This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer File: TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.cer (raw, json) Hash identifier: aQV6Kmk7/DwmEo/x0cTK9USWdcs1VfQtHU7YHhEkFU0= Subject key identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB099A0C1A8EBC6BB5AD794989B1A0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58340 IP: 83.146.128.0/19 IP: 84.240.112.0/20 IP: 193.177.188.0/22 IP: 2a0c:a440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:09:9a:0c:1a:8e:bc:6b:b5:ad:79:49:89:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d0f2ee77621ea25c2819d4eac95c581877e30cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:ce:50:f7:c8:90:0c:00:f3:16:79:0f:b2: 1a:a3:3d:2f:ce:ac:25:64:f2:c8:6a:3d:56:c9:b5: 41:19:a7:fe:f7:dd:d1:5a:f7:cd:74:2d:22:3c:b2: 24:f9:d3:69:e5:58:8e:43:d1:55:36:f8:96:7b:77: 5a:02:b9:e8:75:12:db:2f:d9:f1:83:94:f1:23:ae: d2:b2:a5:b9:d7:33:ee:65:86:82:b4:c8:6a:d6:81: ca:c7:35:00:2a:be:5f:5f:97:97:13:51:80:10:fb: a7:ec:bd:e9:62:53:5e:c9:07:20:7a:c1:c6:79:ba: cc:f0:7c:35:ff:e9:b6:52:53:ae:9a:bc:d9:ae:52: 17:4e:fc:fb:f1:f5:d9:87:7e:f1:f9:0e:f9:95:c5: dd:4c:66:fd:4c:61:0f:05:76:c5:2c:8b:e0:78:bc: 00:d5:14:a7:f3:36:4c:d1:0e:4d:24:e5:71:bf:a7: 9c:11:c1:07:a3:dc:13:00:7b:1e:70:d4:a7:91:07: 16:09:fe:f2:f5:ea:cd:b5:4c:17:62:28:7b:62:e3: 67:a7:76:9a:94:54:80:8a:70:5b:78:7c:bd:8a:64: 48:25:e2:3e:08:70:9d:21:a2:a7:bf:1a:6d:d0:ad: f6:08:2f:d9:12:12:db:4a:c9:d1:33:91:5c:c0:c1: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0F:2E:E7:76:21:EA:25:C2:81:9D:4E:AC:95:C5:81:87:7E:30:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e828b7-b1d8-4f40-bd30-7c0497913af0/1/TQ8u53Yh6iXCgZ1OrJXFgYd-MM0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.146.128.0/19 84.240.112.0/20 193.177.188.0/22 IPv6: 2a0c:a440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58340 Signature Algorithm: sha256WithRSAEncryption 1f:2a:49:68:ca:76:40:cf:14:ad:ce:7b:57:b2:a7:d9:30:2c: 50:2f:7d:12:ee:cd:67:91:e7:53:3a:51:e5:2f:18:06:e3:bd: 2f:3b:ca:ea:84:f8:34:50:c3:02:52:db:7d:4d:82:d3:1e:6c: 59:da:5b:a5:fa:83:de:b7:33:d7:f7:62:02:2b:ad:7e:93:4f: 82:44:5f:4c:51:36:8b:51:7e:a0:24:96:ad:4d:36:46:a0:76: c6:7c:02:34:40:15:bf:db:4a:7e:93:3d:dc:9a:3d:ca:cb:e5: 67:89:a6:8e:9b:1d:83:e7:f9:a2:ee:46:f0:99:45:84:7a:ab: 30:11:c9:33:38:9e:2c:b6:51:73:e5:57:77:e1:46:00:36:8a: e2:fd:5f:55:f1:26:f7:00:2e:0d:c7:ca:a8:bb:60:d5:28:c0: 7d:9e:69:12:93:7d:ac:dd:b1:f1:69:29:9a:b3:9d:1e:60:ac: cc:92:10:80:d3:18:c5:9a:10:c2:e4:aa:67:cc:10:66:d0:bb: 1d:fb:f3:25:e7:5a:7c:b3:c0:99:cb:09:b8:17:c7:e3:8e:2e: df:d6:f9:2a:f8:8e:58:34:21:8e:fb:9f:40:0b:ea:e7:ad:d3: 6e:9d:ef:89:8f:7d:f5:09:ae:a6:6f:b8:cd:00:d4:e9:4e:d6: 9a:b8:c4:a2 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9ywmaDBqOvGu1rXlJibGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDBmMmVlNzc2MjFlYTI1YzI4MTlkNGVhYzk1YzU4MTg3N2UzMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAvOUPfIkAwA8xZ5D7Iaoz0vzqwl ZPLIaj1WybVBGaf+993RWvfNdC0iPLIk+dNp5ViOQ9FVNviWe3daArnodRLbL9nx g5TxI67SsqW51zPuZYaCtMhq1oHKxzUAKr5fX5eXE1GAEPun7L3pYlNeyQcgesHG ebrM8Hw1/+m2UlOumrzZrlIXTvz78fXZh37x+Q75lcXdTGb9TGEPBXbFLIvgeLwA 1RSn8zZM0Q5NJOVxv6ecEcEHo9wTAHsecNSnkQcWCf7y9erNtUwXYih7YuNnp3aa lFSAinBbeHy9imRIJeI+CHCdIaKnvxpt0K32CC/ZEhLbSsnRM5FcwMEOAwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFE0PLud2IeolwoGdTqyVxYGHfjDNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2U4Mjhi Ny1iMWQ4LTRmNDAtYmQzMC03YzA0OTc5MTNhZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZTgyOGI3 LWIxZDgtNGY0MC1iZDMwLTdjMDQ5NzkxM2FmMC8xL1RROHU1M1loNmlYQ2daMU9y SlhGZ1lkLU1NMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQFU5KAAwQEVPBwAwQCwbG8MA0EAgACMAcDBQMq DKRAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDj5DANBgkqhkiG9w0BAQsFAAOC AQEAHypJaMp2QM8Urc57V7Kn2TAsUC99Eu7NZ5HnUzpR5S8YBuO9LzvK6oT4NFDD AlLbfU2C0x5sWdpbpfqD3rcz1/diAiutfpNPgkRfTFE2i1F+oCSWrU02RqB2xnwC NEAVv9tKfpM93Jo9ysvlZ4mmjpsdg+f5ou5G8JlFhHqrMBHJMzieLLZRc+VXd+FG ADaK4v1fVfEm9wAuDcfKqLtg1SjAfZ5pEpN9rN2x8WkpmrOdHmCszJIQgNMYxZoQ wuSqZ8wQZtC7HfvzJedafLPAmcsJuBfH444u39b5KviOWDQhjvufQAvq563Tbp3v iY999Qmupm+4zQDU6U7WmrjEog== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:04 2026 by rpki-client