This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer File: TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer (raw, json) Hash identifier: QnQ43xXE5nS6OMpNAaoQhJ1D0sefnARC385o3I/14Tw= Subject key identifier: 4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79113033E1E58E62DA5A58838882146B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203396 IP: 193.176.148.0 -- 193.176.152.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:30:33:e1:e5:8e:62:da:5a:58:83:88:82:14:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d0f257f339cfb9e2754b6cc24364f0f129058db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fe:09:9a:b5:8f:06:89:3f:af:dd:a8:14:8c: 9f:10:ef:08:3a:8b:fa:ce:74:62:45:ac:14:b8:fb: 78:3d:bf:20:5c:f1:85:63:62:11:ed:b3:3b:3b:c7: 0a:f1:87:e3:fa:06:35:ee:1b:de:62:90:7e:b1:c7: 1a:eb:fe:4d:40:cf:6d:72:51:68:fd:12:ba:c0:23: 86:7b:d9:2f:c6:c3:b6:9b:12:24:81:15:48:b7:ca: 38:9c:41:8d:1f:1c:9e:03:fb:59:0a:db:8f:73:c2: 56:dc:72:61:0f:09:9d:c3:75:42:7c:9c:22:40:a9: 8a:e2:6b:9c:6d:cb:6e:49:ec:8f:70:0b:5d:a3:fe: e3:9e:04:64:5d:c7:a0:3b:2f:24:04:af:c4:97:6e: be:4f:c9:9e:cf:19:80:ff:13:68:19:2f:e5:58:f7: 0b:59:64:1c:ea:60:f1:ab:5a:96:96:88:2b:66:43: 91:da:de:8e:b7:5d:50:aa:65:5b:9c:1d:48:a8:0a: f0:7f:85:7e:e5:c4:7c:7b:5a:86:24:09:ce:f7:30: e0:80:20:90:21:12:c8:a4:36:9b:f4:8d:76:f1:47: 3e:1e:d4:95:31:7a:3f:97:3d:c6:12:10:7b:ce:31: 82:7e:e6:c1:0d:5e:5e:42:76:54:62:65:01:c7:93: 03:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.148.0-193.176.152.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203396 Signature Algorithm: sha256WithRSAEncryption 8d:61:be:57:a7:0f:a5:59:72:54:84:31:0e:9b:9d:a2:27:88: 4f:33:46:ad:6d:9b:84:fd:ee:e2:4f:df:3c:27:46:aa:a9:af: 19:ab:d6:f9:1c:bb:2c:54:5f:28:fb:fa:cf:46:d2:a9:3a:89: 65:c0:25:c0:9e:a8:80:47:45:93:a6:d0:5c:ef:7b:83:41:ce: 95:e4:5b:96:04:a9:bc:bd:1a:aa:2b:19:19:44:55:70:b9:a7: ef:e0:ef:34:9b:b5:1b:03:c8:c4:b9:b5:6c:6d:21:24:99:77: 26:3a:29:27:eb:9b:c4:9c:0f:ff:d7:92:f5:9a:10:52:2f:1c: 1a:94:52:e4:0f:e8:49:d3:c0:dc:51:4e:19:ae:42:1a:b5:a5: 5a:3a:2b:12:12:3d:5b:4e:12:91:77:12:aa:db:0d:65:4f:50: 6a:62:54:19:9c:ee:ce:71:ce:a6:f7:bc:be:6a:78:6e:d3:39: 16:8e:f5:38:3c:4e:d1:42:b0:66:82:e3:ab:07:13:68:cc:82: dc:1d:78:d9:e7:0f:a1:01:f3:34:05:e0:25:eb:8a:89:72:87: 62:3c:32:ca:d1:a5:b7:d3:77:5b:15:4a:ff:79:26:6e:4e:2d: 7f:b1:95:8b:2b:1d:ce:dc:5a:3f:56:c6:9f:7e:f8:2b:45:7d: a5:da:58:cd -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZt5ETAz4eWOYtpaWIOIghRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDBmMjU3ZjMzOWNmYjllMjc1NGI2Y2MyNDM2NGYwZjEyOTA1OGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf4JmrWPBok/r92oFIyfEO8IOov6 znRiRawUuPt4Pb8gXPGFY2IR7bM7O8cK8Yfj+gY17hveYpB+scca6/5NQM9tclFo /RK6wCOGe9kvxsO2mxIkgRVIt8o4nEGNHxyeA/tZCtuPc8JW3HJhDwmdw3VCfJwi QKmK4mucbctuSeyPcAtdo/7jngRkXcegOy8kBK/El26+T8mezxmA/xNoGS/lWPcL WWQc6mDxq1qWlogrZkOR2t6Ot11QqmVbnB1IqArwf4V+5cR8e1qGJAnO9zDggCCQ IRLIpDab9I128Uc+HtSVMXo/lz3GEhB7zjGCfubBDV5eQnZUYmUBx5MDhwIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFE0PJX8znPueJ1S2zCQ2Tw8SkFjbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzQyMzll OS1lNjcwLTQ0ZjEtODY4ZS1mM2Y1ODFkZmM2NDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvNDIzOWU5 LWU2NzAtNDRmMS04NjhlLWYzZjU4MWRmYzY0OC8xL1RROGxmek9jLTU0blZMYk1K RFpQRHhLUVdOcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBALBsJQDBADBsJgwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAxqEMA0GCSqGSIb3DQEBCwUAA4IBAQCNYb5Xpw+lWXJUhDEOm52i J4hPM0atbZuE/e7iT988J0aqqa8Zq9b5HLssVF8o+/rPRtKpOollwCXAnqiAR0WT ptBc73uDQc6V5FuWBKm8vRqqKxkZRFVwuafv4O80m7UbA8jEubVsbSEkmXcmOikn 65vEnA//15L1mhBSLxwalFLkD+hJ08DcUU4ZrkIataVaOisSEj1bThKRdxKq2w1l T1BqYlQZnO7Occ6m97y+anhu0zkWjvU4PE7RQrBmguOrBxNozILcHXjZ5w+hAfM0 BeAl64qJcodiPDLK0aW303dbFUr/eSZuTi1/sZWLKx3O3Fo/VsaffvgrRX2l2ljN -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:39 2026 by rpki-client