This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer File: TSkoLUc3P5QvCti5HtlAk7Zuo68.cer (raw, json) Hash identifier: WOzWHWfaIuv6YI2LcjnBvjYxb98Vci7VHepVyTvNH2o= Subject key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80C85AEC79D47E01E4B545A18EE618 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31247 IP: 193.29.203.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c8:5a:ec:79:d4:7e:01:e4:b5:45:a1:8e:e6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:e5:b8:cb:37:f1:f0:d0:dd:81:37:53:eb: 67:f2:e9:af:48:2d:50:30:0b:4e:76:e0:73:b5:8f: 0c:9e:0f:6a:fe:58:ce:a3:44:59:8a:1d:aa:96:9b: eb:17:f5:b8:b4:6a:26:2e:5d:a8:cb:15:90:33:cf: 9f:4b:f2:c6:54:8c:67:b7:f9:8f:86:10:45:6b:2d: 8a:57:3f:6c:8a:9a:29:52:df:8e:93:e1:c3:c6:e0: 78:ba:cc:70:a5:55:9e:eb:14:1a:d3:43:a4:e8:66: a2:9a:6a:92:0f:73:b0:30:0a:f3:20:f0:e5:f8:67: 37:b2:9f:a4:94:a7:d2:42:b6:94:ae:4c:4a:60:9f: 21:5d:3a:ba:91:9e:fc:b2:33:c8:2a:df:35:aa:35: 0d:b5:25:7c:bf:42:67:12:54:cd:b3:4c:6b:aa:7b: 82:74:00:ee:8e:f9:71:16:42:17:7a:40:eb:bf:69: 5c:a9:f9:a6:8d:ea:2c:4e:ad:f8:3f:d3:cb:56:12: dc:b5:15:a8:f5:ed:6c:93:b3:c9:08:27:01:19:55: 4b:ae:b4:fb:1f:17:45:56:bf:64:84:91:5c:61:17: 59:9e:b3:93:11:8a:7a:be:de:d2:9d:67:28:f0:71: 23:f5:bb:3b:bd:a2:4a:b5:52:91:e6:26:9f:06:1d: ed:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.203.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31247 Signature Algorithm: sha256WithRSAEncryption 41:b1:4b:ea:04:aa:64:28:db:8c:14:83:70:83:63:c6:b1:7f: 4a:21:a8:67:40:32:5a:3d:3e:21:5d:17:8a:14:7d:ea:60:f4: 00:de:bb:f1:9b:f8:80:e1:5c:d4:f5:ad:a4:96:d2:d6:d0:c1: d4:27:d8:11:b4:b5:b8:96:c4:b8:f7:eb:11:c2:a6:f2:56:7f: f6:22:dc:0b:12:b5:9a:3c:89:6d:1f:5f:1d:77:a5:cd:ad:44: 36:32:b7:24:b4:38:1c:e7:1d:2b:ef:ac:71:b0:7a:2e:cd:4d: b6:ed:fe:16:d8:d7:7d:ca:c1:f3:f1:94:c7:b9:8a:df:63:43: cc:6b:f1:6d:e4:11:04:2a:21:f8:ff:b4:fa:44:5a:0f:08:c9: d2:66:f4:53:25:6c:66:4e:34:9e:b2:2c:df:cc:55:c5:c6:42: 40:9b:61:2c:f0:3f:8b:2d:94:a1:91:96:90:40:a9:ad:44:df: b9:a8:cf:48:cb:40:00:13:fe:3d:23:ad:22:e1:0c:cf:79:93: 18:ed:97:b0:5d:83:2d:5b:4f:31:ef:52:af:55:d7:c9:8f:55: 90:fd:13:5e:ab:13:2c:d0:82:52:2d:8d:6d:bb:0f:6f:9e:7b: 2c:0f:fe:a9:1c:67:20:98:a1:3e:a3:5a:48:76:16:2a:cb:b2: 52:bb:95:1a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8gMha7HnUfgHktUWhjuYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDI5MjgyZDQ3MzczZjk0MmYwYWQ4YjkxZWQ5NDA5M2I2NmVhM2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytXluMs38fDQ3YE3U+tn8umvSC1Q MAtOduBztY8Mng9q/ljOo0RZih2qlpvrF/W4tGomLl2oyxWQM8+fS/LGVIxnt/mP hhBFay2KVz9sipopUt+Ok+HDxuB4usxwpVWe6xQa00Ok6GaimmqSD3OwMArzIPDl +Gc3sp+klKfSQraUrkxKYJ8hXTq6kZ78sjPIKt81qjUNtSV8v0JnElTNs0xrqnuC dADujvlxFkIXekDrv2lcqfmmjeosTq34P9PLVhLctRWo9e1sk7PJCCcBGVVLrrT7 HxdFVr9khJFcYRdZnrOTEYp6vt7SnWco8HEj9bs7vaJKtVKR5iafBh3t0wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFE0pKC1HNz+ULwrYuR7ZQJO2bqOvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzY1YTRj Mi0zNGIzLTQyMDUtYWZkMS1jNTQ4MWRiMzcxOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvNjVhNGMy LTM0YjMtNDIwNS1hZmQxLWM1NDgxZGIzNzE4ZC8xL1RTa29MVWMzUDVRdkN0aTVI dGxBazdadW82OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwR3LMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnoPMA0GCSqGSIb3DQEBCwUAA4IBAQBBsUvqBKpkKNuMFINwg2PGsX9KIahnQDJa PT4hXReKFH3qYPQA3rvxm/iA4VzU9a2kltLW0MHUJ9gRtLW4lsS49+sRwqbyVn/2 ItwLErWaPIltH18dd6XNrUQ2MrcktDgc5x0r76xxsHouzU227f4W2Nd9ysHz8ZTH uYrfY0PMa/Ft5BEEKiH4/7T6RFoPCMnSZvRTJWxmTjSesizfzFXFxkJAm2Es8D+L LZShkZaQQKmtRN+5qM9Iy0AAE/49I60i4QzPeZMY7ZewXYMtW08x71KvVdfJj1WQ /RNeqxMs0IJSLY1tuw9vnnssD/6pHGcgmKE+o1pIdhYqy7JSu5Ua -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:08 2026 by rpki-client