This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer File: TC9Y05SvcD-57w_FN77Q6X23Wo8.cer (raw, json) Hash identifier: dJskTOsEb3XB6xfLP9f9PPxri7YS0LNMOx6vvMNajOE= Subject key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8AB213EBDF3F0821D0FE16C1ADA9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.136.0.0/16 IP: 152.96.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ab:21:3e:bd:f3:f0:82:1d:0f:e1:6c:1a:da:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:59:25:63:07:69:68:5e:a7:83:23:b9:28: f6:54:8c:af:b4:ab:32:37:a3:2d:0a:da:2b:6f:3d: 26:b0:4b:66:9a:e0:01:35:be:dd:6d:a7:f4:fc:25: 8d:32:c2:45:0c:45:ee:29:28:5c:42:76:d4:cc:91: d4:c3:2b:57:cf:7e:16:4d:29:3e:59:84:57:14:ab: 59:e8:3f:41:f5:04:ca:dc:04:64:ca:45:9d:1d:b6: 3d:76:ee:d5:82:a9:47:40:f1:a4:93:3b:43:53:82: b9:55:b0:ae:7a:e8:0b:b4:46:e6:71:05:b7:49:f7: 77:5e:fa:cb:8e:94:b1:1e:bc:a3:fa:65:be:4c:63: 94:0a:ce:cf:d9:2c:c4:52:ea:07:65:70:5e:e4:c0: ce:1e:13:e4:8e:bb:17:fa:02:b2:a4:df:00:0b:57: d1:29:49:87:d4:e6:8d:53:0f:5c:fc:ac:d8:ac:2d: 38:6c:0d:4d:56:a8:f2:e6:6b:00:88:7f:75:7b:e4: d9:81:08:8f:7b:da:95:7f:5e:60:bb:a8:bb:02:5a: b0:5a:db:5a:57:f1:e2:cc:78:91:9b:ae:84:a2:d0: 9c:b5:a5:04:27:6e:86:79:a8:3d:64:e6:dd:51:c2: ed:1d:1a:e4:e3:fb:3f:f0:d4:02:92:0a:a6:46:6a: 6c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.136.0.0/16 152.96.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:03:a4:93:2e:b0:7a:3b:1c:e4:13:ca:7e:ec:78:ec:03:0f: 3a:14:8d:9d:28:57:e2:9d:3c:7d:04:96:97:c1:a2:00:8e:91: b1:e4:be:18:b9:00:7e:7e:17:2a:b4:41:f2:ec:d6:dc:3c:b5: 0b:a2:9a:86:f0:15:58:da:41:23:f0:c5:ef:d1:f2:23:4b:8c: ff:be:6c:eb:8e:f7:df:a1:6f:07:9b:ae:fb:e7:09:2e:a3:79: 4e:80:a1:b1:5b:b3:c0:2a:60:8a:6d:a5:96:b7:96:ab:ee:36: 50:31:72:6d:ef:56:08:74:47:7c:a2:c5:45:76:72:f7:c2:fb: b0:0c:33:38:29:9a:6f:22:93:7e:09:d9:de:13:61:09:dd:4a: 05:ce:e6:36:0b:94:21:57:33:72:a0:20:15:c3:ef:f8:30:17: 27:45:ba:2b:2e:48:e5:99:53:65:1f:c8:5d:74:fa:85:1e:50: 6e:ff:fe:07:76:7f:e0:51:b9:d0:37:76:c1:0f:ac:82:76:1d: 10:d6:17:cb:f0:f8:39:42:6f:a5:df:0d:10:70:48:95:3d:9e: 0e:a6:2a:84:33:8f:54:0e:a9:e0:c0:3e:33:c7:76:cc:6c:55: 65:d4:6b:ac:60:07:81:74:82:89:d5:dd:d9:2c:8b:61:aa:da: f8:26:7c:45 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt6yKshPr3z8IIdD+FsGtqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzJmNThkMzk0YWY3MDNmYjllZjBmYzUzN2JlZDBlOTdkYjc1YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaJZJWMHaWhep4MjuSj2VIyvtKsy N6MtCtorbz0msEtmmuABNb7dbaf0/CWNMsJFDEXuKShcQnbUzJHUwytXz34WTSk+ WYRXFKtZ6D9B9QTK3ARkykWdHbY9du7VgqlHQPGkkztDU4K5VbCueugLtEbmcQW3 Sfd3XvrLjpSxHryj+mW+TGOUCs7P2SzEUuoHZXBe5MDOHhPkjrsX+gKypN8AC1fR KUmH1OaNUw9c/KzYrC04bA1NVqjy5msAiH91e+TZgQiPe9qVf15gu6i7AlqwWtta V/HizHiRm66EotCctaUEJ26Geag9ZObdUcLtHRrk4/s/8NQCkgqmRmpsiwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFEwvWNOUr3A/ue8PxTe+0Ol9t1qPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzI0Njc2 OS1kODc2LTRmMjItOWExYy00NWM1ZjQ1NmQ0YmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvMjQ2NzY5 LWQ4NzYtNGYyMi05YTFjLTQ1YzVmNDU2ZDRiYi8xL1RDOVkwNVN2Y0QtNTd3X0ZO NzdRNlgyM1dvOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF BwEHAQH/BBQwEjAQBAIAATAKAwMAkogDAwCYYDANBgkqhkiG9w0BAQsFAAOCAQEA XgOkky6wejsc5BPKfux47AMPOhSNnShX4p08fQSWl8GiAI6RseS+GLkAfn4XKrRB 8uzW3Dy1C6KahvAVWNpBI/DF79HyI0uM/75s647336FvB5uu++cJLqN5ToChsVuz wCpgim2llreWq+42UDFybe9WCHRHfKLFRXZy98L7sAwzOCmabyKTfgnZ3hNhCd1K Bc7mNguUIVczcqAgFcPv+DAXJ0W6Ky5I5ZlTZR/IXXT6hR5Qbv/+B3Z/4FG50Dd2 wQ+sgnYdENYXy/D4OUJvpd8NEHBIlT2eDqYqhDOPVA6p4MA+M8d2zGxVZdRrrGAH gXSCidXd2SyLYara+CZ8RQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:21 2026 by rpki-client