This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer File: SwGwhRt_iepLsTKn9TlbnSrKHAI.cer (raw, json) Hash identifier: jSjJJDMF48/Lj5BdRc7ivLLybnxpAPb1JX13TYN/WBM= Subject key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B939B68B57E74FB5E4C94519922A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207605 IP: 62.164.170.0/24 IP: 109.237.76.0/23 IP: 176.119.205.0/24 IP: 193.143.68.0/24 IP: 195.189.140.0/23 IP: 195.225.46.0/23 IP: 2a05:4500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:93:9b:68:b5:7e:74:fb:5e:4c:94:51:99:22:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:61:18:20:1e:9f:a1:d4:ec:6b:e0:52:62: 82:0e:32:29:5a:ea:83:9c:30:ec:a2:98:0d:5a:24: 05:8f:44:7d:5d:13:ff:98:f2:31:58:48:11:b5:23: 24:71:3e:8b:7b:a2:f4:c5:1d:17:9a:0d:01:be:10: d3:07:a9:ea:fb:79:ab:27:de:39:c1:03:d0:3f:de: 9c:47:05:35:87:33:51:91:d4:7e:2f:6a:56:dd:eb: 92:74:8d:f1:b5:5c:4f:57:0f:95:a1:9f:cf:37:a8: 3e:8d:1c:01:dd:25:3a:1c:d4:a4:c6:24:aa:ce:15: bd:d1:01:a3:04:96:72:52:48:56:87:a5:f5:58:5c: a5:54:11:d1:d7:6a:7b:63:51:8e:10:75:06:44:73: 6e:21:ee:aa:d4:37:3f:9d:66:b6:3b:fb:42:b9:17: b7:b1:8e:cf:4a:cf:d5:4c:ff:15:6e:70:be:a3:d4: 31:37:60:87:04:a7:4a:db:11:09:a1:ca:96:ed:48: 3f:c1:ac:d2:9b:ce:bd:9f:25:22:48:a3:e7:e2:d9: 61:da:99:a7:bd:c2:66:e7:15:92:e5:1a:46:4a:59: 1b:92:09:c9:de:4b:9e:32:74:9e:f3:91:66:1d:37: 46:08:4d:d5:19:4e:8b:67:4b:2c:4d:49:1e:52:16: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.170.0/24 109.237.76.0/23 176.119.205.0/24 193.143.68.0/24 195.189.140.0/23 195.225.46.0/23 IPv6: 2a05:4500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207605 Signature Algorithm: sha256WithRSAEncryption 29:9c:c2:63:85:ce:06:e7:47:ac:40:f6:61:d7:b3:4d:18:dc: 32:85:b7:0f:a7:13:42:6a:9f:e9:ae:e4:17:51:49:f4:87:49: 02:34:d2:30:3a:29:c6:e6:03:30:67:50:98:7e:7b:1d:d4:57: ca:d3:09:93:b8:4e:ed:35:b6:da:c5:51:34:ec:d6:86:55:2a: 70:f9:ec:8f:98:8c:ed:86:cd:ff:8f:3e:a6:02:2c:46:16:b0: 33:c6:c1:7e:95:04:3a:ca:24:d8:02:cd:f3:c0:fb:2b:37:e0: fc:18:8f:72:00:31:3d:32:70:d5:8c:5f:d7:b6:0e:51:83:d7: d9:a8:46:dd:35:d4:57:af:22:f3:f8:a1:78:04:55:5c:c1:c0: c6:56:89:87:e5:2d:b0:a7:35:ab:c6:27:dd:21:44:56:d9:e5: 1a:b8:42:55:ae:9e:35:d3:70:41:6d:40:3d:bf:7c:88:1e:78: b3:3c:42:83:d0:f5:87:17:66:26:f6:d3:cb:e6:42:5a:ce:fa: 31:8f:20:8a:f3:01:86:3c:4c:64:f5:59:57:a9:2c:4d:81:a5: 9b:e0:f9:1a:1c:f6:18:e7:9c:1c:3b:4e:a8:a3:de:50:be:7b: 6a:7a:be:f2:31:f9:98:2a:dc:d3:7d:02:f6:f3:99:c7:53:7e: 4a:e6:0c:6c -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt9W5ObaLV+dPteTJRRmSKlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjAxYjA4NTFiN2Y4OWVhNGJiMTMyYTdmNTM5NWI5ZDJhY2ExYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC9hGCAen6HU7GvgUmKCDjIpWuqD nDDsopgNWiQFj0R9XRP/mPIxWEgRtSMkcT6Le6L0xR0Xmg0BvhDTB6nq+3mrJ945 wQPQP96cRwU1hzNRkdR+L2pW3euSdI3xtVxPVw+VoZ/PN6g+jRwB3SU6HNSkxiSq zhW90QGjBJZyUkhWh6X1WFylVBHR12p7Y1GOEHUGRHNuIe6q1Dc/nWa2O/tCuRe3 sY7PSs/VTP8VbnC+o9QxN2CHBKdK2xEJocqW7Ug/wazSm869nyUiSKPn4tlh2pmn vcJm5xWS5RpGSlkbkgnJ3kueMnSe85FmHTdGCE3VGU6LZ0ssTUkeUhb7eQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFEsBsIUbf4nqS7Eyp/U5W50qyhwCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JmL2NiOWQ3 Zi1hZmRmLTQ0ODctOWUwOC1iZDUwNDNjMGQxZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYvY2I5ZDdm LWFmZGYtNDQ4Ny05ZTA4LWJkNTA0M2MwZDFmYi8xL1N3R3doUnRfaWVwTHNUS245 VGxiblNyS0hBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAPqSqAwQBbe1MAwQAsHfNAwQAwY9EAwQBw72M AwQBw+EuMA0EAgACMAcDBQMqBUUAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMq 9TANBgkqhkiG9w0BAQsFAAOCAQEAKZzCY4XOBudHrED2YdezTRjcMoW3D6cTQmqf 6a7kF1FJ9IdJAjTSMDopxuYDMGdQmH57HdRXytMJk7hO7TW22sVRNOzWhlUqcPns j5iM7YbN/48+pgIsRhawM8bBfpUEOsok2ALN88D7Kzfg/BiPcgAxPTJw1Yxf17YO UYPX2ahG3TXUV68i8/iheARVXMHAxlaJh+UtsKc1q8Yn3SFEVtnlGrhCVa6eNdNw QW1APb98iB54szxCg9D1hxdmJvbTy+ZCWs76MY8givMBhjxMZPVZV6ksTYGlm+D5 Ghz2GOecHDtOqKPeUL57anq+8jH5mCrc030C9vOZx1N+SuYMbA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:02 2026 by rpki-client