This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer File: TJMCnFsmOc0pufndUpTMlO9S1q8.cer (raw, json) Hash identifier: pSKx8+vY2sWqoXKPd4L2luj36/U8L1Ay+pd0mhwWA6M= Subject key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11754716FB82F69F714292342A87EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48707 AS: 212917 IP: 91.230.200.0 -- 91.230.205.255 IP: 185.237.28.0/22 IP: 185.238.137.0/24 IP: 185.253.212.0/22 IP: 195.2.208.0/23 IP: 2a0c:b40::/29 IP: 2a0c:51c0::/29 IP: 2a13:300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:75:47:16:fb:82:f6:9f:71:42:92:34:2a:87:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:43:3d:50:13:ed:dc:2e:20:b2:8e:37:d9: 57:cd:da:c7:fd:fc:af:5b:af:ec:cd:c1:d2:e2:04: 45:41:f8:c5:54:fe:74:55:24:21:05:69:8f:26:d3: ea:45:11:a7:e8:c6:08:c7:44:82:40:e7:91:33:dd: 46:67:1d:6f:00:4b:a2:55:fe:79:4e:f5:a6:66:45: 16:44:10:15:aa:6f:33:eb:a7:df:5b:68:b8:f3:1e: fa:33:6f:9d:18:83:cb:4e:42:ac:d7:84:e4:12:cc: 91:f1:c4:39:47:a5:77:75:4e:44:3b:76:db:a2:16: 34:9c:1d:80:1c:b7:f2:7a:72:2b:36:c3:90:02:8c: 87:f6:f1:f3:f5:1a:c4:43:a5:ab:58:1f:b4:4a:d9: c2:05:34:9d:0d:19:9f:81:af:bf:19:24:88:a3:0c: d5:d2:05:e0:1a:df:f7:d0:18:16:48:cf:06:2b:ed: 1c:18:96:32:03:5a:77:1c:07:cd:fe:cc:02:a5:36: eb:0a:33:89:c4:b9:91:e8:a1:8b:66:9a:51:73:fd: 44:73:42:25:b4:b8:18:7b:29:74:1f:ee:f4:96:68: eb:b9:c2:50:a3:24:68:71:1b:57:60:6d:f7:6b:c0: 72:87:d8:7f:4b:4f:94:18:21:72:80:6a:57:0e:b1: 7e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.200.0-91.230.205.255 185.237.28.0/22 185.238.137.0/24 185.253.212.0/22 195.2.208.0/23 IPv6: 2a0c:b40::/29 2a0c:51c0::/29 2a13:300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48707 212917 Signature Algorithm: sha256WithRSAEncryption 91:c7:5a:10:b1:97:9e:4f:9a:15:a9:d1:2e:16:a0:c7:61:83: f7:9e:af:90:91:91:42:b5:4a:6f:87:e0:f4:df:87:67:bc:24: 51:d1:6b:2f:2a:c3:a6:e6:d1:a9:ca:ad:57:2b:76:91:b1:f2: 07:80:f9:a4:01:9d:4e:b4:f2:ec:4e:8e:4e:70:80:38:51:40: 77:1a:fa:23:8b:5f:26:d7:a4:56:7a:a7:fb:b4:b6:c9:73:64: 75:81:93:ae:18:f3:c6:e2:93:5f:05:28:ad:6e:52:29:d8:a4: dc:ee:a7:08:de:1d:73:20:ef:1b:ac:56:fd:02:40:dc:8c:fb: ed:fe:fb:5d:09:59:76:b9:e5:54:18:ec:af:af:85:1a:9d:a8: 64:c2:bf:d3:30:aa:17:25:cc:78:b9:63:5d:ba:61:79:99:5e: ed:58:5b:d8:79:df:a5:58:8a:55:c4:f6:4e:d6:b0:25:e5:e9: 91:cb:c7:a8:3f:d9:3e:4e:0f:e0:9c:e7:1e:fc:fb:0e:bc:77: 8c:18:c6:bf:82:13:c1:02:c3:96:85:cc:e4:3f:e3:3a:5c:19: a5:4b:4b:2e:ca:3f:72:ea:5e:a3:8a:6b:f4:c2:1d:4d:2e:11: 83:fa:64:b0:ca:2d:57:cb:0f:27:ac:82:54:5a:84:81:8f:5a: 69:e6:66:1d -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt8EXVHFvuC9p9xQpI0KofvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzkzMDI5YzViMjYzOWNkMjliOWY5ZGQ1Mjk0Y2M5NGVmNTJkNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj5DPVAT7dwuILKON9lXzdrH/fyv W6/szcHS4gRFQfjFVP50VSQhBWmPJtPqRRGn6MYIx0SCQOeRM91GZx1vAEuiVf55 TvWmZkUWRBAVqm8z66ffW2i48x76M2+dGIPLTkKs14TkEsyR8cQ5R6V3dU5EO3bb ohY0nB2AHLfyenIrNsOQAoyH9vHz9RrEQ6WrWB+0StnCBTSdDRmfga+/GSSIowzV 0gXgGt/30BgWSM8GK+0cGJYyA1p3HAfN/swCpTbrCjOJxLmR6KGLZppRc/1Ec0Il tLgYeyl0H+70lmjrucJQoyRocRtXYG33a8Byh9h/S0+UGCFygGpXDrF+cwIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFEyTApxbJjnNKbn53VKUzJTvUtavMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzdiZDcy OS05OGU1LTQzZmYtYWZlNi0xODdiMWY3N2MxYTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvN2JkNzI5 LTk4ZTUtNDNmZi1hZmU2LTE4N2IxZjc3YzFhNS8xL1RKTUNuRnNtT2MwcHVmbmRV cFRNbE85UzFxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGCCsGAQUF BwEHAQH/BE0wSzAsBAIAATAmMAwDBANb5sgDBAFb5swDBAK57RwDBAC57okDBAK5 /dQDBAHDAtAwGwQCAAIwFQMFAyoMC0ADBQMqDFHAAwUDKhMDADAfBggrBgEFBQcB CAEB/wQQMA6gDDAKAgMAvkMCAwM/tTANBgkqhkiG9w0BAQsFAAOCAQEAkcdaELGX nk+aFanRLhagx2GD956vkJGRQrVKb4fg9N+HZ7wkUdFrLyrDpubRqcqtVyt2kbHy B4D5pAGdTrTy7E6OTnCAOFFAdxr6I4tfJtekVnqn+7S2yXNkdYGTrhjzxuKTXwUo rW5SKdik3O6nCN4dcyDvG6xW/QJA3Iz77f77XQlZdrnlVBjsr6+FGp2oZMK/0zCq FyXMeLljXbpheZle7Vhb2HnfpViKVcT2TtawJeXpkcvHqD/ZPk4P4JznHvz7Drx3 jBjGv4ITwQLDloXM5D/jOlwZpUtLLso/cupeo4pr9MIdTS4Rg/pksMotV8sPJ6yC VFqEgY9aaeZmHQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:40 2026 by rpki-client