This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TQiJTKQFMefSApQJEojnetEsKXk.cer File: TQiJTKQFMefSApQJEojnetEsKXk.cer (raw, json) Hash identifier: bnvOMaggEjYc+SRZD5FlR/fRCWsneG+WAMzMqnI0dj4= Subject key identifier: 4D:08:89:4C:A4:05:31:E7:D2:02:94:09:12:88:E7:7A:D1:2C:29:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11146CD3E6E16D260FEAACD772DD45 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/9a08b0-cfec-4c91-b8eb-4abadb5aea9a/1/TQiJTKQFMefSApQJEojnetEsKXk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/9a08b0-cfec-4c91-b8eb-4abadb5aea9a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.204.224.0/22 IP: 2a0a:fec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:14:6c:d3:e6:e1:6d:26:0f:ea:ac:d7:72:dd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d08894ca40531e7d20294091288e77ad12c2979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:60:ff:e8:28:5e:53:40:52:32:95:c7:77: cf:25:7e:22:f4:28:20:a1:fe:e2:71:5c:12:df:c3: 55:ec:cd:c9:13:d9:16:72:45:c2:ba:d4:aa:68:25: 1b:a2:28:c3:1e:58:a2:38:13:ab:65:7d:ea:2e:b0: 05:e2:1c:6b:5d:f1:d5:43:03:ad:7f:96:13:24:bd: b8:e6:52:b8:37:f1:69:54:d4:58:57:ed:5e:e5:10: 6b:77:67:27:c4:04:da:02:18:02:70:5c:cd:fa:61: d4:4c:66:38:40:89:8b:2a:0c:a5:99:b6:d6:24:8e: f6:17:08:fc:2d:d3:0d:d8:70:91:ab:6f:7a:a4:39: 4a:5d:94:81:9b:7f:bf:2c:02:6a:3e:6c:9d:61:cd: 21:c3:9d:04:e5:84:2c:17:95:e7:f8:0a:4d:d4:20: 9e:6e:4b:9b:b5:b4:b9:4e:f1:ba:6d:c8:97:db:cf: 7a:e2:c5:da:6b:f9:75:4a:02:32:b3:11:75:9a:58: e2:c1:e5:eb:2d:84:6f:f8:7f:83:7d:7d:9e:5d:98: cb:8e:d1:cb:fd:f8:a3:1c:e1:54:fb:cf:2d:78:62: 7c:4b:f2:f9:35:ff:77:0a:a5:70:40:e6:28:72:f3: 5d:ad:df:98:d1:60:b1:f8:f7:c0:1d:ee:ee:0b:28: e1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:08:89:4C:A4:05:31:E7:D2:02:94:09:12:88:E7:7A:D1:2C:29:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9a08b0-cfec-4c91-b8eb-4abadb5aea9a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9a08b0-cfec-4c91-b8eb-4abadb5aea9a/1/TQiJTKQFMefSApQJEojnetEsKXk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.224.0/22 IPv6: 2a0a:fec0::/29 Signature Algorithm: sha256WithRSAEncryption 44:26:d1:92:7d:a3:a1:02:d5:fd:6f:1a:09:6a:d2:10:4a:aa: 3d:8a:3f:28:ac:79:b3:de:65:d2:19:30:4d:0e:e6:85:0b:3a: b0:02:4a:b3:01:24:dc:14:27:62:80:9c:24:9f:5a:4f:5b:64: 39:b9:65:8a:86:bb:d8:4d:30:ce:af:fc:ef:c1:9f:3c:3f:87: 0a:88:cb:fe:d9:b6:ca:b5:77:ef:47:98:c0:65:b1:10:bc:3f: 70:fa:e0:62:0d:75:21:16:39:5a:3b:2d:89:b4:33:ac:df:1e: 6e:4d:99:d2:34:53:ff:11:02:db:18:d4:06:a4:e9:a4:7b:d3: 15:eb:13:a3:1d:31:05:66:e3:39:16:da:3a:4f:6a:21:08:d3: 9a:af:c7:d1:1f:6b:0d:da:37:1a:be:a2:20:02:27:3d:ad:6f: f7:08:48:63:28:10:1b:8a:b4:a0:7d:10:1e:2c:b2:4b:aa:7c: 1f:76:f4:a4:d1:70:cf:00:89:0e:d1:5e:90:9a:24:c2:2a:e5: 3d:e6:c7:ee:58:17:cd:3b:17:49:ca:d1:bb:69:c4:e3:c5:f1: 5c:24:eb:3a:96:8e:72:20:f9:a4:5a:0f:19:3e:38:97:04:96: 64:57:db:7b:91:01:79:b7:52:39:21:da:06:b5:b2:5d:90:09: fb:8f:28:02 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8ERRs0+bhbSYP6qzXct1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDA4ODk0Y2E0MDUzMWU3ZDIwMjk0MDkxMjg4ZTc3YWQxMmMyOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA059g/+goXlNAUjKVx3fPJX4i9Cgg of7icVwS38NV7M3JE9kWckXCutSqaCUboijDHliiOBOrZX3qLrAF4hxrXfHVQwOt f5YTJL245lK4N/FpVNRYV+1e5RBrd2cnxATaAhgCcFzN+mHUTGY4QImLKgylmbbW JI72Fwj8LdMN2HCRq296pDlKXZSBm3+/LAJqPmydYc0hw50E5YQsF5Xn+ApN1CCe bkubtbS5TvG6bciX28964sXaa/l1SgIysxF1mljiweXrLYRv+H+DfX2eXZjLjtHL /fijHOFU+88teGJ8S/L5Nf93CqVwQOYocvNdrd+Y0WCx+PfAHe7uCyjhnwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFE0IiUykBTHn0gKUCRKI53rRLCl5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzlhMDhi MC1jZmVjLTRjOTEtYjhlYi00YWJhZGI1YWVhOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvOWEwOGIw LWNmZWMtNGM5MS1iOGViLTRhYmFkYjVhZWE5YS8xL1RRaUpUS1FGTWVmU0FwUUpF b2puZXRFc0tYay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuczgMA0EAgACMAcDBQMqCv7AMA0GCSqGSIb3 DQEBCwUAA4IBAQBEJtGSfaOhAtX9bxoJatIQSqo9ij8orHmz3mXSGTBNDuaFCzqw AkqzASTcFCdigJwkn1pPW2Q5uWWKhrvYTTDOr/zvwZ88P4cKiMv+2bbKtXfvR5jA ZbEQvD9w+uBiDXUhFjlaOy2JtDOs3x5uTZnSNFP/EQLbGNQGpOmke9MV6xOjHTEF ZuM5Fto6T2ohCNOar8fRH2sN2jcavqIgAic9rW/3CEhjKBAbirSgfRAeLLJLqnwf dvSk0XDPAIkO0V6QmiTCKuU95sfuWBfNOxdJytG7acTjxfFcJOs6lo5yIPmkWg8Z PjiXBJZkV9t7kQF5t1I5IdoGtbJdkAn7jygC -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:09 2026 by rpki-client