This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer File: TVP4paBndE6P43yXwcxLiH7axyA.cer (raw, json) Hash identifier: nW5jknzhG0/WnR4pGgZWTjJkn4MWDAm2mmlHXFR4aWk= Subject key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B236A095644B063C3B0A4869480F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51181 IP: 91.216.164.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:23:6a:09:56:44:b0:63:c3:b0:a4:86:94:80:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:3a:59:ae:b2:2c:20:96:58:2e:3b:05:46: a6:69:09:2e:f8:bf:17:cf:29:7e:92:34:6b:74:16: f2:6b:d3:a6:ac:fc:ca:5a:82:07:b8:05:cb:2a:e7: 4c:23:e0:a8:43:86:f7:4d:c1:5d:32:c0:9e:29:11: 28:c7:7d:e0:88:39:87:dd:b3:03:a7:6b:cc:af:1b: a6:e2:6c:dc:c9:7b:49:1e:01:d9:7e:7b:74:9b:6f: f1:39:1d:a3:de:38:08:9d:4e:2b:fd:4e:79:d3:ca: 72:98:2d:74:62:14:17:61:ec:bf:a1:a4:61:bf:b1: 97:89:0a:f0:3b:4e:66:f7:c1:cf:da:41:ab:58:1a: 02:00:47:84:99:e3:c9:6f:97:21:eb:e3:83:6e:4d: 58:e1:11:70:ee:97:33:35:f4:d6:48:d3:f7:15:02: 9c:d6:45:7a:e4:0c:e0:77:16:e7:11:d9:69:31:bc: e9:80:c0:64:8e:2f:ae:da:6d:17:ed:b9:28:64:3f: c3:00:fa:82:f9:37:ea:d8:3e:ac:99:f5:9c:70:ad: 11:f8:1d:fa:37:ca:50:30:64:2f:75:91:5b:f1:37: f4:87:19:30:3c:df:9d:1b:0e:cb:1f:7b:f0:ee:9c: a7:b8:91:da:1b:1f:0c:33:d7:45:a4:02:95:9b:7a: fa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.164.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51181 Signature Algorithm: sha256WithRSAEncryption 2e:d7:62:38:00:77:a2:fa:b6:54:69:1a:8d:88:dc:19:e7:94: 93:92:57:17:4c:f9:85:a2:18:82:e8:b9:6c:e2:c9:b6:aa:ef: f5:ac:3b:5a:b8:1d:31:db:42:5e:60:00:ed:fa:d4:b1:f7:ee: c3:d0:92:0c:fc:b6:a2:63:66:41:62:14:01:c7:17:33:1a:be: 23:4f:dc:dd:88:2c:44:4c:7c:d9:cc:91:68:43:f6:cc:1d:c2: d4:eb:ca:ea:26:66:25:88:0f:ce:38:4b:ae:3a:0f:64:d8:e5: e1:e1:41:f8:ae:6e:50:60:13:4a:56:84:92:96:12:10:a1:d0: b4:94:0c:a1:02:88:82:68:cc:28:67:bf:42:e2:a4:90:41:a4: 44:cd:92:6d:e8:e0:e1:06:8f:da:4d:d7:6a:02:8b:42:01:cf: 1d:20:80:90:ba:ac:9e:64:04:4f:9b:fa:8a:1a:ae:c9:e6:71: c0:86:4b:ad:86:14:16:69:46:ae:9e:44:88:ec:97:40:bc:64: f2:3d:b0:a7:5b:36:4f:8b:8f:3c:65:92:ef:d8:a0:7d:86:1e: 1d:5b:66:ad:70:0f:39:a3:86:90:57:e3:8f:95:fd:10:02:45: e7:d5:06:8c:50:1d:2b:ce:16:5e:48:39:f6:5c:73:6e:21:d8: f1:26:a6:4e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WyNqCVZEsGPDsKSGlID2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDUzZjhhNWEwNjc3NDRlOGZlMzdjOTdjMWNjNGI4ODdlZGFjNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l46Wa6yLCCWWC47BUamaQku+L8X zyl+kjRrdBbya9OmrPzKWoIHuAXLKudMI+CoQ4b3TcFdMsCeKREox33giDmH3bMD p2vMrxum4mzcyXtJHgHZfnt0m2/xOR2j3jgInU4r/U5508pymC10YhQXYey/oaRh v7GXiQrwO05m98HP2kGrWBoCAEeEmePJb5ch6+ODbk1Y4RFw7pczNfTWSNP3FQKc 1kV65AzgdxbnEdlpMbzpgMBkji+u2m0X7bkoZD/DAPqC+Tfq2D6smfWccK0R+B36 N8pQMGQvdZFb8Tf0hxkwPN+dGw7LH3vw7pynuJHaGx8MM9dFpAKVm3r6rQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE1T+KWgZ3ROj+N8l8HMS4h+2scgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzcxMDRk NC03NDE0LTQ5ZDItOWI4NC04YjFhMDkzYzhjNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNzEwNGQ0 LTc0MTQtNDlkMi05Yjg0LThiMWEwOTNjOGM1Yy8xL1RWUDRwYUJuZEU2UDQzeVh3 Y3hMaUg3YXh5QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9ikMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDH7TANBgkqhkiG9w0BAQsFAAOCAQEALtdiOAB3ovq2VGkajYjcGeeUk5JXF0z5 haIYgui5bOLJtqrv9aw7WrgdMdtCXmAA7frUsffuw9CSDPy2omNmQWIUAccXMxq+ I0/c3YgsREx82cyRaEP2zB3C1OvK6iZmJYgPzjhLrjoPZNjl4eFB+K5uUGATSlaE kpYSEKHQtJQMoQKIgmjMKGe/QuKkkEGkRM2Sbejg4QaP2k3XagKLQgHPHSCAkLqs nmQET5v6ihquyeZxwIZLrYYUFmlGrp5EiOyXQLxk8j2wp1s2T4uPPGWS79igfYYe HVtmrXAPOaOGkFfjj5X9EAJF59UGjFAdK84WXkg59lxzbiHY8SamTg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:34 2026 by rpki-client