81:2a: c4:57:4b:ea:75:98:e8:06:68:1a:08:d9:4e:74:91:92:80:8a: 5b:f6:7d:5e:f7:55:31:85:89:ea:4a:52:40:e2:cf:b2:3c:d8: 49:27:18:03:87:7c:09:46:21:9f:8d:d8:3d:b7:90:90:d8:d0: c4:eb:0a:64:e2:37:cc:74:20:2d:10:29:90:fc:2c:f1:f3:97: 69:df:b7:c7:82:d9:a2:03:9e:61:5d:5e:77:23:0f:b4:e2:a0: ca:e8:e1:e3:65:a3:c9:d1:de:08:38:98:a8:c8:a0:e8:24:1b: 21:f0:cf:7e:06:cd:62:82:a2:82:cb:c9:88:f7:30:81:44:5b: d6:44:c6:4b:4b:e5:a2:00:f0:4e:dd:08:6b:55:a5:06:ef:80: 7f:08:12:59 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xtttVdfxcsUbUZbD2FJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTZhOGM5MWFkMzE3NDVmZjcyN2RhMDQ4MmVkZTFiMmZhYjQ2MmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOdqbW+v0rc3SDkvu0/aQdjOA2tz DigwjqCyOtn8R/Gzh8hqaR6PV9wwskqUAglOeWsbeC6Sv4ogPBoy015xSLaWdBtj Pgb8Ok/HY9J+Caz7HfO5xrc82peYERG0ywJdz+XGDcuGvB5NLLwIKbWtVsjnXVeH uX5u41+PHuGVPN8Jq28tfKrhrbPRYwHlZ5AI8Wy+UdDwyDK+ZsXobno4/FcbjWOI RKN70IdEpkc08jzafzm9lXXSxyi0kpKk192LCchFtq9SSpNYHQXKsb/4uDk14ids cEony/FTkBkcjCaWOD15Vy274y77A3dHvTtXEOPYmg7zK7XLs6EDZS8OLwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLVqjJGtMXRf9yfaBILt4bL6tGLnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzM1ZmYz Mi1hNjg3LTRmNTAtOTY5YS05ODY0ODkwMTY4OGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvMzVmZjMy LWE2ODctNGY1MC05NjlhLTk4NjQ4OTAxNjg4Zi8xL3RXcU1rYTB4ZEZfM0o5b0Vn dTNoc3ZxMFl1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLh9wAwQCuczoMA0EAgACMAcDBQMqBBDAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDJqTANBgkqhkiG9w0BAQsFAAOCAQEAXSer rN5zst5gNuxwR9ULjrj9JYvRVru7VZ0OpwgDW2AHRNd1BEvkFexo1Ajbd4nl9uWb eaCc+1qp9F/3XmZjZDsM2u4Z7F5A+uNyOULPK3h/gCEZWLM3t/enlUWabWRJ26fX ni2Id9aaYoEqxFdL6nWY6AZoGgjZTnSRkoCKW/Z9XvdVMYWJ6kpSQOLPsjzYSScY A4d8CUYhn43YPbeQkNjQxOsKZOI3zHQgLRApkPws8fOXad+3x4LZogOeYV1edyMP tOKgyujh42WjydHeCDiYqMig6CQbIfDPfgbNYoKigsvJiPcwgURb1kTGS0vlogDw Tt0Ia1WlBu+AfwgSWQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:16 2026 by rpki-client