This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer File: TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer (raw, json) Hash identifier: tv/LuDXlAsuHXjdGc/Vy+hSEzv9S2xsDjy2Bz5b/AoI= Subject key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1C14F8C3041C5A524D1C9CE8E3F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.132.228.0/22 IP: 91.226.104.0/22 IP: 92.53.224.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1c:14:f8:c3:04:1c:5a:52:4d:1c:9c:e8:e3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:78:e0:40:34:39:07:48:d5:6a:ed:85:13:1f: 14:f1:69:f2:ec:ca:f3:04:27:67:bf:07:73:7d:83: cc:a6:d3:08:fa:3a:2e:24:d0:a5:c3:b9:be:d5:4d: f9:52:e7:fb:23:5f:20:5b:d3:a8:01:04:d0:43:ae: 8e:f1:48:31:d1:f0:43:d0:06:e6:f0:42:3a:88:d5: e0:5c:7d:3d:20:6d:3a:ac:dc:c6:ac:2f:61:3f:70: f6:44:82:ca:9c:0e:9f:63:a2:ad:db:26:df:d5:0e: e7:23:c6:ff:54:c7:11:5d:f2:b9:1d:d2:c6:92:94: ae:90:57:ad:87:35:98:17:1d:3f:79:75:23:be:e7: 5f:35:38:d4:ab:17:c0:d8:09:e2:3a:7e:8e:75:15: 91:fa:42:dd:b4:5e:3d:8d:63:ee:3a:4d:09:a8:cb: 5d:b6:49:57:67:a7:8e:4d:8e:4a:be:59:c6:01:09: db:c9:ca:3a:4a:30:f9:d6:23:4d:ae:ae:bd:26:9c: 3c:08:61:db:fa:27:59:62:45:1a:f2:ac:ac:24:c2: 30:61:1c:a1:8a:8c:13:80:41:7b:44:24:0d:e5:ee: ac:49:93:e6:10:92:37:c6:b8:ea:0d:6b:83:1c:8f: 83:c3:83:31:0e:9a:f6:e0:13:ea:59:50:1f:98:a6: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.228.0/22 91.226.104.0/22 92.53.224.0/21 Signature Algorithm: sha256WithRSAEncryption 10:a5:37:c8:b2:ea:50:9f:2e:c7:77:a3:00:ae:a0:36:1d:77: e9:74:93:a8:c5:4b:5b:2b:1e:c6:35:88:cc:fb:59:ea:73:41: a3:13:2d:74:3c:26:be:4b:87:16:1c:eb:47:f8:a3:f0:8c:66: d6:91:f6:f5:c9:43:8f:7c:e6:81:8e:a9:9d:a6:18:9d:a9:00: 69:99:ea:d2:96:8d:b9:74:6e:12:35:89:d4:e8:9c:a9:fb:13: f9:68:f4:85:27:99:66:54:38:56:3b:d5:bc:cd:cc:8d:d4:5f: 8b:1a:d5:61:5a:29:94:7e:5b:14:82:33:e5:39:38:53:f4:13: 5a:e4:a4:fd:e2:3b:bf:be:92:69:08:6d:0f:41:04:71:2d:66: df:95:66:a5:db:13:06:e4:27:8e:47:5b:36:fe:72:9b:f5:cb: 09:ef:62:db:23:91:22:9f:de:41:92:54:78:26:c8:ce:e9:b1: ae:72:53:77:41:dc:1a:70:da:66:c4:88:ee:43:ab:3a:78:76: 39:7c:2c:1e:89:50:0c:19:01:c4:0b:bb:c9:6b:df:1f:88:99: 77:7d:fe:16:7f:1e:e3:6c:ac:bd:44:03:a6:42:40:a7:19:5b: 5e:d4:88:88:0a:70:c0:3c:a8:bb:1c:1a:d3:1d:0a:70:6d:64: 2f:7c:ed:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt6WxwU+MMEHFpSTRyc6OP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzRiZTQzMzk0YTdjMmJmMWU4ZmRmYmIxZDUwNmZhMzdhYzczMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73jgQDQ5B0jVau2FEx8U8Wny7Mrz BCdnvwdzfYPMptMI+jouJNClw7m+1U35Uuf7I18gW9OoAQTQQ66O8Ugx0fBD0Abm 8EI6iNXgXH09IG06rNzGrC9hP3D2RILKnA6fY6Kt2ybf1Q7nI8b/VMcRXfK5HdLG kpSukFethzWYFx0/eXUjvudfNTjUqxfA2AniOn6OdRWR+kLdtF49jWPuOk0JqMtd tklXZ6eOTY5KvlnGAQnbyco6SjD51iNNrq69Jpw8CGHb+idZYkUa8qysJMIwYRyh iowTgEF7RCQN5e6sSZPmEJI3xrjqDWuDHI+Dw4MxDpr24BPqWVAfmKZQQQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFExL5DOUp8K/Ho/fux1Qb6N6xzIxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkL2E1MDU2 Zi02OTQ4LTQxMzAtOTA3Ny01ZjNkMDZmNmE1ZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvYTUwNTZm LTY5NDgtNDEzMC05MDc3LTVmM2QwNmY2YTVkMi8xL1RFdmtNNVNud3I4ZWo5LTdI VkJ2bzNySE1qRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCW4TkAwQCW+JoAwQDXDXgMA0GCSqGSIb3DQEB CwUAA4IBAQAQpTfIsupQny7Hd6MArqA2HXfpdJOoxUtbKx7GNYjM+1nqc0GjEy10 PCa+S4cWHOtH+KPwjGbWkfb1yUOPfOaBjqmdphidqQBpmerSlo25dG4SNYnU6Jyp +xP5aPSFJ5lmVDhWO9W8zcyN1F+LGtVhWimUflsUgjPlOThT9BNa5KT94ju/vpJp CG0PQQRxLWbflWal2xMG5CeOR1s2/nKb9csJ72LbI5Ein95BklR4JsjO6bGuclN3 QdwacNpmxIjuQ6s6eHY5fCweiVAMGQHEC7vJa98fiJl3ff4Wfx7jbKy9RAOmQkCn GVte1IiICnDAPKi7HBrTHQpwbWQvfO3M -----END CERTIFICATE-----Generated at Tue Feb 10 01:06:12 2026 by rpki-client