This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer File: Tw532cb_aNymjwXfj0Z17nvcsLw.cer (raw, json) Hash identifier: ERJTUPYGmESgrkYZGf8C9KHci5bibPZMS44ateUXHCA= Subject key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC9350E08C6588C0E33B6DE9EA5B019 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20912 AS: 35131 AS: 206207 IP: 45.145.24.0/22 IP: 77.39.192.0/20 IP: 77.39.216.0/22 IP: 85.119.176.0/21 IP: 185.109.188.0/22 IP: 185.190.208.0/22 IP: 212.66.96.0/19 IP: 2001:40d0::/32 IP: 2a0a:d40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:35:0e:08:c6:58:8c:0e:33:b6:de:9e:a5:b0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:27:50:72:47:b4:1a:4f:0b:06:ae:13:57: 24:02:62:7d:37:f8:a1:b8:1c:08:eb:0f:c2:be:fd: ce:8b:f9:b6:90:30:a4:b6:8e:70:7b:0d:59:f3:7b: 2c:b5:57:d8:d7:db:9f:9f:52:bc:3f:b8:8f:b3:ae: 6a:cd:5e:c0:12:65:a2:90:38:85:67:88:e5:17:81: 6a:3d:40:e5:1a:83:1e:72:e7:01:1b:05:2c:cf:51: d7:63:b9:bf:66:25:46:27:29:23:28:fb:6d:be:ae: 8b:50:4f:01:10:75:46:7b:52:3c:2b:fe:9d:fd:b8: 25:ba:59:69:7e:98:da:ef:a5:ad:e9:54:c1:b8:d5: 18:7d:34:f8:b9:42:ff:f2:30:7f:b4:f3:8c:66:45: 62:85:cb:49:f0:62:c3:f4:95:b4:65:fc:a8:99:13: 8d:85:e6:a4:91:1c:04:b5:3d:44:33:06:1a:2e:c5: 83:da:b0:57:b4:7d:ed:c3:5b:16:fe:c5:20:29:21: 12:d6:d1:9d:58:22:c0:e4:d3:8b:12:46:38:c7:b5: c9:20:d2:bc:76:c0:4c:c1:26:c1:4d:36:cb:cd:a3: 0e:83:a2:64:f9:f9:5f:15:89:2d:9f:a2:bb:2b:0a: 03:9e:f6:a5:04:24:dc:03:c4:ca:06:ee:a2:fa:3a: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.24.0/22 77.39.192.0/20 77.39.216.0/22 85.119.176.0/21 185.109.188.0/22 185.190.208.0/22 212.66.96.0/19 IPv6: 2001:40d0::/32 2a0a:d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20912 35131 206207 Signature Algorithm: sha256WithRSAEncryption 40:82:bc:2d:e1:4d:31:2b:bd:75:a0:91:a4:56:69:d4:61:f0: 3b:94:8c:d1:69:ed:b8:c1:7c:ff:11:5e:b3:61:3a:0e:ad:0d: f5:5d:83:c1:f9:bd:48:6c:ab:34:4c:d7:cf:25:9b:f2:81:bc: 15:42:00:15:ba:87:c6:c4:eb:76:9c:f1:78:28:b1:72:68:51: 55:2f:32:e3:9a:95:da:c4:8c:f7:f2:d6:53:fb:2d:b3:df:92: c1:35:8b:db:f4:b3:91:4c:60:2f:e6:01:c3:38:4c:cf:5f:a5: 10:da:4f:01:69:41:1c:a3:fb:68:32:30:33:b6:2a:c0:c5:86: aa:38:08:f2:50:d1:7d:65:97:cd:68:d8:23:11:17:49:df:b3: b2:df:a4:70:16:5b:36:a6:c3:f5:0c:fb:fd:c0:2b:b1:a9:4d: f5:8d:6c:29:f4:e5:3b:0c:12:f8:23:36:3c:68:05:eb:3c:78: c0:f9:20:89:ee:11:77:f6:e7:c5:58:33:3e:1b:46:bf:a3:c1: 1d:58:6b:7c:f7:d4:0c:c0:28:dc:95:56:9c:3a:ac:b4:cf:8f: cc:50:53:c2:51:b0:b3:93:ff:67:ab:82:1e:3c:74:f7:4d:1e: 96:cb:29:81:12:a8:24:bd:81:83:95:51:0b:6d:96:a1:69:e0: f0:c8:9b:77 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt6yTUOCMZYjA4ztt6epbAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjBlNzdkOWM2ZmY2OGRjYTY4ZjA1ZGY4ZjQ2NzVlZTdiZGNiMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygUnUHJHtBpPCwauE1ckAmJ9N/ih uBwI6w/Cvv3Oi/m2kDCkto5wew1Z83sstVfY19ufn1K8P7iPs65qzV7AEmWikDiF Z4jlF4FqPUDlGoMecucBGwUsz1HXY7m/ZiVGJykjKPttvq6LUE8BEHVGe1I8K/6d /bglullpfpja76Wt6VTBuNUYfTT4uUL/8jB/tPOMZkVihctJ8GLD9JW0ZfyomRON heakkRwEtT1EMwYaLsWD2rBXtH3tw1sW/sUgKSES1tGdWCLA5NOLEkY4x7XJINK8 dsBMwSbBTTbLzaMOg6Jk+flfFYktn6K7KwoDnvalBCTcA8TKBu6i+jqsFQIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFE8Od9nG/2jcpo8F349Gde573LC8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzNkYzIy Mi0xMjA2LTQ5MjItODg5MC00NTViMTlmNzY2Y2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvM2RjMjIy LTEyMDYtNDkyMi04ODkwLTQ1NWIxOWY3NjZjYy8xL1R3NTMyY2JfYU55bWp3WGZq MFoxN252Y3NMdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQCLZEYAwQETSfAAwQCTSfYAwQDVXewAwQCuW28 AwQCub7QAwQF1EJgMBQEAgACMA4DBQAgAUDQAwUAKgoNQDAjBggrBgEFBQcBCAEB /wQUMBKgEDAOAgJRsAIDAIk7AgMDJX8wDQYJKoZIhvcNAQELBQADggEBAECCvC3h TTErvXWgkaRWadRh8DuUjNFp7bjBfP8RXrNhOg6tDfVdg8H5vUhsqzRM188lm/KB vBVCABW6h8bE63ac8XgosXJoUVUvMuOaldrEjPfy1lP7LbPfksE1i9v0s5FMYC/m AcM4TM9fpRDaTwFpQRyj+2gyMDO2KsDFhqo4CPJQ0X1ll81o2CMRF0nfs7LfpHAW Wzamw/UM+/3AK7GpTfWNbCn05TsMEvgjNjxoBes8eMD5IInuEXf258VYMz4bRr+j wR1Ya3z31AzAKNyVVpw6rLTPj8xQU8JRsLOT/2ergh48dPdNHpbLKYESqCS9gYOV UQttlqFp4PDIm3c= -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:06 2026 by rpki-client