This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer File: tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer (raw, json) Hash identifier: Si+wtcKiVv3onq7vek4DyOjTpq1PwX79gBcRo52eMvo= Subject key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B129749ADCA8BCCE150DA00360445D186 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 12:44:23 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203913 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:97:49:ad:ca:8b:cc:e1:50:da:00:36:04:45:d1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 12 12:44:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b56b5b54decf43e964f4be6d304e480a386cb794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:ba:33:68:1a:50:e1:2d:a9:87:6e:27:20: 2a:06:9e:a3:f3:d5:76:ed:43:e1:eb:7b:26:69:c9: 5e:d5:85:99:29:da:f0:10:b9:ab:cc:73:30:8d:8c: d3:08:f5:3d:1f:b6:6a:6a:71:cc:72:b0:d6:b8:80: 88:8a:91:39:88:0a:be:c8:8b:42:67:db:6b:d1:c2: d8:c3:a8:fa:e9:61:16:6f:e4:2a:6b:35:47:e2:04: de:fe:19:61:d7:d3:dc:33:b3:1f:6d:55:51:87:b0: 31:13:f1:ba:6a:b0:40:84:a1:81:18:e8:e1:1a:27: ad:7a:eb:5a:f5:35:19:7a:87:d8:e2:56:c0:f7:c4: b4:9c:ea:ef:53:86:4d:44:3f:7b:55:d7:8d:4b:c2: c4:71:4c:5e:13:fd:06:93:e9:d9:f8:71:43:63:1d: a8:61:88:b0:9b:10:17:5f:05:29:55:26:95:55:58: fe:02:c1:51:09:0a:c5:d5:32:ef:5b:bd:63:47:2c: 1b:fa:44:fe:59:90:da:ad:cb:52:dc:d9:15:ae:9f: 17:2a:09:29:81:17:83:2b:cb:8e:0a:cb:86:19:06: 9e:51:01:b6:84:f4:7c:bb:3e:e9:bc:2f:a6:36:eb: 03:52:3d:c6:0a:fa:ad:88:0e:a0:5b:5d:e9:1b:cf: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203913 Signature Algorithm: sha256WithRSAEncryption 55:2c:74:3f:2b:50:ca:70:a7:d6:d3:39:59:fb:51:de:83:87: 5e:bf:17:f1:41:83:a2:8f:e4:66:37:44:ee:be:79:89:ae:33: f1:f8:20:12:5e:5e:b5:a5:0e:22:d3:d4:ce:24:1b:5e:12:b0: c8:36:84:87:91:ec:ca:62:92:12:01:e3:dc:7b:2c:76:81:3c: 14:0a:c1:2e:c8:16:20:63:cd:a0:a2:4d:cf:1c:2f:c6:68:49: df:4c:7f:1d:83:1f:8c:e0:a6:8b:38:e8:c6:52:76:8e:e5:6c: 07:9c:96:82:17:50:a6:e7:09:d6:12:11:e8:69:ba:56:30:95: 30:0e:a2:d8:b2:68:9c:16:4d:59:33:9b:8b:6c:d0:33:8f:84: 6c:56:59:86:67:b0:2f:b3:0e:62:49:72:89:fb:e5:a9:b5:00: 3a:37:1b:ad:cb:d5:b3:f2:cf:cc:f4:ba:db:be:b8:e2:ff:75: 3f:7d:fd:0f:47:15:89:3a:ad:3b:43:d6:9c:45:ea:0c:8f:4a: de:38:4d:61:84:2f:57:39:b7:bb:2d:16:c3:55:7e:78:c2:75: d2:52:a1:60:3f:b2:6f:9c:e1:d7:c2:d0:32:0d:f5:cd:fc:97: 89:37:b7:af:27:92:5d:2a:c8:25:a8:a2:c3:5e:8e:f1:90:2f: 0f:41:a1:7e -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZsSl0mtyovM4VDaADYERdGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEyMTI0NDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTZiNWI1NGRlY2Y0M2U5NjRmNGJlNmQzMDRlNDgwYTM4NmNiNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsly6M2gaUOEtqYduJyAqBp6j89V2 7UPh63smacle1YWZKdrwELmrzHMwjYzTCPU9H7ZqanHMcrDWuICIipE5iAq+yItC Z9tr0cLYw6j66WEWb+QqazVH4gTe/hlh19PcM7MfbVVRh7AxE/G6arBAhKGBGOjh Gieteuta9TUZeofY4lbA98S0nOrvU4ZNRD97VdeNS8LEcUxeE/0Gk+nZ+HFDYx2o YYiwmxAXXwUpVSaVVVj+AsFRCQrF1TLvW71jRywb+kT+WZDarctS3NkVrp8XKgkp gReDK8uOCsuGGQaeUQG2hPR8uz7pvC+mNusDUj3GCvqtiA6gW13pG89TbwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLVrW1Tez0PpZPS+bTBOSAo4bLeUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzg3NGU4 YS0zYTE2LTRmNWItOGYxOS0zN2FkMGVlYmUxOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvODc0ZThh LTNhMTYtNGY1Yi04ZjE5LTM3YWQwZWViZTE5Yi8xL3RXdGJWTjdQUS1sazlMNXRN RTVJQ2poc3Q1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMciTANBgkqhkiG9w0BAQsFAAOCAQEAVSx0PytQynCn 1tM5WftR3oOHXr8X8UGDoo/kZjdE7r55ia4z8fggEl5etaUOItPUziQbXhKwyDaE h5HsymKSEgHj3HssdoE8FArBLsgWIGPNoKJNzxwvxmhJ30x/HYMfjOCmizjoxlJ2 juVsB5yWghdQpucJ1hIR6Gm6VjCVMA6i2LJonBZNWTObi2zQM4+EbFZZhmewL7MO YklyifvlqbUAOjcbrcvVs/LPzPS627644v91P339D0cViTqtO0PWnEXqDI9K3jhN YYQvVzm3uy0Ww1V+eMJ10lKhYD+yb5zh18LQMg31zfyXiTe3ryeSXSrIJaiiw16O 8ZAvD0Ghfg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:46:47 2025 by rpki-client