This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer (raw, json) Hash identifier: plmjZyUR8ZmhoVTg5ELeyfKWuk4o5xPKYPepz0mnfAg= Subject key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758849A5A7DC58C43CA7C8A9F510E33 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 170.13.246.0/24 IP: 185.158.76.0/22 IP: 2a07:aac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:84:9a:5a:7d:c5:8c:43:ca:7c:8a:9f:51:0e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:93:51:51:04:20:09:6c:ab:25:c2:b9:c8: ee:78:ef:81:6b:41:35:d3:6b:26:3d:28:c2:1e:60: cb:25:36:f1:9f:01:e3:99:ad:87:55:d9:e7:7f:83: c9:28:4f:19:52:25:bd:62:88:11:b0:7a:41:28:5e: 22:df:cf:11:8d:39:26:65:1e:95:12:17:e8:15:89: 38:79:45:2c:8e:04:c8:8e:18:50:b1:38:62:be:c5: 33:8f:25:28:8f:ed:9e:d2:6d:0a:66:fd:88:62:6f: 09:66:4b:72:40:78:62:08:7b:be:c3:83:cf:63:7f: ce:21:77:63:5d:9d:05:6c:18:55:39:c1:11:a7:77: bc:2a:e4:56:9b:ac:ac:a6:4f:f7:a9:ad:cd:20:d7: 9f:28:1d:77:0f:ea:03:55:df:86:cd:5a:49:5a:8b: 88:e3:17:3e:f3:f8:91:6e:a9:7f:40:d7:1b:b4:dc: 6c:cb:ad:51:09:dc:2d:24:2c:9a:27:4a:f9:fe:b0: 07:bb:e3:4c:56:dd:e7:f8:b8:ff:e4:42:7e:6d:ba: 52:29:86:2a:b9:3c:6f:5d:c2:8a:6c:91:ff:37:e9: 47:4f:a9:c0:65:1a:b4:4d:3c:79:68:30:0c:98:20: b5:de:b7:ba:67:66:ab:4c:ab:be:5a:de:70:b4:3e: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.13.246.0/24 185.158.76.0/22 IPv6: 2a07:aac0::/29 Signature Algorithm: sha256WithRSAEncryption 91:89:55:0e:37:70:be:90:dd:b9:30:ef:ec:a4:34:7f:7c:90: 19:bd:7d:57:25:00:e0:02:4a:dd:33:46:38:1b:6a:fa:c5:95: 66:09:90:27:51:a8:bb:76:7f:1d:69:4e:9e:25:57:88:42:6b: a3:e9:45:41:e3:35:c1:16:32:73:33:67:41:34:38:85:74:bd: d7:84:94:79:98:4c:84:cb:85:60:3f:c9:4a:c0:f1:36:d1:5d: c0:be:05:9c:d4:6a:93:82:72:08:52:86:ba:a5:e3:61:79:b1: 0d:98:20:ff:33:1e:05:6e:a5:e1:1f:c6:54:37:ac:f1:6b:2f: 2e:4f:5c:77:85:14:7b:00:50:e0:8d:9f:2b:56:8c:f9:a2:b7: 94:c4:ad:bf:14:28:03:b3:0a:fe:bd:12:bf:6b:aa:6a:7d:e6: 51:a8:d2:ba:61:e5:cb:14:ed:b3:fa:cf:ae:bc:fc:ea:ed:09: 6d:1f:79:ce:41:54:ef:23:27:42:e1:db:fb:91:d3:93:1b:e5: 0c:8d:b0:f8:b1:f4:9d:e0:c8:00:66:49:c6:66:f6:be:5e:a0: d6:4a:cd:b6:6a:f1:82:91:99:10:ca:c3:d3:3f:fa:26:cd:9d: 73:13:be:d6:25:10:22:06:6b:b9:f0:5e:5f:2d:3c:fb:35:d9: ec:47:76:77 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgISAZt3WISaWn3FjEPKfIqfUQ4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWRhNWFhYTZjOTk0NjJmZWIxNTlmNTZiMWMwYWYyZGQzZjQ2MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyTUVEEIAlsqyXCucjueO+Ba0E1 02smPSjCHmDLJTbxnwHjma2HVdnnf4PJKE8ZUiW9YogRsHpBKF4i388RjTkmZR6V EhfoFYk4eUUsjgTIjhhQsThivsUzjyUoj+2e0m0KZv2IYm8JZktyQHhiCHu+w4PP Y3/OIXdjXZ0FbBhVOcERp3e8KuRWm6yspk/3qa3NINefKB13D+oDVd+GzVpJWouI 4xc+8/iRbql/QNcbtNxsy61RCdwtJCyaJ0r5/rAHu+NMVt3n+Lj/5EJ+bbpSKYYq uTxvXcKKbJH/N+lHT6nAZRq0TTx5aDAMmCC13re6Z2arTKu+Wt5wtD6VqwIDAQAB o4ICmjCCApYwHQYDVR0OBBYEFPraWqpsmUYv6xWfVrHAry3T9GJbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzA2MTUw Ni1lZGYwLTQ4ZDctYmU3ZC02ZjFiMDM3YmE2ZTIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDYxNTA2 LWVkZjAtNDhkNy1iZTdkLTZmMWIwMzdiYTZlMi8xLzEtdHBhcW15WlJpX3JGWjlX c2NDdkxkUDBZbHMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAKoN9gMEArmeTDANBAIAAjAHAwUDKgeqwDAN BgkqhkiG9w0BAQsFAAOCAQEAkYlVDjdwvpDduTDv7KQ0f3yQGb19VyUA4AJK3TNG OBtq+sWVZgmQJ1Gou3Z/HWlOniVXiEJro+lFQeM1wRYyczNnQTQ4hXS914SUeZhM hMuFYD/JSsDxNtFdwL4FnNRqk4JyCFKGuqXjYXmxDZgg/zMeBW6l4R/GVDes8Wsv Lk9cd4UUewBQ4I2fK1aM+aK3lMStvxQoA7MK/r0Sv2uqan3mUajSumHlyxTts/rP rrz86u0JbR95zkFU7yMnQuHb+5HTkxvlDI2w+LH0neDIAGZJxmb2vl6g1krNtmrx gpGZEMrD0z/6Js2dcxO+1iUQIgZrufBeXy08+zXZ7Ed2dw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:29 2026 by rpki-client