This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer (raw, json) Hash identifier: bUyxOAFdP3WVH5HDYEd9vnk9JawLkfC32gD6sQkfG2M= Subject key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E6B485E91ADCF8C4B161142F25B1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205897 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e6:b4:85:e9:1a:dc:f8:c4:b1:61:14:2f:25:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c8dea04de6e37b190355e03cd2600c47212e18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:14:be:c4:59:ae:aa:8f:a0:63:f9:e1:82: ec:68:90:a0:68:37:7a:ef:33:72:4e:7b:72:4b:e9: 7f:83:1c:e6:d5:35:7f:7b:b1:fa:e9:0b:51:a2:3a: 5c:72:43:98:e6:e4:d5:e3:f0:f0:bf:3f:4c:00:be: d7:9f:6c:01:88:6d:f3:e4:74:1c:df:77:af:89:8a: e6:a8:27:8e:29:74:2b:8d:2e:8b:88:87:f7:f0:12: 2d:81:ec:38:0b:fe:de:f1:50:5c:d4:e3:5d:c0:e9: d9:b8:f9:ca:d9:1a:f6:62:92:29:6e:02:2f:f0:3c: 09:a4:cb:db:f1:8a:09:73:20:fc:ba:54:0b:32:c2: d3:04:ef:97:9d:3a:9f:68:d0:34:19:3e:5b:70:ab: c5:b8:ed:96:b2:45:de:60:81:d0:c9:ee:2a:b4:68: da:24:92:96:3e:3b:cc:46:7b:0a:46:a9:10:23:8e: d4:56:8c:d9:72:42:da:cc:51:29:59:9d:26:16:31: d9:5c:3a:0a:12:ff:c4:c1:17:7b:f0:70:b5:ba:31: 21:91:31:8c:b0:44:0f:ae:4c:46:f4:6f:28:fc:03: 98:53:f0:97:45:df:f1:ce:65:e8:45:9c:70:7f:5b: f5:de:75:73:68:fa:af:af:d6:18:a7:56:7f:a5:7f: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205897 Signature Algorithm: sha256WithRSAEncryption 20:1c:ca:48:50:39:ff:73:93:fe:26:b1:92:f8:3c:dc:99:44: 54:96:b1:41:06:30:9c:ca:7a:cb:24:84:27:a6:eb:de:86:17: db:ec:35:2c:f7:da:95:97:02:96:55:34:cf:0d:8b:8e:56:4e: bd:70:9c:c9:5c:d8:28:d2:69:aa:0d:aa:04:f7:13:fe:fc:64: 08:5f:03:88:14:c9:0c:d6:11:b7:1a:ed:36:cf:20:d2:22:14: c7:5d:8d:e1:1b:c6:b7:ce:4c:18:3f:17:c1:dd:19:59:d3:f5: ed:09:b2:09:ae:f9:30:6c:26:bd:7d:0b:66:34:a7:77:d7:50: 68:d6:d2:fb:b5:d1:02:ae:f7:7a:c9:a8:47:ab:3e:07:ec:5b: 76:2c:8a:7a:d0:63:b9:17:fb:cd:f9:20:fb:76:4f:40:4b:0d: af:20:f1:b1:2c:5b:36:e9:de:94:ae:90:de:bd:61:5e:27:a1: 1d:9f:55:17:54:0c:64:e6:55:69:0d:99:71:f9:56:e1:56:52: 31:0f:f3:5d:ad:09:4c:7b:9d:8c:90:56:da:56:65:fa:26:d6: 9c:fd:4d:87:a5:80:d3:66:ac:20:32:a3:f4:74:f1:87:5c:f9: d6:f0:a1:a2:1a:4c:08:8f:1f:e3:a4:e6:b8:29:89:4a:40:5f: 2a:07:ce:cd -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+OOa0heka3PjEsWEULyWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzhkZWEwNGRlNmUzN2IxOTAzNTVlMDNjZDI2MDBjNDcyMTJlMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkcUvsRZrqqPoGP54YLsaJCgaDd6 7zNyTntyS+l/gxzm1TV/e7H66QtRojpcckOY5uTV4/Dwvz9MAL7Xn2wBiG3z5HQc 33eviYrmqCeOKXQrjS6LiIf38BItgew4C/7e8VBc1ONdwOnZuPnK2Rr2YpIpbgIv 8DwJpMvb8YoJcyD8ulQLMsLTBO+XnTqfaNA0GT5bcKvFuO2WskXeYIHQye4qtGja JJKWPjvMRnsKRqkQI47UVozZckLazFEpWZ0mFjHZXDoKEv/EwRd78HC1ujEhkTGM sEQPrkxG9G8o/AOYU/CXRd/xzmXoRZxwf1v13nVzaPqvr9YYp1Z/pX9bRwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEyN6gTebjexkDVeA80mAMRyEuGOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2U4NTkw My03NTc0LTRhYjMtYjQ0MS01MjY3ZDcxNmU0Y2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZTg1OTAz LTc1NzQtNGFiMy1iNDQxLTUyNjdkNzE2ZTRjZS8xL1RJM3FCTjV1TjdHUU5WNER6 U1lBeEhJUzRZNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkSTANBgkqhkiG9w0BAQsFAAOCAQEAIBzKSFA5/3OT /iaxkvg83JlEVJaxQQYwnMp6yySEJ6br3oYX2+w1LPfalZcCllU0zw2LjlZOvXCc yVzYKNJpqg2qBPcT/vxkCF8DiBTJDNYRtxrtNs8g0iIUx12N4RvGt85MGD8Xwd0Z WdP17QmyCa75MGwmvX0LZjSnd9dQaNbS+7XRAq73esmoR6s+B+xbdiyKetBjuRf7 zfkg+3ZPQEsNryDxsSxbNunelK6Q3r1hXiehHZ9VF1QMZOZVaQ2ZcflW4VZSMQ/z Xa0JTHudjJBW2lZl+ibWnP1Nh6WA02asIDKj9HTxh1z51vChohpMCI8f46TmuCmJ SkBfKgfOzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:51 2026 by rpki-client