This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer (raw, json) Hash identifier: sbGt/3UQWCOqVYDxBxnUBhzZWXaWkbhyf4rxPl0WEUM= Subject key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C135AA5E20773E03A4E7BD85AD548F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201196 IP: 2001:67c:2d54::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5a:a5:e2:07:73:e0:3a:4e:7b:d8:5a:d5:48:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:75:dd:8d:bb:08:b4:89:c1:26:81:1f:17: cd:40:ff:54:b2:5c:6e:6f:1c:47:c3:4b:18:97:08: 0a:27:15:a2:fd:07:0a:dd:33:f8:bd:0f:65:6c:ab: 07:ae:02:73:27:04:c5:96:7b:dc:e2:d6:aa:d6:6e: 19:23:0f:de:b0:cb:0b:c2:93:3d:70:34:4a:85:4c: 48:be:31:54:35:4a:08:58:75:33:f7:15:55:52:bc: 09:5a:8d:0b:d5:ec:d2:89:f0:59:2a:a7:bd:82:41: 46:26:33:4d:d8:b1:04:1d:fc:38:b9:d5:cd:3b:5d: 6f:86:eb:ef:40:0e:96:0b:c8:72:f1:c0:b4:fb:2b: d1:7e:27:67:2e:ca:08:5b:5c:68:d9:ba:b1:b6:2b: dd:19:f2:2a:32:7a:b5:4a:87:5c:55:2c:99:9d:8a: e7:4f:d6:4d:53:0f:ff:09:43:c2:29:84:b3:7c:04: d0:0c:78:e1:f5:54:1f:cb:f3:82:0d:9f:e2:a5:e1: 8d:01:e1:25:79:9e:ac:d6:29:cf:f5:99:02:8a:e4: d1:8b:8f:25:31:9e:06:c8:26:c6:03:e4:76:fc:15: 1a:a3:70:10:72:71:bc:1c:1c:25:b5:d5:58:8d:3a: 24:75:f2:55:2e:6f:74:c3:51:77:48:9d:57:42:b4: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2d54::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201196 Signature Algorithm: sha256WithRSAEncryption 4c:bf:fd:f6:a9:d7:99:d8:ba:4d:d9:7a:1f:45:89:b8:fc:e8: 24:6b:9c:29:0a:46:64:a4:37:24:8f:c6:50:20:7a:15:39:25: 52:73:84:e7:c5:90:ec:9d:06:82:4f:9d:20:0c:72:3c:32:ca: 8a:76:fd:5d:5c:08:22:07:33:02:91:30:ac:16:33:f6:e5:3e: 41:62:9e:31:b9:c5:42:23:27:f0:42:01:c3:96:0a:d2:b5:cc: 56:13:2b:6d:c6:4b:94:b1:d5:26:72:15:58:92:43:cd:cd:b5: 40:2d:f2:d8:c9:48:77:bd:75:8f:5e:71:8c:01:52:e6:cc:0e: 26:df:32:c9:35:a9:66:c4:0b:b7:aa:7d:ab:e5:a7:ed:27:7c: 08:13:bb:37:5e:cc:61:b8:e0:bf:61:fb:0c:29:85:b2:1f:5b: 2b:7f:1f:37:5f:a3:f2:6e:4e:89:cb:46:69:e7:24:0f:ce:e7: a2:cc:9f:b4:50:33:63:d8:46:80:61:aa:bd:58:5f:bf:41:a9: 09:ae:8c:c7:85:57:64:f8:fe:3a:d4:23:29:08:a3:35:83:4b: 38:10:4a:91:6b:aa:91:1b:68:03:a9:7d:b4:20:1b:b5:f9:46: cb:10:ab:3b:71:36:e0:4d:d9:24:5b:00:f5:c9:12:11:a6:03: 9d:ad:2f:91 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt8E1ql4gdz4DpOe9ha1Uj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzRjZmNlNjBjOWIwZjJkNDdiMzYyODY0ZDhmZWJiMjI1YmI1MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK913Y27CLSJwSaBHxfNQP9Uslxu bxxHw0sYlwgKJxWi/QcK3TP4vQ9lbKsHrgJzJwTFlnvc4taq1m4ZIw/esMsLwpM9 cDRKhUxIvjFUNUoIWHUz9xVVUrwJWo0L1ezSifBZKqe9gkFGJjNN2LEEHfw4udXN O11vhuvvQA6WC8hy8cC0+yvRfidnLsoIW1xo2bqxtivdGfIqMnq1SodcVSyZnYrn T9ZNUw//CUPCKYSzfATQDHjh9VQfy/OCDZ/ipeGNAeEleZ6s1inP9ZkCiuTRi48l MZ4GyCbGA+R2/BUao3AQcnG8HBwltdVYjTokdfJVLm90w1F3SJ1XQrRE+QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFExM/OYMmw8tR7Nihk2P67Ilu1JEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2JmOGIw ZS1iZWRhLTRhNTYtYmFmMC04MmFkMTE2MjZlZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvYmY4YjBl LWJlZGEtNGE1Ni1iYWYwLTgyYWQxMTYyNmVlZC8xL1RFejg1Z3liRHkxSHMyS0dU WV9yc2lXN1VrUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC1UMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMR7DANBgkqhkiG9w0BAQsFAAOCAQEATL/99qnXmdi6Tdl6H0WJuPzoJGuc KQpGZKQ3JI/GUCB6FTklUnOE58WQ7J0Ggk+dIAxyPDLKinb9XVwIIgczApEwrBYz 9uU+QWKeMbnFQiMn8EIBw5YK0rXMVhMrbcZLlLHVJnIVWJJDzc21QC3y2MlId711 j15xjAFS5swOJt8yyTWpZsQLt6p9q+Wn7Sd8CBO7N17MYbjgv2H7DCmFsh9bK38f N1+j8m5OictGaeckD87nosyftFAzY9hGgGGqvVhfv0GpCa6Mx4VXZPj+OtQjKQij NYNLOBBKkWuqkRtoA6l9tCAbtflGyxCrO3E24E3ZJFsA9ckSEaYDna0vkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:20 2026 by rpki-client