This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer File: TAf2nWArfrt_YzDXFcnsPlq6MPo.cer (raw, json) Hash identifier: JJvMNK2J34dxE6uXRF53DK/+Zf+pbNPDMcw6+0cv2pY= Subject key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910DDB7C23D8343C78E79BF3CC4605F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206423 IP: 185.156.252.0/22 IP: 2a07:a1c0::/29 IP: 2a13:6dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:dd:b7:c2:3d:83:43:c7:8e:79:bf:3c:c4:60:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:c9:35:43:ca:6f:65:07:11:9d:ce:fb:7a: e8:fe:00:06:f2:29:3c:31:c5:5a:e0:1f:70:3c:d7: da:30:fd:90:58:72:d1:f8:80:7c:89:7c:8a:54:6f: ea:bc:26:70:47:2c:e3:07:ae:e1:17:d4:c6:32:74: d3:d9:35:5d:a2:57:2e:0f:03:dc:18:d0:ea:29:5b: 5e:a4:23:c2:95:2b:81:6d:5c:fa:3d:1c:28:ec:39: 9d:1d:a5:85:ba:a1:88:45:2c:e6:63:d4:96:ce:66: fe:8a:fb:e4:06:a8:3e:cb:df:28:64:31:8a:60:8f: 23:49:80:4b:45:d2:83:04:28:09:67:75:8e:6b:fe: ae:f7:7a:e8:52:c9:d1:db:9b:da:ca:c7:7c:a7:10: bf:22:02:85:b9:e4:10:42:bf:eb:9f:dc:a3:6e:f2: 9b:43:55:a6:bc:aa:92:79:29:e7:35:2e:10:57:9c: 50:67:03:76:f7:58:4e:05:d2:5b:2c:75:4f:cc:70: 33:f6:31:9e:d0:ba:cd:99:76:bf:85:2c:c6:e2:a1: cf:31:b0:f6:7b:7f:64:96:47:a5:fd:1a:c4:17:75: a8:8e:1c:3e:95:1f:bf:81:55:9d:46:b5:08:65:90: 7d:bc:50:34:eb:50:fd:1f:03:c8:9a:83:74:df:0a: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.252.0/22 IPv6: 2a07:a1c0::/29 2a13:6dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206423 Signature Algorithm: sha256WithRSAEncryption 61:a6:1f:ec:f9:ac:ce:3a:7c:52:c8:96:68:0b:8c:18:a5:3a: b6:fb:7d:82:99:c9:6e:22:03:44:38:cb:c2:33:68:f0:d5:74: 35:ee:23:15:5d:3e:2f:6e:d8:8e:d0:ce:49:cc:de:01:9b:b4: bd:02:73:18:e3:c0:79:4c:9c:7d:af:61:7e:40:8b:8e:b7:1e: f0:f6:9b:fa:5e:61:54:21:2e:ac:b8:45:14:a4:78:13:18:2e: 99:bb:ea:b3:aa:12:7f:f3:95:19:56:bb:5d:ba:07:8a:6f:17: 76:ff:15:3e:56:52:57:2b:41:8d:00:0d:24:f9:0f:96:5d:11: 29:90:eb:65:a7:10:c6:d9:34:0f:41:20:72:e8:2c:4e:f3:29: a7:cb:20:e8:02:aa:4d:06:85:3a:28:73:55:e1:8a:d3:77:29: d1:33:a7:71:ff:59:3c:64:92:1a:b7:f7:ad:db:82:5d:db:ff: 12:bd:49:e5:b3:3a:75:8f:d4:93:4c:c6:d4:03:d0:57:d2:b6: ba:5f:35:16:5c:f0:6e:b5:05:ab:38:cf:dc:06:e0:49:ad:6d: 3e:c3:3e:06:30:0b:62:7c:21:ca:43:a2:f2:cf:5d:e8:25:4e: 98:75:47:80:c1:e4:7f:4a:cd:25:d7:1b:ca:44:3d:50:2e:5b: 6d:8e:24:6d -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt5EN23wj2DQ8eOeb88xGBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzA3ZjY5ZDYwMmI3ZWJiN2Y2MzMwZDcxNWM5ZWMzZTVhYmEzMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG7JNUPKb2UHEZ3O+3ro/gAG8ik8 McVa4B9wPNfaMP2QWHLR+IB8iXyKVG/qvCZwRyzjB67hF9TGMnTT2TVdolcuDwPc GNDqKVtepCPClSuBbVz6PRwo7DmdHaWFuqGIRSzmY9SWzmb+ivvkBqg+y98oZDGK YI8jSYBLRdKDBCgJZ3WOa/6u93roUsnR25vaysd8pxC/IgKFueQQQr/rn9yjbvKb Q1WmvKqSeSnnNS4QV5xQZwN291hOBdJbLHVPzHAz9jGe0LrNmXa/hSzG4qHPMbD2 e39klkel/RrEF3Wojhw+lR+/gVWdRrUIZZB9vFA061D9HwPImoN03wq2bQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFEwH9p1gK367f2Mw1xXJ7D5aujD6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2VlNzFj Ni0xYmFlLTQ4NTgtYWYzYS1iYzI4OWRjMTdkMjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvZWU3MWM2 LTFiYWUtNDg1OC1hZjNhLWJjMjg5ZGMxN2QyMC8xL1RBZjJuV0FyZnJ0X1l6RFhG Y25zUGxxNk1Qby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUF BwEHAQH/BCYwJDAMBAIAATAGAwQCuZz8MBQEAgACMA4DBQMqB6HAAwUDKhNtwDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDJlcwDQYJKoZIhvcNAQELBQADggEBAGGm H+z5rM46fFLIlmgLjBilOrb7fYKZyW4iA0Q4y8IzaPDVdDXuIxVdPi9u2I7QzknM 3gGbtL0CcxjjwHlMnH2vYX5Ai463HvD2m/peYVQhLqy4RRSkeBMYLpm76rOqEn/z lRlWu126B4pvF3b/FT5WUlcrQY0ADST5D5ZdESmQ62WnEMbZNA9BIHLoLE7zKafL IOgCqk0GhTooc1XhitN3KdEzp3H/WTxkkhq3963bgl3b/xK9SeWzOnWP1JNMxtQD 0FfStrpfNRZc8G61Bas4z9wG4EmtbT7DPgYwC2J8IcpDovLPXeglTph1R4DB5H9K zSXXG8pEPVAuW22OJG0= -----END CERTIFICATE-----Generated at Tue Jan 20 07:49:32 2026 by rpki-client