This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer (raw, json) Hash identifier: ///uJ0D4NWnBy7hn0qhjO++3k07bg0wzBb7pcMwOn/k= Subject key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBAFD742D8B2E9071B6F54C97D4156 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203913 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:af:d7:42:d8:b2:e9:07:1b:6f:54:c9:7d:41:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b56b5b54decf43e964f4be6d304e480a386cb794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:ba:33:68:1a:50:e1:2d:a9:87:6e:27:20: 2a:06:9e:a3:f3:d5:76:ed:43:e1:eb:7b:26:69:c9: 5e:d5:85:99:29:da:f0:10:b9:ab:cc:73:30:8d:8c: d3:08:f5:3d:1f:b6:6a:6a:71:cc:72:b0:d6:b8:80: 88:8a:91:39:88:0a:be:c8:8b:42:67:db:6b:d1:c2: d8:c3:a8:fa:e9:61:16:6f:e4:2a:6b:35:47:e2:04: de:fe:19:61:d7:d3:dc:33:b3:1f:6d:55:51:87:b0: 31:13:f1:ba:6a:b0:40:84:a1:81:18:e8:e1:1a:27: ad:7a:eb:5a:f5:35:19:7a:87:d8:e2:56:c0:f7:c4: b4:9c:ea:ef:53:86:4d:44:3f:7b:55:d7:8d:4b:c2: c4:71:4c:5e:13:fd:06:93:e9:d9:f8:71:43:63:1d: a8:61:88:b0:9b:10:17:5f:05:29:55:26:95:55:58: fe:02:c1:51:09:0a:c5:d5:32:ef:5b:bd:63:47:2c: 1b:fa:44:fe:59:90:da:ad:cb:52:dc:d9:15:ae:9f: 17:2a:09:29:81:17:83:2b:cb:8e:0a:cb:86:19:06: 9e:51:01:b6:84:f4:7c:bb:3e:e9:bc:2f:a6:36:eb: 03:52:3d:c6:0a:fa:ad:88:0e:a0:5b:5d:e9:1b:cf: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203913 Signature Algorithm: sha256WithRSAEncryption 41:e9:8a:68:f5:57:b2:4e:f2:24:1f:46:ab:22:d7:18:1f:6f: 6e:22:9d:f0:d7:06:76:b3:a1:bf:87:99:5a:a7:0c:11:4d:46: d2:15:40:88:49:97:5f:a6:41:34:dc:bb:dc:a2:88:2f:c8:86: 92:54:09:d7:6f:f8:26:1a:6b:20:9e:2d:83:c7:0b:b9:84:4a: 85:0b:47:15:07:2e:a2:ee:c3:f7:45:71:95:5d:d3:5a:2d:ce: de:8b:0a:2f:83:a6:81:09:df:2a:6d:9a:d4:a3:fe:5d:0d:14: c0:82:b5:43:70:13:b5:80:c9:3a:f6:73:83:75:57:05:be:27: 84:04:79:af:7a:0b:3d:3e:85:d7:48:f3:df:6f:a3:3b:85:0b: e2:d3:ab:7d:38:24:64:16:9b:1d:20:27:4d:92:e6:1b:70:0e: a8:65:3b:18:6c:b3:13:92:1d:42:8a:81:f0:fe:e6:32:e0:6c: 00:3c:8c:c8:b7:32:85:e9:e7:bf:f0:3f:04:10:b4:48:8b:95: ab:5f:0f:60:c6:e0:b2:15:48:ae:be:57:97:90:32:80:73:4f: be:6d:fb:35:5b:49:e2:df:96:eb:93:8d:15:c5:8f:fe:8b:f9: de:23:bb:57:14:8d:dd:17:1a:7a:7c:12:64:5b:62:53:42:65: da:4f:57:1e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt566/XQtiy6Qcbb1TJfUFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTZiNWI1NGRlY2Y0M2U5NjRmNGJlNmQzMDRlNDgwYTM4NmNiNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsly6M2gaUOEtqYduJyAqBp6j89V2 7UPh63smacle1YWZKdrwELmrzHMwjYzTCPU9H7ZqanHMcrDWuICIipE5iAq+yItC Z9tr0cLYw6j66WEWb+QqazVH4gTe/hlh19PcM7MfbVVRh7AxE/G6arBAhKGBGOjh Gieteuta9TUZeofY4lbA98S0nOrvU4ZNRD97VdeNS8LEcUxeE/0Gk+nZ+HFDYx2o YYiwmxAXXwUpVSaVVVj+AsFRCQrF1TLvW71jRywb+kT+WZDarctS3NkVrp8XKgkp gReDK8uOCsuGGQaeUQG2hPR8uz7pvC+mNusDUj3GCvqtiA6gW13pG89TbwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLVrW1Tez0PpZPS+bTBOSAo4bLeUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzg3NGU4 YS0zYTE2LTRmNWItOGYxOS0zN2FkMGVlYmUxOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvODc0ZThh LTNhMTYtNGY1Yi04ZjE5LTM3YWQwZWViZTE5Yi8xL3RXdGJWTjdQUS1sazlMNXRN RTVJQ2poc3Q1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMciTANBgkqhkiG9w0BAQsFAAOCAQEAQemKaPVXsk7y JB9GqyLXGB9vbiKd8NcGdrOhv4eZWqcMEU1G0hVAiEmXX6ZBNNy73KKIL8iGklQJ 12/4JhprIJ4tg8cLuYRKhQtHFQcuou7D90VxlV3TWi3O3osKL4OmgQnfKm2a1KP+ XQ0UwIK1Q3ATtYDJOvZzg3VXBb4nhAR5r3oLPT6F10jz32+jO4UL4tOrfTgkZBab HSAnTZLmG3AOqGU7GGyzE5IdQoqB8P7mMuBsADyMyLcyhennv/A/BBC0SIuVq18P YMbgshVIrr5Xl5AygHNPvm37NVtJ4t+W65ONFcWP/ov53iO7VxSN3RcaenwSZFti U0Jl2k9XHg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:37 2026 by rpki-client