This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer File: t5wt4-swkYD09aWvLVb-Qlh4Rkg.cer (raw, json) Hash identifier: KytT1zykWwXZMVbTHNgtjuG4korzYqqWN13ozO5C3AE= Subject key identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78343914861CC563B292A666024B3001 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62204 IP: 91.203.228.0/22 IP: 2a0c:1fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:39:14:86:1c:c5:63:b2:92:a6:66:02:4b:30:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b79c2de3eb309180f4f5a5af2d56fe4258784648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:17:67:cf:c0:5a:16:c6:31:41:76:f1:ca:c2: db:de:b5:24:43:b2:0a:61:08:7b:69:43:4a:0e:81: e9:f6:68:0b:c9:d2:8c:ee:97:0b:4f:59:47:22:ef: 25:6e:5c:b6:cf:f5:4d:d3:ff:b6:03:cf:dc:a8:e0: 3a:ee:a9:9b:2f:f6:89:db:a5:90:59:4c:ae:c4:cb: 35:d9:03:cd:d4:ca:86:d8:d6:b7:0e:3a:c5:6b:9f: c4:de:9c:6e:ee:03:3a:8e:95:e0:da:8a:3d:9e:94: b8:0f:a9:b3:ec:41:2e:0b:39:0c:6a:bb:a5:f6:1a: ce:2f:3b:69:2b:55:fe:5d:2b:3e:31:31:31:cb:40: b0:9f:74:a2:66:6c:e9:93:ed:70:2a:46:45:e2:2c: 25:64:fa:b5:b3:d9:48:a2:8b:b3:e6:27:d8:f4:cb: cc:57:8d:cf:3a:d0:d0:09:9a:68:28:39:c3:28:9a: 94:a1:81:af:8f:7a:cf:71:24:53:ba:31:dd:34:e6: 4a:ae:b0:eb:72:9c:15:e7:51:b8:9c:f9:fd:21:57: 59:cc:f5:6c:b5:95:a4:0b:e8:7b:fe:02:ea:bf:42: eb:c5:94:9d:d5:0a:d2:74:68:eb:88:5d:7e:e9:a2: e0:c7:85:44:59:2a:2b:72:7d:db:63:b1:e7:9e:f7: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9C:2D:E3:EB:30:91:80:F4:F5:A5:AF:2D:56:FE:42:58:78:46:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/t5wt4-swkYD09aWvLVb-Qlh4Rkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.228.0/22 IPv6: 2a0c:1fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62204 Signature Algorithm: sha256WithRSAEncryption 5f:fd:d3:b0:b4:5a:02:f9:d9:4d:c6:70:8d:70:2a:a2:52:14: 0d:5c:57:4a:6a:54:53:5c:39:e0:2e:89:76:eb:2c:d6:8d:71: 36:94:d0:d8:a0:0e:18:22:53:fd:7f:2c:a6:1f:18:1e:6c:4f: 4c:90:01:4e:72:ec:b5:4d:0f:1a:fd:8d:42:c1:50:ac:06:2f: e8:20:a9:56:1a:98:3e:e6:63:6f:72:3d:a7:92:16:98:68:f3: 77:23:7d:1b:1f:7d:d4:37:c8:0e:56:ee:b5:86:ae:ec:79:0b: ad:2e:81:44:9a:8b:83:08:f9:4b:ce:b5:e4:5e:70:09:f7:cd: 71:95:2e:7d:98:87:6b:5b:a4:f1:10:d8:b4:c2:3c:00:77:9a: 72:83:b4:3b:06:1a:55:f1:5d:10:00:fc:34:4a:d3:b0:cd:86: f5:97:87:d4:f4:43:47:f7:d5:e5:01:4e:94:5e:40:87:28:2a: 77:c9:04:98:cd:98:87:a0:99:57:ec:a7:2f:5c:df:01:09:19: 40:66:06:bb:7b:9b:11:cf:9a:b5:91:10:61:d1:69:02:c6:7b: f8:74:64:48:61:07:e6:e9:30:2d:88:30:a3:15:7f:1a:f9:bb: b6:ef:95:63:36:a6:fd:0f:0c:f7:0f:cf:36:0f:ca:45:eb:2c: 4a:f9:a9:cc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NDkUhhzFY7KSpmYCSzABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzljMmRlM2ViMzA5MTgwZjRmNWE1YWYyZDU2ZmU0MjU4Nzg0NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRdnz8BaFsYxQXbxysLb3rUkQ7IK YQh7aUNKDoHp9mgLydKM7pcLT1lHIu8lbly2z/VN0/+2A8/cqOA67qmbL/aJ26WQ WUyuxMs12QPN1MqG2Na3DjrFa5/E3pxu7gM6jpXg2oo9npS4D6mz7EEuCzkMarul 9hrOLztpK1X+XSs+MTExy0Cwn3SiZmzpk+1wKkZF4iwlZPq1s9lIoouz5ifY9MvM V43POtDQCZpoKDnDKJqUoYGvj3rPcSRTujHdNOZKrrDrcpwV51G4nPn9IVdZzPVs tZWkC+h7/gLqv0LrxZSd1QrSdGjriF1+6aLgx4VEWSorcn3bY7HnnvfvkwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLecLePrMJGA9PWlry1W/kJYeEZIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzU2YTAw Ni05MTlmLTQ4N2MtOTMxNi0wYmI2YTgzZjlmNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvNTZhMDA2 LTkxOWYtNDg3Yy05MzE2LTBiYjZhODNmOWY0MC8xL3Q1d3Q0LXN3a1lEMDlhV3ZM VmItUWxoNFJrZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCW8vkMA0EAgACMAcDBQMqDB/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDy/DANBgkqhkiG9w0BAQsFAAOCAQEAX/3TsLRaAvnZ TcZwjXAqolIUDVxXSmpUU1w54C6Jduss1o1xNpTQ2KAOGCJT/X8sph8YHmxPTJAB TnLstU0PGv2NQsFQrAYv6CCpVhqYPuZjb3I9p5IWmGjzdyN9Gx991DfIDlbutYau 7HkLrS6BRJqLgwj5S8615F5wCffNcZUufZiHa1uk8RDYtMI8AHeacoO0OwYaVfFd EAD8NErTsM2G9ZeH1PRDR/fV5QFOlF5Ahygqd8kEmM2Yh6CZV+ynL1zfAQkZQGYG u3ubEc+atZEQYdFpAsZ7+HRkSGEH5ukwLYgwoxV/Gvm7tu+VYzam/Q8M9w/PNg/K RessSvmpzA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:07:02 2026 by rpki-client