This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer (raw, json) Hash identifier: cuOljzrHU33JiX8n6dcEFbzwWOHNOw1KLW3Ww+lKsjM= Subject key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8A0AE359FD6821E118E9C4DBCD158 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213770 IP: 46.36.32.0/19 IP: 2a02:25b0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a0:ae:35:9f:d6:82:1e:11:8e:9c:4d:bc:d1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:05:a6:6e:7a:0d:f9:e9:8b:fb:b8:04:61: 09:92:e9:d4:b2:9d:f2:df:f6:0e:da:3c:c4:56:77: 2c:4c:57:29:fa:8c:6d:b5:9e:51:99:83:d4:6b:9e: 32:41:d9:db:90:35:ac:e4:1a:aa:71:79:23:a4:af: 89:85:d0:10:37:45:d9:92:69:b5:bb:e0:1c:21:20: 37:15:9c:f9:85:77:e9:8a:17:07:cd:34:23:34:8a: 1c:9f:36:43:31:26:55:37:f0:24:78:58:5e:ee:30: ad:75:0a:b9:24:37:51:8f:5e:97:a5:ef:5c:0e:ca: 47:81:1e:9e:c3:c7:80:9c:da:aa:91:86:e9:08:0e: 0a:ee:cf:87:e6:a4:9a:b1:a6:b0:a5:ae:ce:b3:0c: 6d:a0:87:83:a8:20:e5:80:ac:c0:00:0a:5c:93:91: 9a:fa:0b:91:22:43:1b:4d:ce:3b:dc:f6:3c:da:5e: e9:ab:3a:37:9a:02:06:6e:3e:17:f2:d7:f2:b5:6d: 5b:9d:d1:56:09:6c:bf:26:57:a2:50:29:a0:46:13: ba:22:86:10:d0:b9:32:41:d1:a4:7f:e6:d1:75:13: 88:d6:7d:88:be:8a:ac:ac:21:6d:9f:f7:01:c2:0a: e7:74:6a:04:57:80:27:5e:57:40:5b:8f:e1:59:4f: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.32.0/19 IPv6: 2a02:25b0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213770 Signature Algorithm: sha256WithRSAEncryption 1d:88:d7:6e:54:81:1f:6a:99:3d:7b:6f:ba:f6:06:c2:3c:2f: 93:42:1e:0f:a5:2b:99:ea:6d:5e:02:22:45:57:7b:2f:29:fb: 6e:f6:33:16:6e:f4:8a:eb:ed:2f:c4:c9:1f:88:99:79:49:4a: bf:c3:e4:d3:17:6e:4c:6b:c0:cf:a8:b2:1b:8a:4c:c3:89:82: 05:e9:20:9f:77:90:a1:cf:2a:be:02:81:a4:6d:92:2d:6b:e7: 7b:8b:03:4e:37:06:ca:bc:f6:a4:99:e3:af:f9:7f:09:de:c0: 0d:c3:16:60:18:4a:9a:53:ec:19:02:5d:f5:c0:34:52:6c:a3: 29:2c:47:78:ee:ed:a7:22:35:33:35:2c:a4:fe:de:2e:41:e6: e7:64:f5:4a:e3:05:b4:0a:d5:eb:b9:bd:12:10:f6:7d:30:b4: 68:62:6f:df:73:a9:d0:09:b4:68:d3:7c:78:fd:af:a1:1b:4b: f0:cc:bb:8b:79:35:d4:cb:db:38:ec:4e:d9:fd:59:e6:87:50: a8:d6:36:ca:87:e1:c2:47:95:6e:af:42:68:e8:83:61:34:40: e0:e9:4a:cd:11:ab:78:40:ef:34:11:44:31:9a:89:08:e8:08: 4a:a3:2f:9c:b5:01:b0:a0:48:e5:1d:07:68:0b:7a:39:cc:59: 34:c2:94:98 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yKCuNZ/Wgh4RjpxNvNFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzk4OGI5M2FiN2EyOTk5YTMyNTVlZWFlNGUxOGFiMjNiMmUwZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15YFpm56Dfnpi/u4BGEJkunUsp3y 3/YO2jzEVncsTFcp+oxttZ5RmYPUa54yQdnbkDWs5BqqcXkjpK+JhdAQN0XZkmm1 u+AcISA3FZz5hXfpihcHzTQjNIocnzZDMSZVN/AkeFhe7jCtdQq5JDdRj16Xpe9c DspHgR6ew8eAnNqqkYbpCA4K7s+H5qSasaawpa7OswxtoIeDqCDlgKzAAApck5Ga +guRIkMbTc473PY82l7pqzo3mgIGbj4X8tfytW1bndFWCWy/JleiUCmgRhO6IoYQ 0LkyQdGkf+bRdROI1n2IvoqsrCFtn/cBwgrndGoEV4AnXldAW4/hWU8CowIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEyYi5OreimZoyVe6uThirI7Lg8+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzRjMWY1 OS0wYzEyLTQxNTMtYTE1Yy03MTVmOWNkNjMwODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNGMxZjU5 LTBjMTItNDE1My1hMTVjLTcxNWY5Y2Q2MzA4Ni8xL1RKaUxrNnQ2S1ptakpWN3E1 T0dLc2pzdUR6NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFLiQgMA0EAgACMAcDBQAqAiWwMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNDCjANBgkqhkiG9w0BAQsFAAOCAQEAHYjXblSBH2qZ PXtvuvYGwjwvk0IeD6UrmeptXgIiRVd7Lyn7bvYzFm70iuvtL8TJH4iZeUlKv8Pk 0xduTGvAz6iyG4pMw4mCBekgn3eQoc8qvgKBpG2SLWvne4sDTjcGyrz2pJnjr/l/ Cd7ADcMWYBhKmlPsGQJd9cA0UmyjKSxHeO7tpyI1MzUspP7eLkHm52T1SuMFtArV 67m9EhD2fTC0aGJv33Op0Am0aNN8eP2voRtL8My7i3k11MvbOOxO2f1Z5odQqNY2 yofhwkeVbq9CaOiDYTRA4OlKzRGreEDvNBFEMZqJCOgISqMvnLUBsKBI5R0HaAt6 OcxZNMKUmA== -----END CERTIFICATE-----Generated at Tue Feb 3 04:55:20 2026 by rpki-client