This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer (raw, json) Hash identifier: V/Y87OinNiHOiQ/dHRwvYMpZp2hK6p7iT20dkbL9RyA= Subject key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E9D6F030C97AF8D42CE6AB39326A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.246.246.0/24 IP: 185.213.52.0/22 IP: 2a0b:8340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9d:6f:03:0c:97:af:8d:42:ce:6a:b3:93:26:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4dd6d658e14571e839f7813da31f2217422818e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:73:5d:bc:d4:c5:1a:3a:8f:6b:81:40:2c: 63:92:04:39:17:8c:ec:91:2c:92:b3:11:9b:57:c8: 24:40:80:33:56:6c:1e:29:53:09:52:7d:cd:0e:d6: d0:e6:53:60:52:5c:df:23:d6:d4:ab:0c:c6:47:6e: 99:f3:f5:98:74:0e:f7:f8:9e:db:09:c1:13:fd:bb: 5b:aa:9f:df:5e:7d:a7:c4:98:94:e6:09:82:83:f2: cd:82:78:10:06:c6:a3:12:cf:af:7a:d4:09:f8:53: 58:dd:3e:ff:29:f3:8b:a2:a7:39:c5:e6:6d:c8:40: 3c:51:50:ef:f8:2e:e5:cb:57:34:5b:33:10:85:f3: 8a:92:65:fb:86:86:26:9b:15:e5:56:99:14:8b:a9: ff:0b:40:3d:eb:06:77:e6:66:e8:c8:37:62:d6:71: c2:59:92:bb:05:00:d3:75:78:ac:4b:eb:b1:fc:43: 66:17:18:74:9c:c1:fb:17:3c:d8:a0:38:3e:ae:4a: c2:31:bc:01:04:b9:d3:67:d0:c0:e8:d8:cb:e1:0b: f7:27:7f:80:2e:fa:dc:d5:99:b1:3d:54:8f:90:a9: d8:d8:db:c2:29:0a:27:2e:56:f8:2c:9c:b4:12:a3: a4:f6:9d:ba:5f:2d:7f:42:90:05:49:0d:a2:47:9e: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.246.0/24 185.213.52.0/22 IPv6: 2a0b:8340::/29 Signature Algorithm: sha256WithRSAEncryption b1:18:ed:9a:a9:9b:50:79:f0:90:aa:2a:72:f4:1f:01:fb:db: 76:3a:a0:c7:8a:67:25:4c:60:cd:21:d9:a6:75:b6:90:de:26: ea:81:da:61:0d:8d:57:67:73:e0:b5:c4:5f:34:4a:88:67:c8: 92:3f:da:32:23:f2:9b:01:43:41:00:7a:5e:f0:28:04:8a:23: 83:52:07:d0:f9:48:e4:1b:00:07:cc:31:e7:1a:8e:77:09:7c: af:dc:1e:78:be:46:3c:fd:92:b3:49:3a:86:e7:3f:c5:80:8b: 76:0d:f4:b5:25:79:87:4e:12:9c:f8:0c:69:0d:78:06:0f:cf: 29:10:38:b0:16:54:e2:28:7c:60:ba:9b:e5:07:1a:d0:07:a9: 08:f1:81:eb:f7:61:8d:f9:0c:ab:01:60:03:a7:ad:73:4a:68: 65:fa:89:c1:0e:9e:ff:c7:92:1e:10:16:d1:7b:dd:b5:26:2a: b7:46:45:58:a3:b8:9f:f9:68:04:61:bc:c8:2d:6a:f0:9f:f1: 9e:4b:33:f0:bc:71:59:3c:ee:38:d2:bc:97:5b:c3:55:c9:31: ad:52:23:ee:7e:89:d8:41:cd:b0:e2:04:c3:b8:c0:4f:1f:4c: 8d:1f:d5:2e:a7:3e:8e:64:cc:be:d2:75:6c:12:49:e0:c4:c8: 4c:81:de:7f -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt5fp1vAwyXr41CzmqzkyalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGRkNmQ2NThlMTQ1NzFlODM5Zjc4MTNkYTMxZjIyMTc0MjI4MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgBzXbzUxRo6j2uBQCxjkgQ5F4zs kSySsxGbV8gkQIAzVmweKVMJUn3NDtbQ5lNgUlzfI9bUqwzGR26Z8/WYdA73+J7b CcET/btbqp/fXn2nxJiU5gmCg/LNgngQBsajEs+vetQJ+FNY3T7/KfOLoqc5xeZt yEA8UVDv+C7ly1c0WzMQhfOKkmX7hoYmmxXlVpkUi6n/C0A96wZ35mboyDdi1nHC WZK7BQDTdXisS+ux/ENmFxh0nMH7FzzYoDg+rkrCMbwBBLnTZ9DA6NjL4Qv3J3+A Lvrc1ZmxPVSPkKnY2NvCKQonLlb4LJy0EqOk9p26Xy1/QpAFSQ2iR54cOwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFLTdbWWOFFceg594E9ox8iF0IoGOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzI2NDkz NC0yYTdmLTQyOGItYWZlNS04MWQyMTRlZGYyOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvMjY0OTM0 LTJhN2YtNDI4Yi1hZmU1LTgxZDIxNGVkZjI5OC8xL3ROMXRaWTRVVng2RG4zZ1Qy akh5SVhRaWdZNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQATfb2AwQCudU0MA0EAgACMAcDBQMqC4NAMA0G CSqGSIb3DQEBCwUAA4IBAQCxGO2aqZtQefCQqipy9B8B+9t2OqDHimclTGDNIdmm dbaQ3ibqgdphDY1XZ3PgtcRfNEqIZ8iSP9oyI/KbAUNBAHpe8CgEiiODUgfQ+Ujk GwAHzDHnGo53CXyv3B54vkY8/ZKzSTqG5z/FgIt2DfS1JXmHThKc+AxpDXgGD88p EDiwFlTiKHxgupvlBxrQB6kI8YHr92GN+QyrAWADp61zSmhl+onBDp7/x5IeEBbR e921Jiq3RkVYo7if+WgEYbzILWrwn/GeSzPwvHFZPO440ryXW8NVyTGtUiPufonY Qc2w4gTDuMBPH0yNH9Uupz6OZMy+0nVsEkngxMhMgd5/ -----END CERTIFICATE-----Generated at Fri Jan 23 23:04:40 2026 by rpki-client