This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer File: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer (raw, json) Hash identifier: mLhZv9zHap2nX2K7F0K4rqaGkZG4ViJbUQZ79JTAWXo= Subject key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E163E754EBAA8995E8C7CC8291CD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215447 IP: 78.110.35.0/24 IP: 185.204.153.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e1:63:e7:54:eb:aa:89:95:e8:c7:cc:82:91:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c101ff51b67eefe0d67800e76d3606df4c94721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:2e:f2:27:ce:2e:b4:29:6a:76:a7:71:15: 00:5c:e9:e4:bd:f1:4a:86:2a:7e:cb:39:76:c9:ef: e8:83:f3:51:75:27:29:4f:90:40:68:ad:27:c9:3d: b2:59:45:35:90:79:3c:f4:f8:e6:85:e1:bc:f6:f2: 9e:17:da:08:5a:86:e4:bc:fd:2f:89:d8:0b:c0:1b: 93:e5:43:5d:fc:f2:2f:81:3b:4f:3b:f9:7d:4a:6d: 74:2d:5a:f0:f4:9b:7c:52:a8:d7:65:e7:fd:cc:9c: 68:0d:bb:eb:33:c0:71:b6:f4:76:dc:57:27:ea:f6: 71:4a:d9:40:76:4d:7e:5a:fe:b1:01:9c:ad:ad:0d: 8d:e8:32:d6:0e:38:67:6a:45:43:ba:33:3e:0c:4b: c2:f1:80:25:82:bd:5b:ff:63:9d:7a:cc:34:c0:7b: 11:1c:18:c5:3f:1b:e4:e5:48:cc:26:5b:5f:30:32: 0d:b1:11:52:67:70:59:9c:69:5f:27:11:11:34:78: 8e:1a:f3:f7:a7:4f:0f:64:50:c0:77:d6:17:16:c2: 51:bb:bb:0b:33:f4:eb:ad:7b:0f:4a:36:eb:e4:56: b1:7d:a3:ae:d9:7a:8d:64:ae:c5:f6:89:ff:cc:6e: 79:41:c9:cb:05:0d:d1:83:bc:99:fe:92:2a:f2:83: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.110.35.0/24 185.204.153.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215447 Signature Algorithm: sha256WithRSAEncryption af:68:60:5f:54:f1:fa:b7:50:dd:89:7c:f7:46:8c:93:06:2e: ec:b7:c0:15:7f:0d:30:7f:3f:56:90:85:22:7c:b8:8f:f9:4d: 1d:1c:6d:db:35:74:03:c2:fb:30:7e:13:44:9f:ec:db:37:b5: 48:5a:f7:02:69:97:70:ce:23:b1:6a:15:b8:1f:9b:15:02:9e: 28:c0:e5:1e:2e:64:d4:ab:9d:79:97:90:31:7a:10:04:69:30: 19:35:35:b6:1a:8c:94:59:2a:41:f8:54:e5:91:10:14:9a:cf: ae:ba:be:51:89:07:9d:c4:26:67:40:fb:00:4e:04:f5:c2:d8: 75:c5:29:49:b8:1b:f3:ee:c6:f6:6c:39:fd:da:65:e7:83:c7: 4a:03:3a:42:a7:cb:3a:a9:3f:76:9e:e1:79:e0:10:83:25:45: a0:b6:eb:d6:e2:61:d5:bb:fe:d6:0b:d8:86:73:19:27:f1:3e: 8d:bf:e7:6c:a7:56:9f:d9:da:bd:0e:2b:9d:2c:24:86:88:f1: aa:db:c9:e6:d2:22:ad:d6:fe:2f:0f:ee:24:72:70:bb:a9:4f: a9:3a:2d:1d:72:41:26:69:06:96:8b:87:86:53:f4:9b:84:36: f6:d8:c5:d7:6d:d0:12:98:76:ad:20:13:f9:73:a6:1a:df:95: 31:4a:bb:8f -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+OOFj51TrqomV6MfMgpHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzEwMWZmNTFiNjdlZWZlMGQ2NzgwMGU3NmQzNjA2ZGY0Yzk0NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdYu8ifOLrQpanancRUAXOnkvfFK hip+yzl2ye/og/NRdScpT5BAaK0nyT2yWUU1kHk89PjmheG89vKeF9oIWobkvP0v idgLwBuT5UNd/PIvgTtPO/l9Sm10LVrw9Jt8UqjXZef9zJxoDbvrM8BxtvR23Fcn 6vZxStlAdk1+Wv6xAZytrQ2N6DLWDjhnakVDujM+DEvC8YAlgr1b/2Odesw0wHsR HBjFPxvk5UjMJltfMDINsRFSZ3BZnGlfJxERNHiOGvP3p08PZFDAd9YXFsJRu7sL M/TrrXsPSjbr5FaxfaOu2XqNZK7F9on/zG55QcnLBQ3Rg7yZ/pIq8oOm/wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFEwQH/UbZ+7+DWeADnbTYG30yUchMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzU5ZGNi ZC03OGJmLTQ4ZWQtOTU0ZC1jY2FhNmViM2M1MTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvNTlkY2Jk LTc4YmYtNDhlZC05NTRkLWNjYWE2ZWIzYzUxMy8xL1RCQWY5UnRuN3Y0Tlo0QU9k dE5nYmZUSlJ5RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQATm4jAwQAucyZMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwNJlzANBgkqhkiG9w0BAQsFAAOCAQEAr2hgX1Tx+rdQ3Yl890aMkwYu 7LfAFX8NMH8/VpCFIny4j/lNHRxt2zV0A8L7MH4TRJ/s2ze1SFr3AmmXcM4jsWoV uB+bFQKeKMDlHi5k1KudeZeQMXoQBGkwGTU1thqMlFkqQfhU5ZEQFJrPrrq+UYkH ncQmZ0D7AE4E9cLYdcUpSbgb8+7G9mw5/dpl54PHSgM6QqfLOqk/dp7heeAQgyVF oLbr1uJh1bv+1gvYhnMZJ/E+jb/nbKdWn9navQ4rnSwkhojxqtvJ5tIirdb+Lw/u JHJwu6lPqTotHXJBJmkGlouHhlP0m4Q29tjF123QEph2rSAT+XOmGt+VMUq7jw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:47 2026 by rpki-client