This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer File: WTtT-5MGNG8nJJSSjXeDnLr53cc.cer (raw, json) Hash identifier: ZVDSQ5jJyb20EFXNZ1hblKv6z2cBBgcf/T+/nPclZ6U= Subject key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B225004CCC13B97576814884764F3AD65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 14:00:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 12417 IP: 46.174.136.0/22 IP: 91.234.46.0/24 IP: 178.218.160.0/20 IP: 185.220.24.0/22 IP: 2a0b:ee40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:04:cc:c1:3b:97:57:68:14:88:47:64:f3:ad:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 14:00:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=593b53fb9306346f272494928d77839cbaf9ddc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:da:22:47:d5:c6:53:2c:07:78:34:c4:7f: 3f:c7:94:1a:d7:cf:7c:65:a9:a8:d3:2b:33:c4:a4: c2:c9:de:cd:f7:26:8f:e0:37:cd:7d:eb:f0:a7:37: f7:25:ac:5f:a5:f5:d4:7c:ce:fc:88:a7:17:2d:a8: 93:39:6a:b0:a9:8c:0c:81:f2:b6:16:f3:8a:bb:db: 90:34:cf:84:32:98:cb:0c:95:53:df:f8:cf:1f:6e: e0:41:c9:36:83:40:63:6b:94:e3:6a:a7:a1:09:5e: 9c:c7:3c:60:f2:f5:ff:2e:a2:9f:72:a5:04:6b:bc: 99:56:bb:2f:91:0d:cf:b7:a1:74:0c:6a:f1:a7:09: ae:e3:62:6d:6a:ec:7d:4c:36:51:81:05:85:db:7d: a9:92:e7:6c:69:27:15:ee:84:70:d9:48:8f:e3:f4: dc:ba:8f:28:d3:01:23:3c:af:0a:ae:0d:34:ff:6b: 47:37:4b:21:c9:cb:89:dc:0e:e9:de:27:99:62:3b: a9:d3:7a:c9:19:28:42:d9:a8:2e:c8:4a:d8:33:91: 44:c3:96:f0:37:15:14:10:7e:07:24:1a:51:be:b6: 8b:05:10:1c:94:29:0d:25:ad:63:31:f8:7c:df:9f: bb:a3:aa:67:a7:48:8b:44:0d:6b:33:95:bb:91:6f: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.136.0/22 91.234.46.0/24 178.218.160.0/20 185.220.24.0/22 IPv6: 2a0b:ee40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12417 Signature Algorithm: sha256WithRSAEncryption 33:27:ae:10:37:1a:56:e6:23:71:62:ab:f6:26:58:f1:83:a5: a2:d5:e8:a5:4c:dd:cb:4c:f2:6c:84:9b:2f:1d:82:7e:2b:94: d5:a8:6d:13:0f:91:ab:51:01:8a:d6:05:e7:7d:71:5b:d2:d8: b3:ef:74:da:fc:35:3b:b4:c7:94:58:9d:e9:f1:a7:12:77:69: ff:c1:ce:09:e9:d9:c9:34:43:e5:4a:63:b9:88:dc:2a:8c:22: d6:1c:38:75:48:fa:20:cb:0e:fd:95:3b:0b:3a:96:ad:e4:4e: f0:f0:b9:87:86:d8:36:9a:1e:6e:12:8b:65:f7:99:92:2f:43: 83:aa:11:dd:4e:15:53:f1:09:1a:8b:dc:10:8e:56:0d:c6:5d: 07:f4:de:c8:ce:54:27:1e:40:9b:f1:c2:90:72:69:28:85:ff: 02:5d:d7:53:53:d5:d9:c4:6c:d3:3a:29:fd:a9:67:ac:ea:03: 9e:b8:bb:1b:7b:56:50:2b:ba:87:64:02:86:43:ad:fc:a4:6c: 4d:ce:bc:f8:8d:2c:fe:42:1c:9a:fb:09:3d:a1:96:0d:dc:54: 3d:ae:17:24:8d:6d:32:fb:f7:ae:20:52:93:f3:3f:4d:5b:3c: 34:85:96:12:3b:dd:28:5a:67:ab:36:82:35:1b:f5:db:4a:33: 7a:57:2a:24 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZsiUATMwTuXV2gUiEdk861lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTQwMDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTNiNTNmYjkzMDYzNDZmMjcyNDk0OTI4ZDc3ODM5Y2JhZjlkZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPjaIkfVxlMsB3g0xH8/x5Qa1898 Zamo0yszxKTCyd7N9yaP4DfNfevwpzf3JaxfpfXUfM78iKcXLaiTOWqwqYwMgfK2 FvOKu9uQNM+EMpjLDJVT3/jPH27gQck2g0Bja5TjaqehCV6cxzxg8vX/LqKfcqUE a7yZVrsvkQ3Pt6F0DGrxpwmu42Jtaux9TDZRgQWF232pkudsaScV7oRw2UiP4/Tc uo8o0wEjPK8Krg00/2tHN0shycuJ3A7p3ieZYjup03rJGShC2aguyErYM5FEw5bw NxUUEH4HJBpRvraLBRAclCkNJa1jMfh835+7o6pnp0iLRA1rM5W7kW8LHwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFFk7U/uTBjRvJySUko13g5y6+d3HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzEyZmM5 ZS1lYTNiLTQxYzAtOTUwZS00NDc1YTliZjI1MGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMTJmYzll LWVhM2ItNDFjMC05NTBlLTQ0NzVhOWJmMjUwZS8xL1dUdFQtNU1HTkc4bkpKU1Nq WGVEbkxyNTNjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLq6IAwQAW+ouAwQEstqgAwQCudwYMA0EAgAC MAcDBQMqC+5AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjCBMA0GCSqGSIb3DQEB CwUAA4IBAQAzJ64QNxpW5iNxYqv2Jljxg6Wi1eilTN3LTPJshJsvHYJ+K5TVqG0T D5GrUQGK1gXnfXFb0tiz73Ta/DU7tMeUWJ3p8acSd2n/wc4J6dnJNEPlSmO5iNwq jCLWHDh1SPogyw79lTsLOpat5E7w8LmHhtg2mh5uEotl95mSL0ODqhHdThVT8Qka i9wQjlYNxl0H9N7IzlQnHkCb8cKQcmkohf8CXddTU9XZxGzTOin9qWes6gOeuLsb e1ZQK7qHZAKGQ638pGxNzrz4jSz+Qhya+wk9oZYN3FQ9rhckjW0y+/euIFKT8z9N Wzw0hZYSO90oWmerNoI1G/XbSjN6Vyok -----END CERTIFICATE-----Generated at Sun Dec 21 09:06:35 2025 by rpki-client