This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer File: TDJWN81N6a_lO9TxIav2IkX2cU8.cer (raw, json) Hash identifier: aIu7Um+/wxTuAtOsNl+5Hp4mo4wsJK+vxbaR6wPhkxg= Subject key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCADB7DAA530449795462D2E73E26C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.48.214.0/24 IP: 2001:67c:1724::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:db:7d:aa:53:04:49:79:54:62:d2:e7:3e:26:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c325637cd4de9afe53bd4f121abf62245f6714f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9e:dd:5d:8c:01:67:30:d2:09:5b:c0:32:f6: 0d:3c:27:71:24:ff:a4:14:8f:57:77:dc:d0:ef:e7: 76:f1:b5:41:24:9d:16:44:75:34:e3:05:3c:f2:dd: bd:7d:e6:49:a2:0d:ab:1b:4d:e4:a1:14:5e:11:1a: a5:02:ed:25:2b:9e:a0:de:c0:69:5c:82:86:2f:a6: 36:2a:b3:47:bf:86:d2:bd:3a:b5:12:93:db:ab:04: 85:eb:e5:85:04:d6:9f:29:de:83:06:1c:95:9f:c2: 71:03:86:e2:22:ec:5c:c0:57:2a:76:22:5e:b8:cf: aa:81:c6:6d:89:1f:ad:f0:81:1e:41:42:a5:e1:20: 9e:d4:bc:22:18:95:bb:5e:eb:6d:8d:c5:e0:6f:a8: e1:99:00:26:76:af:47:73:4b:04:f0:64:60:c6:c5: 03:04:0c:80:6c:0f:73:9f:dd:c5:cb:e6:ab:fa:c8: 96:db:fd:98:cd:a9:89:c1:a6:55:10:d2:5a:30:41: 9f:21:20:70:08:ce:30:76:60:a5:3e:e0:79:6f:67: f2:9e:bf:78:9d:d0:e1:1b:7f:cf:03:b6:31:7c:ea: c7:7a:eb:8f:58:be:37:ff:cd:2e:55:9b:12:15:fb: 9f:ce:b6:6c:27:d4:aa:f5:60:ad:11:ff:bb:3d:cb: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.214.0/24 IPv6: 2001:67c:1724::/48 Signature Algorithm: sha256WithRSAEncryption 3a:e0:d9:33:6b:bf:ba:54:70:3e:f4:81:44:70:b4:f2:e7:2d: ce:8b:45:a5:e6:8a:fe:70:69:70:33:ce:38:61:b4:b4:6b:c8: e4:d6:b2:39:f6:bf:d8:c1:0e:74:50:9b:38:c1:12:14:3a:aa: 72:05:2e:e7:f3:ca:30:65:12:b3:3e:29:f2:b0:d9:05:7b:10: ca:dc:cc:8e:88:90:a2:8d:27:96:bb:8e:a3:b4:ff:65:1e:70: 7d:8d:a4:04:a8:aa:a0:c3:8a:46:45:9a:d1:75:57:92:55:0d: db:75:05:41:ad:58:e7:42:a4:5a:bc:63:2a:aa:dc:b8:91:6e: c2:00:3c:4d:ae:c0:54:96:e1:05:81:11:b9:cf:1c:a2:cf:8b: 2a:e1:b6:86:0c:05:fc:52:71:e8:e6:ec:0b:7c:b3:8f:d2:85: 70:50:f8:de:43:0a:b8:25:db:fa:9a:4e:6f:ff:bb:51:9c:11: 68:54:f7:99:a7:4f:52:a2:c4:cb:39:dc:98:3a:18:75:07:b7: be:78:38:c9:ae:15:6a:65:b9:45:53:58:31:67:bd:7d:33:b5: 4e:65:c1:9e:da:89:61:cd:6d:8f:50:f0:52:bf:c2:60:d2:ca: a1:de:0c:06:77:7a:12:05:69:60:67:02:60:f4:03:6d:a0:ef: 0c:8e:7c:56 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt9ytt9qlMESXlUYtLnPibCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzMyNTYzN2NkNGRlOWFmZTUzYmQ0ZjEyMWFiZjYyMjQ1ZjY3MTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p7dXYwBZzDSCVvAMvYNPCdxJP+k FI9Xd9zQ7+d28bVBJJ0WRHU04wU88t29feZJog2rG03koRReERqlAu0lK56g3sBp XIKGL6Y2KrNHv4bSvTq1EpPbqwSF6+WFBNafKd6DBhyVn8JxA4biIuxcwFcqdiJe uM+qgcZtiR+t8IEeQUKl4SCe1LwiGJW7XuttjcXgb6jhmQAmdq9Hc0sE8GRgxsUD BAyAbA9zn93Fy+ar+siW2/2YzamJwaZVENJaMEGfISBwCM4wdmClPuB5b2fynr94 ndDhG3/PA7YxfOrHeuuPWL43/80uVZsSFfufzrZsJ9Sq9WCtEf+7PcsCcQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFEwyVjfNTemv5TvU8SGr9iJF9nFPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzU5ODQx NS00NDVlLTQ2OGQtOWY4ZS1kMTk4MzkyMDZjZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvNTk4NDE1 LTQ0NWUtNDY4ZC05ZjhlLWQxOTgzOTIwNmNlNi8xL1RESldOODFONmFfbE85VHhJ YXYySWtYMmNVOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwjDWMA8EAgACMAkDBwAgAQZ8FyQwDQYJKoZI hvcNAQELBQADggEBADrg2TNrv7pUcD70gURwtPLnLc6LRaXmiv5waXAzzjhhtLRr yOTWsjn2v9jBDnRQmzjBEhQ6qnIFLufzyjBlErM+KfKw2QV7EMrczI6IkKKNJ5a7 jqO0/2UecH2NpASoqqDDikZFmtF1V5JVDdt1BUGtWOdCpFq8Yyqq3LiRbsIAPE2u wFSW4QWBEbnPHKLPiyrhtoYMBfxScejm7At8s4/ShXBQ+N5DCrgl2/qaTm//u1Gc EWhU95mnT1KixMs53Jg6GHUHt754OMmuFWpluUVTWDFnvX0ztU5lwZ7aiWHNbY9Q 8FK/wmDSyqHeDAZ3ehIFaWBnAmD0A22g7wyOfFY= -----END CERTIFICATE-----Generated at Wed Feb 4 04:36:22 2026 by rpki-client