This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer (raw, json) Hash identifier: ErqCPNSmPl8pOUx369I5t0asJ3JPYyNhMprxoW9XVu4= Subject key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80B149A9EC1AFD6D23038AEC8BD9BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196858 IP: 213.5.200.0/21 IP: 2001:67c:188c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b1:49:a9:ec:1a:fd:6d:23:03:8a:ec:8b:d9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c61d118479b5222ef0f864167cac5b4c07cc219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:6e:45:78:23:77:aa:26:e8:6e:8f:58:1f: 73:4a:bd:ab:c9:c9:dd:7c:01:31:aa:6e:e3:37:2c: 92:ed:1f:35:d6:26:ff:9a:8c:83:b9:11:95:02:98: e4:ca:fe:f2:6f:74:b7:65:91:95:5c:2a:d2:07:fa: 58:d2:b1:da:77:a0:db:8e:88:a2:c3:fc:75:78:2e: 6d:17:b3:07:c2:b7:ec:48:79:05:38:c2:f3:da:9c: d6:a6:41:9e:72:ea:c9:2e:15:2b:70:17:5d:8c:4b: 56:61:83:72:73:49:b7:ba:eb:ac:cd:65:01:07:cd: d2:29:57:4e:6a:db:60:c1:5e:62:e7:98:ab:01:95: 80:fa:57:cd:2d:b4:df:7e:6f:14:0e:63:6d:a2:39: cd:7e:0f:15:5a:06:81:81:fa:51:1d:88:b0:37:bb: 52:7b:ff:f2:76:6c:b2:4e:94:1b:87:3d:8e:9f:50: f2:06:c4:61:8e:bc:31:7d:e9:91:50:46:d1:df:9f: 0c:05:6c:0d:5c:45:01:88:9a:b2:e5:e3:8d:e5:1a: 1b:8b:40:ed:ee:39:44:14:32:54:a5:8c:3a:fd:99: 75:ba:b7:74:4d:a2:ef:ee:a8:c0:16:b2:5a:3c:3e: 07:fa:47:89:4b:c0:46:75:59:df:ae:8c:7b:1a:f8: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.5.200.0/21 IPv6: 2001:67c:188c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196858 Signature Algorithm: sha256WithRSAEncryption 92:ad:d0:87:a1:f3:0b:6b:fc:1b:ad:0b:5e:e2:bf:8d:4a:2c: 4e:9f:62:76:44:f5:1b:23:a5:0f:48:8d:fe:95:ea:33:2e:f3: 6c:d7:ce:79:d5:30:29:d9:80:09:41:a0:95:d3:fb:55:9a:9d: 00:62:41:d9:84:94:57:91:c9:9d:4d:4c:13:59:fe:79:91:25: 82:86:d9:d4:c6:76:8c:02:3b:d7:88:0e:6f:d7:75:bd:ae:82: cf:db:aa:92:54:3d:9a:f8:2a:fa:9a:66:28:68:b3:a9:a8:c5: c4:ba:d4:65:81:99:3c:7a:45:d6:5e:96:ea:34:9f:f9:6f:a0: 31:25:5e:82:e7:69:dc:76:a3:20:f7:58:aa:da:de:4e:10:b7: 08:d0:9c:28:78:6a:18:13:20:17:74:f7:ee:85:21:3c:67:f2: de:a9:f8:fc:52:b8:e9:be:dd:c0:f1:fd:ec:46:b8:43:23:f9: 3e:c2:0d:b4:d2:42:ca:b0:92:52:bd:1a:e3:37:3c:c4:99:d1: a4:85:3b:16:cb:ba:59:83:df:5b:6a:18:6f:bb:40:d9:ba:23: ef:cb:23:ab:99:e3:3a:27:e3:b6:d2:27:ef:64:7c:21:53:e3: b8:ea:49:a6:e2:44:bf:b5:a0:de:c4:09:0e:2e:89:b5:78:15: 00:bc:d3:6c -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt8gLFJqewa/W0jA4rsi9m8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzYxZDExODQ3OWI1MjIyZWYwZjg2NDE2N2NhYzViNGMwN2NjMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdRuRXgjd6om6G6PWB9zSr2rycnd fAExqm7jNyyS7R811ib/moyDuRGVApjkyv7yb3S3ZZGVXCrSB/pY0rHad6Dbjoii w/x1eC5tF7MHwrfsSHkFOMLz2pzWpkGecurJLhUrcBddjEtWYYNyc0m3uuuszWUB B83SKVdOattgwV5i55irAZWA+lfNLbTffm8UDmNtojnNfg8VWgaBgfpRHYiwN7tS e//ydmyyTpQbhz2On1DyBsRhjrwxfemRUEbR358MBWwNXEUBiJqy5eON5Robi0Dt 7jlEFDJUpYw6/Zl1urd0TaLv7qjAFrJaPD4H+keJS8BGdVnfrox7GvjIAwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFExh0RhHm1Ii7w+GQWfKxbTAfMIZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzZlOWRm ZC1jZTQ3LTRlNjEtYTMxNS1lNWFhNzQ3MDBmOWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvNmU5ZGZk LWNlNDctNGU2MS1hMzE1LWU1YWE3NDcwMGY5ZC8xL1RHSFJHRWViVWlMdkQ0WkJa OHJGdE1COHdoay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQD1QXIMA8EAgACMAkDBwAgAQZ8GIwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAwD6MA0GCSqGSIb3DQEBCwUAA4IBAQCSrdCHofML a/wbrQte4r+NSixOn2J2RPUbI6UPSI3+leozLvNs18551TAp2YAJQaCV0/tVmp0A YkHZhJRXkcmdTUwTWf55kSWChtnUxnaMAjvXiA5v13W9roLP26qSVD2a+Cr6mmYo aLOpqMXEutRlgZk8ekXWXpbqNJ/5b6AxJV6C52ncdqMg91iq2t5OELcI0JwoeGoY EyAXdPfuhSE8Z/Leqfj8Urjpvt3A8f3sRrhDI/k+wg200kLKsJJSvRrjNzzEmdGk hTsWy7pZg99bahhvu0DZuiPvyyOrmeM6J+O20ifvZHwhU+O46kmm4kS/taDexAkO Lom1eBUAvNNs -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:01 2026 by rpki-client