This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer File: WTtT-5MGNG8nJJSSjXeDnLr53cc.cer (raw, json) Hash identifier: oOs7LtbcfSaEFUg3LR3ZQmYTarTdqf4XlArQKle1Bbw= Subject key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36DFA7C8F541EFAC5F2267274CFA01 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12417 IP: 46.174.136.0/22 IP: 91.234.46.0/24 IP: 178.218.160.0/20 IP: 185.220.24.0/22 IP: 2a0b:ee40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:df:a7:c8:f5:41:ef:ac:5f:22:67:27:4c:fa:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=593b53fb9306346f272494928d77839cbaf9ddc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:da:22:47:d5:c6:53:2c:07:78:34:c4:7f: 3f:c7:94:1a:d7:cf:7c:65:a9:a8:d3:2b:33:c4:a4: c2:c9:de:cd:f7:26:8f:e0:37:cd:7d:eb:f0:a7:37: f7:25:ac:5f:a5:f5:d4:7c:ce:fc:88:a7:17:2d:a8: 93:39:6a:b0:a9:8c:0c:81:f2:b6:16:f3:8a:bb:db: 90:34:cf:84:32:98:cb:0c:95:53:df:f8:cf:1f:6e: e0:41:c9:36:83:40:63:6b:94:e3:6a:a7:a1:09:5e: 9c:c7:3c:60:f2:f5:ff:2e:a2:9f:72:a5:04:6b:bc: 99:56:bb:2f:91:0d:cf:b7:a1:74:0c:6a:f1:a7:09: ae:e3:62:6d:6a:ec:7d:4c:36:51:81:05:85:db:7d: a9:92:e7:6c:69:27:15:ee:84:70:d9:48:8f:e3:f4: dc:ba:8f:28:d3:01:23:3c:af:0a:ae:0d:34:ff:6b: 47:37:4b:21:c9:cb:89:dc:0e:e9:de:27:99:62:3b: a9:d3:7a:c9:19:28:42:d9:a8:2e:c8:4a:d8:33:91: 44:c3:96:f0:37:15:14:10:7e:07:24:1a:51:be:b6: 8b:05:10:1c:94:29:0d:25:ad:63:31:f8:7c:df:9f: bb:a3:aa:67:a7:48:8b:44:0d:6b:33:95:bb:91:6f: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.136.0/22 91.234.46.0/24 178.218.160.0/20 185.220.24.0/22 IPv6: 2a0b:ee40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12417 Signature Algorithm: sha256WithRSAEncryption 3b:51:e0:6c:ea:a7:e2:b5:e7:b3:a3:e6:24:4d:ac:88:56:79: fa:c1:0d:38:f2:c9:63:f9:35:ab:6b:88:c9:70:da:3c:d8:11: ba:15:6a:4f:c5:73:fe:00:4d:6e:0e:6c:8d:eb:f0:b4:49:ac: 8c:0e:47:93:42:f2:c1:d1:bb:42:75:cd:43:47:a5:59:95:44: 28:e6:f5:7e:17:34:d3:25:e3:d2:32:07:41:cc:83:88:bd:f6: 5f:f9:52:34:10:6d:f3:db:0f:49:99:a2:4a:c0:22:7a:16:a0: 09:ff:1d:01:1e:14:34:8c:4e:ae:0c:a1:d7:f7:55:0d:d8:b2: fc:ef:01:f0:6a:da:c6:c9:7e:68:13:c1:2b:46:f2:e7:7f:84: bf:63:59:f2:d6:31:70:de:a1:59:84:29:62:b7:61:51:ad:39: f3:92:62:d6:06:37:86:8c:3a:7f:4a:9a:1f:c2:e8:c4:57:38: cf:21:d1:42:3c:d2:70:84:5b:99:9e:d5:93:08:f0:61:6b:0f: 31:f3:9f:ad:ab:c3:6e:f0:d3:07:a1:89:60:ea:de:95:0c:4c: db:f2:87:f6:36:82:ef:13:c4:cc:ce:a9:21:2b:aa:97:4c:3f: 11:d2:6c:18:0b:aa:97:31:69:b3:a1:bc:7b:ce:50:4f:20:f9: 7d:11:4e:b7 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt7Nt+nyPVB76xfImcnTPoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTNiNTNmYjkzMDYzNDZmMjcyNDk0OTI4ZDc3ODM5Y2JhZjlkZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPjaIkfVxlMsB3g0xH8/x5Qa1898 Zamo0yszxKTCyd7N9yaP4DfNfevwpzf3JaxfpfXUfM78iKcXLaiTOWqwqYwMgfK2 FvOKu9uQNM+EMpjLDJVT3/jPH27gQck2g0Bja5TjaqehCV6cxzxg8vX/LqKfcqUE a7yZVrsvkQ3Pt6F0DGrxpwmu42Jtaux9TDZRgQWF232pkudsaScV7oRw2UiP4/Tc uo8o0wEjPK8Krg00/2tHN0shycuJ3A7p3ieZYjup03rJGShC2aguyErYM5FEw5bw NxUUEH4HJBpRvraLBRAclCkNJa1jMfh835+7o6pnp0iLRA1rM5W7kW8LHwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFFk7U/uTBjRvJySUko13g5y6+d3HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzEyZmM5 ZS1lYTNiLTQxYzAtOTUwZS00NDc1YTliZjI1MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMTJmYzll LWVhM2ItNDFjMC05NTBlLTQ0NzVhOWJmMjUwZS8xL1dUdFQtNU1HTkc4bkpKU1Nq WGVEbkxyNTNjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLq6IAwQAW+ouAwQEstqgAwQCudwYMA0EAgAC MAcDBQMqC+5AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjCBMA0GCSqGSIb3DQEB CwUAA4IBAQA7UeBs6qfiteezo+YkTayIVnn6wQ048slj+TWra4jJcNo82BG6FWpP xXP+AE1uDmyN6/C0SayMDkeTQvLB0btCdc1DR6VZlUQo5vV+FzTTJePSMgdBzIOI vfZf+VI0EG3z2w9JmaJKwCJ6FqAJ/x0BHhQ0jE6uDKHX91UN2LL87wHwatrGyX5o E8ErRvLnf4S/Y1ny1jFw3qFZhClit2FRrTnzkmLWBjeGjDp/SpofwujEVzjPIdFC PNJwhFuZntWTCPBhaw8x85+tq8Nu8NMHoYlg6t6VDEzb8of2NoLvE8TMzqkhK6qX TD8R0mwYC6qXMWmzobx7zlBPIPl9EU63 -----END CERTIFICATE-----Generated at Sun Jan 25 20:05:54 2026 by rpki-client