This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer File: w-twdDgV_kRclYo8URfvJ1PTD34.cer (raw, json) Hash identifier: 9wAsZgycFbQkK7LbB/ZVpXkVRO4bDJhYSxvn3sYOXiw= Subject key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2A1DD82691643D6418947EFC51CBE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198297 IP: 185.86.132.0/22 IP: 2a03:7620::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a1:dd:82:69:16:43:d6:41:89:47:ef:c5:1c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:34:79:be:8c:bb:33:8c:f3:29:97:88:65: aa:96:90:b2:3e:12:93:2f:53:ca:a5:61:37:45:bf: 7d:da:19:69:0b:79:92:9d:54:90:8f:b5:1e:4e:ed: d2:1e:a0:06:99:72:19:bc:33:86:72:79:0d:0b:81: f6:aa:c1:d4:ea:ef:35:8c:ee:2c:8a:ec:09:7b:14: 6e:cd:63:97:09:f4:fd:5d:53:37:cb:01:50:a7:6d: 3f:8b:8f:aa:b1:5e:cf:7c:f2:a6:4b:df:d7:12:17: 50:c9:ac:cf:bc:a2:35:7d:82:2b:0a:e0:4c:0e:6a: 28:d8:e0:79:34:3a:c0:08:a4:d4:79:4f:13:57:5d: c4:4b:1b:13:ea:2d:8c:78:cc:a2:f0:d7:b9:75:2c: 52:25:b4:db:bd:51:8e:e1:a1:53:45:3d:15:c7:41: 1b:3b:22:fe:57:1e:96:de:d6:c2:f8:71:6a:b7:05: 83:28:c3:7d:a3:39:12:11:d3:60:34:d2:15:26:cf: ae:9f:aa:c9:a1:e8:10:54:cf:58:a8:ca:c8:7c:d8: c3:6a:3a:98:75:33:23:c6:db:7e:7e:11:5d:f7:bb: 07:2a:84:cc:97:4c:c8:98:c5:a8:70:16:76:45:aa: af:65:b8:a0:f1:5a:cf:35:fd:15:00:df:16:d1:73: 4f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.132.0/22 IPv6: 2a03:7620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198297 Signature Algorithm: sha256WithRSAEncryption 5b:3f:33:37:cc:06:af:a9:c7:7a:34:14:30:67:fb:9b:2e:84: 57:7d:51:4b:ed:02:28:0c:54:75:de:b2:b9:7c:69:7f:32:2f: 85:ab:0b:a2:6b:7d:1c:4a:42:aa:5d:f5:08:35:3a:d3:84:cd: 1f:25:db:7b:ec:7d:6f:73:3e:a1:5d:bb:f7:67:16:a7:19:6d: 07:d4:54:ba:08:80:32:c5:fb:dc:a5:e8:df:a7:9c:a8:de:5a: dc:25:ec:b4:00:fe:d2:f1:a0:bb:fa:b7:f6:3c:17:5a:a2:c2: 0f:94:21:7f:da:b0:14:ad:8e:6f:28:c5:fc:99:85:18:b0:3e: 02:42:0d:0a:da:8b:7e:47:7e:9d:c2:99:8d:bd:7c:c7:83:f8: 62:5c:51:e5:b4:35:a1:27:18:4a:f3:b0:c8:be:8a:2f:f8:89: c7:82:9c:2e:50:a0:1b:90:6d:cb:36:21:aa:fc:ca:3a:3d:9d: fb:75:f0:2b:e3:53:78:97:c1:d1:4a:34:ce:c5:c8:e6:51:e8: 0d:a6:25:71:2f:3d:44:ba:67:cd:0f:27:1d:5f:7e:e8:ed:f2: 5c:bf:10:32:4a:99:20:1f:0d:18:ee:aa:2e:e9:ef:14:72:f3: de:30:a5:c7:39:e7:d5:dc:cb:f0:f5:43:f0:76:d0:eb:77:0e: 00:bc:f3:1a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8qHdgmkWQ9ZBiUfvxRy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2ViNzA3NDM4MTVmZTQ0NWM5NThhM2M1MTE3ZWYyNzUzZDMwZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE80eb6MuzOM8ymXiGWqlpCyPhKT L1PKpWE3Rb992hlpC3mSnVSQj7UeTu3SHqAGmXIZvDOGcnkNC4H2qsHU6u81jO4s iuwJexRuzWOXCfT9XVM3ywFQp20/i4+qsV7PfPKmS9/XEhdQyazPvKI1fYIrCuBM Dmoo2OB5NDrACKTUeU8TV13ESxsT6i2MeMyi8Ne5dSxSJbTbvVGO4aFTRT0Vx0Eb OyL+Vx6W3tbC+HFqtwWDKMN9ozkSEdNgNNIVJs+un6rJoegQVM9YqMrIfNjDajqY dTMjxtt+fhFd97sHKoTMl0zImMWocBZ2RaqvZbig8VrPNf0VAN8W0XNP/QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMPrcHQ4Ff5EXJWKPFEX7ydT0w9+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzEzNzU0 Yy04YmU3LTQ2MGUtODUwNy0xMzU3NWVmNzI5ZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvMTM3NTRj LThiZTctNDYwZS04NTA3LTEzNTc1ZWY3MjlmMy8xL3ctdHdkRGdWX2tSY2xZbzhV UmZ2SjFQVEQzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVaEMA0EAgACMAcDBQAqA3YgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMGmTANBgkqhkiG9w0BAQsFAAOCAQEAWz8zN8wGr6nH ejQUMGf7my6EV31RS+0CKAxUdd6yuXxpfzIvhasLomt9HEpCql31CDU604TNHyXb e+x9b3M+oV2792cWpxltB9RUugiAMsX73KXo36ecqN5a3CXstAD+0vGgu/q39jwX WqLCD5Qhf9qwFK2ObyjF/JmFGLA+AkINCtqLfkd+ncKZjb18x4P4YlxR5bQ1oScY SvOwyL6KL/iJx4KcLlCgG5BtyzYhqvzKOj2d+3XwK+NTeJfB0Uo0zsXI5lHoDaYl cS89RLpnzQ8nHV9+6O3yXL8QMkqZIB8NGO6qLunvFHLz3jClxznn1dzL8PVD8HbQ 63cOALzzGg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:37 2026 by rpki-client