This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer File: tIWE7_oFHwy8OcMZFj5PIzhgSYI.cer (raw, json) Hash identifier: r0GsT6tD3n/Kac33K8Wd9qY2WcpilIf49g7RpF9CHgY= Subject key identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834D512EA1AD40A85AF0A5152912B5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29264 AS: 51366 IP: 45.86.40.0/22 IP: 185.86.252.0/22 IP: 194.4.232.0 -- 194.4.247.255 IP: 194.153.108.0/24 IP: 2a05:bd40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d5:12:ea:1a:d4:0a:85:af:0a:51:52:91:2b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b48584effa051f0cbc39c319163e4f2338604982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:cc:1a:a1:e7:fa:50:6f:a9:0b:0a:d5:68: 74:fd:d3:b5:b2:47:6d:b1:97:b6:23:6f:ec:55:e7: 1b:0d:0f:ef:4e:74:58:85:74:bf:7d:a9:c2:e1:1d: db:54:ad:6d:da:70:86:90:54:9a:65:85:81:e5:cf: ea:81:66:5f:0a:6e:91:3c:c8:5a:d5:69:7a:fc:09: ce:44:9f:e4:25:91:03:fd:a3:c8:3d:8b:45:a4:25: 78:67:d4:f6:be:44:61:5e:5f:5d:d0:e3:5b:78:46: 29:2e:88:55:dc:f9:65:07:d9:64:df:94:6f:ef:8e: 90:5b:ac:97:26:4f:62:1e:a4:2b:b7:7a:3b:b4:8c: 4e:02:e9:1c:dd:79:c9:23:1c:af:e2:17:09:44:55: f0:db:69:f0:1a:57:0e:64:b1:1e:db:ee:51:43:6f: ff:b0:42:75:61:58:c1:2b:38:84:85:db:e4:4c:eb: 7c:fc:30:18:29:22:97:35:95:7f:a7:07:48:33:83: 98:1f:45:05:37:77:ac:c4:44:7e:86:e6:62:d8:d1: 82:dd:9b:8f:20:71:fd:42:60:ff:ca:3a:35:9f:07: cd:b3:5b:74:58:19:84:88:03:c1:e6:90:01:f8:fc: 6e:6a:9e:39:71:58:4f:72:07:c0:45:94:0d:53:84: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:84:EF:FA:05:1F:0C:BC:39:C3:19:16:3E:4F:23:38:60:49:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/21e032-073d-4068-ae45-c6613f9c14ca/1/tIWE7_oFHwy8OcMZFj5PIzhgSYI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.40.0/22 185.86.252.0/22 194.4.232.0-194.4.247.255 194.153.108.0/24 IPv6: 2a05:bd40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29264 51366 Signature Algorithm: sha256WithRSAEncryption 42:3f:b3:fa:27:b5:e6:eb:f7:97:1e:6b:25:98:bf:ba:8d:e9: ad:53:fa:21:1e:37:12:8c:98:94:ad:09:a2:fb:3b:bb:43:c4: 09:cf:68:c6:c4:9b:a4:92:4e:c1:59:9b:15:c5:34:bd:82:c9: 45:6e:78:6c:ca:b5:a2:7e:43:89:5c:b0:0e:07:e0:51:ba:51: 85:a5:2b:6d:9e:e3:48:97:12:7e:db:cc:38:38:51:c9:b4:e5: 8f:73:de:e3:6d:29:9e:42:ba:9d:c9:7e:6a:f1:aa:9a:d3:8c: 48:b5:cb:c0:56:02:d2:06:53:26:0d:46:b9:ca:63:59:68:28: 03:9b:27:a4:d6:dd:d6:f0:11:e9:28:31:80:5b:1a:e7:9c:1c: 65:8a:0a:36:ea:cd:7d:72:1f:4e:6c:5a:07:d8:7f:e2:ec:3f: 17:6e:c0:3b:67:f1:0d:18:e2:43:b5:59:d2:9c:ea:58:c1:64: 63:2e:56:c8:b4:2e:02:c9:f0:fa:ad:7b:67:10:89:a4:9f:2c: 8b:1c:5b:66:03:5d:6a:5e:c4:f4:de:96:db:f9:ef:a1:7a:c5: a5:6c:48:7b:2f:d9:ae:07:ca:1d:bc:83:07:51:f2:e4:46:a6: 37:e8:b5:5c:c4:9a:8a:6a:ca:24:2a:01:7b:56:2c:34:af:f3: 46:34:a7:b7 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt4NNUS6hrUCoWvClFSkStcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDg1ODRlZmZhMDUxZjBjYmMzOWMzMTkxNjNlNGYyMzM4NjA0OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNnMGqHn+lBvqQsK1Wh0/dO1skdt sZe2I2/sVecbDQ/vTnRYhXS/fanC4R3bVK1t2nCGkFSaZYWB5c/qgWZfCm6RPMha 1Wl6/AnORJ/kJZED/aPIPYtFpCV4Z9T2vkRhXl9d0ONbeEYpLohV3PllB9lk35Rv 746QW6yXJk9iHqQrt3o7tIxOAukc3XnJIxyv4hcJRFXw22nwGlcOZLEe2+5RQ2// sEJ1YVjBKziEhdvkTOt8/DAYKSKXNZV/pwdIM4OYH0UFN3esxER+huZi2NGC3ZuP IHH9QmD/yjo1nwfNs1t0WBmEiAPB5pAB+Pxuap45cVhPcgfARZQNU4QmiwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFLSFhO/6BR8MvDnDGRY+TyM4YEmCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzIxZTAz Mi0wNzNkLTQwNjgtYWU0NS1jNjYxM2Y5YzE0Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMjFlMDMy LTA3M2QtNDA2OC1hZTQ1LWM2NjEzZjljMTRjYS8xL3RJV0U3X29GSHd5OE9jTVpG ajVQSXpoZ1NZSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQCLVYoAwQCuVb8MAwDBAPCBOgDBAPCBPADBADC mWwwDQQCAAIwBwMFAyoFvUAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICclACAwDI pjANBgkqhkiG9w0BAQsFAAOCAQEAQj+z+ie15uv3lx5rJZi/uo3prVP6IR43EoyY lK0Jovs7u0PECc9oxsSbpJJOwVmbFcU0vYLJRW54bMq1on5DiVywDgfgUbpRhaUr bZ7jSJcSftvMODhRybTlj3Pe420pnkK6ncl+avGqmtOMSLXLwFYC0gZTJg1Gucpj WWgoA5snpNbd1vAR6SgxgFsa55wcZYoKNurNfXIfTmxaB9h/4uw/F27AO2fxDRji Q7VZ0pzqWMFkYy5WyLQuAsnw+q17ZxCJpJ8sixxbZgNdal7E9N6W2/nvoXrFpWxI ey/ZrgfKHbyDB1Hy5EamN+i1XMSaimrKJCoBe1YsNK/zRjSntw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:25 2026 by rpki-client