This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer File: TNR7i4qp-8zP89UHgU_HRGSiq_A.cer (raw, json) Hash identifier: VJ2GYroh43Q+aoVr5FODEJvZki7m7SC50lLqQi4a3cQ= Subject key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA67845E94F3AD40957AD8BD49B0EEA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60090 IP: 89.200.243.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:78:45:e9:4f:3a:d4:09:57:ad:8b:d4:9b:0e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:6b:89:74:39:14:f0:ea:f2:c8:3f:d3:f2: ac:94:b2:c3:68:cd:e8:4b:eb:c2:3c:f7:81:b3:8c: d3:b1:e7:42:1d:7c:d1:1c:97:cf:4e:19:9b:31:aa: ba:91:1c:f6:a7:3e:63:d7:ca:d9:1d:a6:3c:1a:fc: 35:c8:9f:03:ce:d4:3b:25:ec:33:34:f7:16:14:81: 44:bb:30:e7:b4:5b:16:f4:87:1e:98:4b:3c:c6:10: b0:4d:a4:67:03:41:67:f1:f7:a0:38:a8:37:9a:98: 8b:7c:25:a9:de:ff:19:0d:d8:5c:9d:f5:ba:60:33: 1a:25:dd:88:35:e3:f2:29:1c:b0:dd:69:1a:04:d7: f6:f6:98:6e:fd:1b:31:fb:36:c9:70:cf:f0:08:6b: 8d:2f:c0:64:22:c9:63:b2:d8:fa:55:83:c1:5e:04: f2:5f:4b:7c:7c:ce:1d:8f:6d:ab:26:0f:b3:32:5d: 60:5d:94:bf:9e:dc:3d:cc:06:b6:f4:17:fd:95:69: 07:46:14:98:16:f3:27:fe:43:b7:4f:8a:e3:53:29: 9a:01:c0:3b:ba:4f:1d:c9:a1:60:b1:8f:3c:dc:c2: dd:8a:0b:d4:4f:cc:2b:67:81:c5:02:d6:21:60:f2: 55:3e:91:28:15:55:15:5b:67:0f:b7:ff:ec:16:8f: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.200.243.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60090 Signature Algorithm: sha256WithRSAEncryption aa:02:11:d5:49:55:5a:87:c9:4e:0d:90:db:37:81:a2:d8:c9: f5:75:b9:29:42:db:94:c2:aa:e8:74:7e:45:3c:fb:ad:27:69: f6:96:44:a6:1e:ff:08:82:2f:31:92:f1:a5:1f:82:58:be:f1: 29:b1:39:7e:92:d6:19:1d:ea:37:30:a2:fd:52:7e:94:b0:9e: 3d:81:b8:c0:45:c9:40:da:e7:7c:7e:37:bd:12:61:85:d6:fc: 0f:7a:e7:4f:f0:94:e7:f9:2a:d8:e0:5c:d7:6e:db:29:e2:73: 31:e8:fe:ce:2d:28:54:15:57:8a:e4:3a:ac:43:3e:46:74:95: 08:e4:b0:9b:0d:44:87:5a:2f:59:9b:73:d7:b9:16:ef:31:54: 89:ac:bf:ee:69:fc:ab:e0:90:72:dc:28:80:be:c5:d4:a3:c2: 54:59:8c:93:c4:27:19:62:a2:ed:51:f2:0c:3a:2d:fa:c3:ee: 1a:68:16:3d:6b:36:07:78:e7:de:b8:3e:41:56:b9:49:3b:96: 62:81:03:a8:79:f9:97:49:07:35:ec:12:d5:bf:27:0d:a2:4a: d4:67:b1:5e:de:dc:f8:c1:80:9f:68:9e:ff:0a:64:60:af:1a: fb:d9:5f:cb:e1:43:46:eb:bc:12:b0:db:88:40:f9:3e:28:b6: e6:f6:23:0a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pnhF6U861AlXrYvUmw7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2Q0N2I4YjhhYTlmYmNjY2ZmM2Q1MDc4MTRmYzc0NDY0YTJhYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcdriXQ5FPDq8sg/0/KslLLDaM3o S+vCPPeBs4zTsedCHXzRHJfPThmbMaq6kRz2pz5j18rZHaY8Gvw1yJ8DztQ7Jewz NPcWFIFEuzDntFsW9IcemEs8xhCwTaRnA0Fn8fegOKg3mpiLfCWp3v8ZDdhcnfW6 YDMaJd2INePyKRyw3WkaBNf29phu/Rsx+zbJcM/wCGuNL8BkIsljstj6VYPBXgTy X0t8fM4dj22rJg+zMl1gXZS/ntw9zAa29Bf9lWkHRhSYFvMn/kO3T4rjUymaAcA7 uk8dyaFgsY883MLdigvUT8wrZ4HFAtYhYPJVPpEoFVUVW2cPt//sFo/KYwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEzUe4uKqfvMz/PVB4FPx0RkoqvwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzVjYTI5 NC04OTdiLTRlNDktYTljNy1iYzQ4YjQxZjQ5OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvNWNhMjk0 LTg5N2ItNGU0OS1hOWM3LWJjNDhiNDFmNDk4Yi8xL1ROUjdpNHFwLTh6UDg5VUhn VV9IUkdTaXFfQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAWcjzMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDqujANBgkqhkiG9w0BAQsFAAOCAQEAqgIR1UlVWofJTg2Q2zeBotjJ9XW5KULb lMKq6HR+RTz7rSdp9pZEph7/CIIvMZLxpR+CWL7xKbE5fpLWGR3qNzCi/VJ+lLCe PYG4wEXJQNrnfH43vRJhhdb8D3rnT/CU5/kq2OBc127bKeJzMej+zi0oVBVXiuQ6 rEM+RnSVCOSwmw1Eh1ovWZtz17kW7zFUiay/7mn8q+CQctwogL7F1KPCVFmMk8Qn GWKi7VHyDDot+sPuGmgWPWs2B3jn3rg+QVa5STuWYoEDqHn5l0kHNewS1b8nDaJK 1GexXt7c+MGAn2ie/wpkYK8a+9lfy+FDRuu8ErDbiED5Pii25vYjCg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:15 2026 by rpki-client