This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer File: T2wXG0x11lCorxdohtAjWjTlnfA.cer (raw, json) Hash identifier: oBMHVlV9uNNYxwSThKzGNQTvbS21CtCoU5lYsIdc89s= Subject key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12B171B96A036B73E7CAE0FB9CC8A8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47311 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b1:71:b9:6a:03:6b:73:e7:ca:e0:fb:9c:c8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:a7:87:8e:8d:52:6c:2b:91:ef:82:fd:a2: 6e:3f:ab:39:40:d8:8f:84:9b:15:ce:4c:03:25:a0: 32:89:b0:f4:05:17:51:e0:f3:b8:44:fd:78:b3:7d: cc:4f:46:d6:9d:14:e4:47:02:cb:f2:26:b2:85:67: eb:dd:7c:22:59:7c:5c:44:d8:59:22:9c:78:22:0a: 25:ea:9e:71:ee:09:0c:4e:3f:09:4c:3c:88:95:c1: c3:7f:b9:42:96:33:19:a0:62:ac:67:79:9b:26:34: 97:07:06:e5:b3:60:9d:40:f2:e8:cb:6f:e3:b2:50: dc:82:83:56:9c:1b:13:ee:26:64:d7:66:03:82:0f: 75:5c:4c:b8:3c:f1:87:e7:eb:eb:68:8c:59:05:98: 8f:83:2c:b4:43:3b:3a:96:48:de:8b:20:bf:dc:13: c8:12:61:c5:03:0f:5c:cb:a5:c5:64:aa:2e:43:ba: 1f:a4:54:d4:ee:54:29:9c:29:74:fe:cd:0f:9e:97: d8:06:77:1b:66:f9:de:d7:18:63:0b:5f:2f:60:5b: f4:a6:a0:76:e2:9e:65:c0:b6:fd:5c:7e:8f:d0:86: 36:ce:f7:c1:f9:5c:e8:e2:d1:e3:3b:ce:e0:9a:f7: 2e:fd:82:e5:31:e4:5d:f6:5b:67:fa:dd:62:18:7b: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 47311 Signature Algorithm: sha256WithRSAEncryption 3c:20:c3:15:5d:61:05:5e:4b:3e:9b:50:98:5a:76:43:d9:de: f6:c3:04:30:d7:55:8a:53:0f:f0:fb:89:7a:6b:ca:a2:84:0e: dd:39:0d:29:e0:7a:f0:14:1f:d9:d7:c6:a7:9c:fa:94:9b:f0: 73:b1:fb:0b:90:76:13:e6:15:6f:e0:f1:03:34:6b:0f:b3:d0: 1a:a5:11:9d:1b:9d:a9:9a:a0:89:95:4f:9a:73:54:a9:0e:86: d9:aa:c5:08:d7:46:e7:93:74:e1:10:06:08:71:65:bb:b5:dc: b8:11:a4:1c:e4:8c:0e:45:06:57:2b:31:7e:3b:70:61:16:15: 47:0a:cb:b2:2b:2f:e5:be:12:4a:61:73:37:0a:ce:83:e2:23: 43:43:d7:50:94:a5:7a:88:5c:c0:f9:3d:f4:7e:47:42:b2:b0: ac:8b:83:2b:e6:f4:f2:d8:e8:f6:37:be:21:c1:c8:96:e3:44: 7e:41:e6:b4:f2:c7:f1:a9:22:49:68:c4:6f:f8:81:b6:e8:8e: fc:ab:ef:a0:51:39:e6:fd:d9:b5:39:ca:19:bb:f9:01:b9:4d: c4:00:19:89:e5:d8:69:bc:c5:75:35:7d:24:28:c5:c7:e5:10: e1:88:ba:3b:4d:a8:29:95:89:6d:50:4e:fc:ba:b4:1c:47:95: fb:fc:95:ad -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8ErFxuWoDa3PnyuD7nMioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjZjMTcxYjRjNzVkNjUwYThhZjE3Njg4NmQwMjM1YTM0ZTU5ZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrinh46NUmwrke+C/aJuP6s5QNiP hJsVzkwDJaAyibD0BRdR4PO4RP14s33MT0bWnRTkRwLL8iayhWfr3XwiWXxcRNhZ Ipx4Igol6p5x7gkMTj8JTDyIlcHDf7lCljMZoGKsZ3mbJjSXBwbls2CdQPLoy2/j slDcgoNWnBsT7iZk12YDgg91XEy4PPGH5+vraIxZBZiPgyy0Qzs6lkjeiyC/3BPI EmHFAw9cy6XFZKouQ7ofpFTU7lQpnCl0/s0PnpfYBncbZvne1xhjC18vYFv0pqB2 4p5lwLb9XH6P0IY2zvfB+Vzo4tHjO87gmvcu/YLlMeRd9ltn+t1iGHtYhQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFE9sFxtMddZQqK8XaIbQI1o05Z3wMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2RjZjk2 OS0zODU5LTRkY2EtYWNmNC1lMmZlZGFiM2NiMDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvZGNmOTY5 LTM4NTktNGRjYS1hY2Y0LWUyZmVkYWIzY2IwOS8xL1Qyd1hHMHgxMWxDb3J4ZG9o dEFqV2pUbG5mQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC4zzANBgkqhkiG9w0BAQsFAAOCAQEAPCDDFV1hBV5L PptQmFp2Q9ne9sMEMNdVilMP8PuJemvKooQO3TkNKeB68BQf2dfGp5z6lJvwc7H7 C5B2E+YVb+DxAzRrD7PQGqURnRudqZqgiZVPmnNUqQ6G2arFCNdG55N04RAGCHFl u7XcuBGkHOSMDkUGVysxfjtwYRYVRwrLsisv5b4SSmFzNwrOg+IjQ0PXUJSleohc wPk99H5HQrKwrIuDK+b08tjo9je+IcHIluNEfkHmtPLH8akiSWjEb/iBtuiO/Kvv oFE55v3ZtTnKGbv5AblNxAAZieXYabzFdTV9JCjFx+UQ4Yi6O02oKZWJbVBO/Lq0 HEeV+/yVrQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:50 2026 by rpki-client