This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer File: T0HFbqBp7nscHfZoa9NuDhRSiiA.cer (raw, json) Hash identifier: qJeIaksu93EZa8NvLgZKDjlT6mc6xqgj31SM4Wnb5nc= Subject key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C98C3CFE2688F297804A9429E0A3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59619 IP: 91.240.226.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:98:c3:cf:e2:68:8f:29:78:04:a9:42:9e:0a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:b5:a6:d9:ea:ac:0d:94:71:f1:d4:0e:c3: e5:0c:be:18:6d:e1:c1:69:67:78:77:fc:70:7c:31: 34:db:1b:4e:5b:47:cd:1b:8b:88:06:d8:b5:f7:a3: d9:6d:15:ce:fa:39:5b:8d:06:e4:dd:a2:52:fa:77: e2:ab:27:8c:ea:4d:28:5f:b7:02:67:26:32:d2:61: e3:6a:ae:39:68:2f:42:e3:df:53:e1:94:7d:b2:b8: 52:a1:dd:d0:bb:2f:cd:1b:72:0e:b0:a9:8c:6c:e9: fc:76:c8:1a:6c:e6:02:b6:9b:2e:d3:85:05:28:30: 31:66:c5:0e:c4:10:6a:50:eb:0d:0b:73:42:85:ff: cf:f5:07:90:53:93:17:43:5d:49:52:05:6f:f2:23: 89:bd:30:5d:99:78:48:bf:31:3c:10:19:1e:4b:ed: 3e:06:11:c7:8d:8e:fa:72:36:e9:ad:44:0e:e5:f7: 55:b1:44:f2:15:72:bf:8a:43:34:0a:a0:11:e7:16: ec:73:9c:1e:3c:1f:d7:1f:b3:73:eb:37:b9:6a:5a: 37:96:6c:31:94:52:f7:eb:81:37:a3:1c:32:e4:dc: ca:b7:11:d8:d5:85:5e:78:4f:56:21:9e:76:77:0c: 41:32:70:be:3c:37:a2:8b:48:b2:a0:24:d1:a6:2d: be:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.226.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59619 Signature Algorithm: sha256WithRSAEncryption 89:58:3b:a6:30:8d:cf:5d:fa:8d:c3:ca:d2:14:d0:39:f6:45: 6d:9e:df:11:32:18:e5:c7:30:9b:5b:33:75:df:8e:42:3d:3e: 50:1f:2f:73:a0:47:9c:19:a0:1c:09:81:e2:98:a2:0c:5b:0b: 24:c1:e0:55:a6:52:9b:c0:ef:40:01:c2:c0:ae:47:bc:28:09: d1:17:f7:24:72:dd:e5:52:10:20:c1:c7:ce:17:f4:65:3b:b9: 31:58:12:c0:a4:8c:08:e7:8f:0b:21:0d:e3:1d:34:c7:26:a8: ca:f0:13:16:0b:2a:80:3f:28:e5:ec:bc:25:06:bf:a0:de:96: 9f:86:d5:3e:63:0e:57:d4:b2:f1:f1:37:49:37:f9:1f:1d:c3: 53:be:3a:f5:c6:de:ec:5c:a1:94:95:05:03:c0:63:80:a7:24: 1a:12:5b:0b:b5:b3:9b:af:8e:ac:c2:cf:87:e4:9a:46:5c:5b: 22:fa:25:6c:2f:ad:3b:cc:ce:d5:11:76:bd:18:a9:79:5a:2f: e9:e1:38:ab:55:6d:b7:7e:b3:87:98:7e:63:af:f4:db:43:e2: 93:8f:3c:8b:f1:1d:40:81:6f:29:7d:32:e8:6e:aa:fc:84:c1: f8:68:48:5e:24:d3:35:de:00:98:32:4d:36:f7:5e:d2:90:b2: b2:65:6e:02 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9XJjDz+Jojyl4BKlCngo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQxYzU2ZWEwNjllZTdiMWMxZGY2Njg2YmQzNmUwZTE0NTI4YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwja1ptnqrA2UcfHUDsPlDL4YbeHB aWd4d/xwfDE02xtOW0fNG4uIBti196PZbRXO+jlbjQbk3aJS+nfiqyeM6k0oX7cC ZyYy0mHjaq45aC9C499T4ZR9srhSod3Quy/NG3IOsKmMbOn8dsgabOYCtpsu04UF KDAxZsUOxBBqUOsNC3NChf/P9QeQU5MXQ11JUgVv8iOJvTBdmXhIvzE8EBkeS+0+ BhHHjY76cjbprUQO5fdVsUTyFXK/ikM0CqAR5xbsc5wePB/XH7Nz6ze5alo3lmwx lFL364E3oxwy5NzKtxHY1YVeeE9WIZ52dwxBMnC+PDeii0iyoCTRpi2+RQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE9BxW6gae57HB32aGvTbg4UUoogMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzhhMTQw Yi0wZTUxLTRmYzctOWMwMS1kNjdiOWFjYTY0MTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvOGExNDBi LTBlNTEtNGZjNy05YzAxLWQ2N2I5YWNhNjQxNy8xL1QwSEZicUJwN25zY0hmWm9h OU51RGhSU2lpQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW/DiMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDo4zANBgkqhkiG9w0BAQsFAAOCAQEAiVg7pjCNz136jcPK0hTQOfZFbZ7fETIY 5ccwm1szdd+OQj0+UB8vc6BHnBmgHAmB4piiDFsLJMHgVaZSm8DvQAHCwK5HvCgJ 0Rf3JHLd5VIQIMHHzhf0ZTu5MVgSwKSMCOePCyEN4x00xyaoyvATFgsqgD8o5ey8 JQa/oN6Wn4bVPmMOV9Sy8fE3STf5Hx3DU7469cbe7FyhlJUFA8BjgKckGhJbC7Wz m6+OrMLPh+SaRlxbIvolbC+tO8zO1RF2vRipeVov6eE4q1Vtt36zh5h+Y6/020Pi k488i/EdQIFvKX0y6G6q/ITB+GhIXiTTNd4AmDJNNvde0pCysmVuAg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:05 2026 by rpki-client