This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TWn-EboAGxKm-9GJYpo_sYG9jJs.cer File: TWn-EboAGxKm-9GJYpo_sYG9jJs.cer (raw, json) Hash identifier: RH6V/9M4GLnx66k8NJMD1bDPYoXZSbmBAtN1qqXRhzw= Subject key identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA9A5F9D34CB231AE43665DD6A81DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200539 IP: 185.103.152.0/22 IP: 185.239.12.0/22 IP: 2a00:f240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9a:5f:9d:34:cb:23:1a:e4:36:65:dd:6a:81:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d69fe11ba001b12a6fbd189629a3fb181bd8c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:01:27:02:4d:09:04:20:1c:1e:e0:66:8f: e8:36:dd:3d:fa:5c:66:00:10:3c:0f:f5:69:b4:84: 79:70:5d:39:68:26:66:02:05:60:09:64:ca:90:9f: 4f:ae:9b:10:e6:df:b0:00:38:14:a5:cd:94:d1:ad: 40:c2:2c:67:70:fc:7c:08:54:35:bb:d7:db:cd:72: 8f:fe:02:b1:bc:6c:c0:d3:54:5b:ed:8f:38:13:72: a4:cb:96:9f:b7:14:86:7e:64:84:82:0d:39:6b:37: 4f:e1:85:47:69:73:68:b4:b1:a9:b6:40:c3:de:49: 12:18:d8:bd:6e:39:5c:86:97:0c:aa:68:4b:de:51: 4b:83:00:c1:59:c2:a3:49:b4:37:57:c5:c1:e8:34: d7:f5:98:2c:a3:6e:df:fc:db:d2:b2:84:e8:a3:8a: c5:b7:c8:29:43:f1:88:95:57:db:a9:4b:8f:5c:9c: 33:4f:0a:bd:80:f8:62:62:b8:8c:f0:cd:28:11:28: 25:4f:7e:99:05:d2:a6:10:d3:50:a0:a4:f9:47:d2: f7:ed:8b:b7:53:e3:63:7e:82:21:c8:d4:31:04:07: 9e:41:06:d6:ef:b4:d5:61:5d:cc:eb:dd:73:b3:4c: 9f:f0:42:38:7c:42:96:0b:cc:d5:bc:92:0b:71:0a: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:69:FE:11:BA:00:1B:12:A6:FB:D1:89:62:9A:3F:B1:81:BD:8C:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/326ae7-ed9f-4105-8b5d-3b68a84cd2b8/1/TWn-EboAGxKm-9GJYpo_sYG9jJs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.152.0/22 185.239.12.0/22 IPv6: 2a00:f240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200539 Signature Algorithm: sha256WithRSAEncryption 80:e5:8c:9f:f1:6d:1f:ba:93:5e:b2:e8:4c:bc:be:5a:b4:04: dd:bd:b8:52:c5:db:8d:31:6e:4b:04:52:94:f5:8a:99:85:32: 87:2f:3a:0b:44:74:1b:a5:d2:af:70:94:d6:d2:7d:3c:d8:75: 7c:e9:e1:85:ce:05:1d:2d:47:cb:51:54:86:84:e6:b3:a2:9b: 7f:44:59:2b:43:8f:c0:68:54:51:bb:03:4e:e3:15:4a:48:3b: e8:62:cc:45:6c:b4:3b:df:30:dc:ca:8c:4d:7e:a5:c7:1f:28: 73:3b:36:0a:7b:84:4c:25:9c:13:67:1a:69:5c:db:2f:8d:5c: 44:7a:60:fe:3b:68:45:a8:41:be:15:9f:d9:56:10:fc:da:c0: 94:32:a1:c2:f5:54:01:30:76:ec:91:9c:73:d2:44:19:c0:ea: 51:a5:9d:da:5a:a0:4c:4b:37:dc:8e:c3:49:00:29:ec:9b:eb: ac:12:f0:80:0e:d5:e0:41:15:79:6f:22:13:f0:73:9d:2b:25: be:28:b4:46:48:ea:af:6e:22:7e:3b:74:c2:12:ac:89:11:55: 45:b9:bf:74:92:ba:9f:cf:1c:b4:9d:75:d1:32:ca:8c:13:38: 75:c9:1f:dd:7a:2d:3d:94:1c:9f:11:9b:db:5d:41:33:89:80: 81:72:5c:e1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yppfnTTLIxrkNmXdaoHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDY5ZmUxMWJhMDAxYjEyYTZmYmQxODk2MjlhM2ZiMTgxYmQ4YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynsBJwJNCQQgHB7gZo/oNt09+lxm ABA8D/VptIR5cF05aCZmAgVgCWTKkJ9PrpsQ5t+wADgUpc2U0a1AwixncPx8CFQ1 u9fbzXKP/gKxvGzA01Rb7Y84E3Kky5aftxSGfmSEgg05azdP4YVHaXNotLGptkDD 3kkSGNi9bjlchpcMqmhL3lFLgwDBWcKjSbQ3V8XB6DTX9Zgso27f/NvSsoToo4rF t8gpQ/GIlVfbqUuPXJwzTwq9gPhiYriM8M0oESglT36ZBdKmENNQoKT5R9L37Yu3 U+NjfoIhyNQxBAeeQQbW77TVYV3M691zs0yf8EI4fEKWC8zVvJILcQrPPQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFE1p/hG6ABsSpvvRiWKaP7GBvYybMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzMyNmFl Ny1lZDlmLTQxMDUtOGI1ZC0zYjY4YTg0Y2QyYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMzI2YWU3 LWVkOWYtNDEwNS04YjVkLTNiNjhhODRjZDJiOC8xL1RXbi1FYm9BR3hLbS05R0pZ cG9fc1lHOWpKcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuWeYAwQCue8MMA0EAgACMAcDBQMqAPJAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMPWzANBgkqhkiG9w0BAQsFAAOCAQEAgOWM n/FtH7qTXrLoTLy+WrQE3b24UsXbjTFuSwRSlPWKmYUyhy86C0R0G6XSr3CU1tJ9 PNh1fOnhhc4FHS1Hy1FUhoTms6Kbf0RZK0OPwGhUUbsDTuMVSkg76GLMRWy0O98w 3MqMTX6lxx8oczs2CnuETCWcE2caaVzbL41cRHpg/jtoRahBvhWf2VYQ/NrAlDKh wvVUATB27JGcc9JEGcDqUaWd2lqgTEs33I7DSQAp7JvrrBLwgA7V4EEVeW8iE/Bz nSslvii0Rkjqr24ifjt0whKsiRFVRbm/dJK6n88ctJ110TLKjBM4dckf3XotPZQc nxGb211BM4mAgXJc4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 02:47:09 2026 by rpki-client