This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer File: TW8ORKf28MiMzpxG26jscuxhdSs.cer (raw, json) Hash identifier: 8SqxnzubAIklKyXfOt+dnuWNr8PLbwpnLweFJY6TEZE= Subject key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA35725D7B1AF60DA237B2F9BAE673 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.87.112.0/22 IP: 2a05:c040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:35:72:5d:7b:1a:f6:0d:a2:37:b2:f9:ba:e6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c8:36:f6:46:b0:8c:44:44:19:51:ca:ef:ab: e8:65:b7:77:47:75:84:72:c8:7b:ed:87:7d:6b:fe: 74:a4:9d:42:bd:66:d7:58:5e:fe:ab:8e:02:ed:fb: 5e:21:84:88:97:bc:7d:cc:bd:37:78:9e:75:c2:1d: 00:f5:c2:fd:4c:8d:89:fc:f8:5a:68:a8:d0:67:43: 81:cf:59:8e:ca:e0:48:5f:e0:e3:c8:82:6f:59:46: 08:12:28:2c:46:26:be:0b:9a:1a:bf:27:a4:2e:68: 4e:72:66:fd:ad:bc:0c:1e:48:e4:d2:e9:45:70:cb: ca:00:85:87:b8:5d:e7:3f:6c:97:bb:e8:d1:b8:59: c1:96:3c:a6:06:f3:31:51:a2:f7:a1:f2:d4:0f:29: 29:d6:7c:fa:44:ea:d0:48:12:49:58:54:8a:35:6e: c1:13:83:6e:66:c7:2b:49:9a:96:ca:2a:e4:f5:fa: 87:eb:a4:5f:7b:cc:3e:83:b4:20:22:5c:dc:67:28: 77:58:7d:58:b9:2b:ec:12:85:41:1e:f5:c6:bd:3a: c4:76:fb:50:01:38:3a:28:cd:5e:d4:78:40:f2:7a: 87:d0:51:fc:74:61:63:d5:66:14:fd:f3:a6:d6:56: a2:50:a5:1a:42:b9:d8:a0:52:ee:ee:de:3d:f0:b0: f2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.112.0/22 IPv6: 2a05:c040::/29 Signature Algorithm: sha256WithRSAEncryption 1a:5e:4e:01:b6:f0:44:1f:53:23:96:2b:f4:07:fd:27:21:04: 0c:8f:32:c8:28:28:67:be:c5:49:45:16:b4:53:c7:01:cd:f7: d8:17:46:fe:fb:ee:f5:c7:49:2d:e0:7a:3d:bc:1e:ef:5d:05: 44:a4:4e:37:41:e7:91:9e:18:17:e8:42:b9:63:5d:8b:6c:a7: 80:7c:a5:bd:ee:5d:5f:73:0c:61:da:15:cb:69:7d:5e:d3:98: 2e:3b:f3:2a:29:d0:0b:11:fc:8c:02:4e:44:a3:a8:ef:d2:28: 13:86:16:ba:6d:1a:88:cc:10:06:05:c5:7e:51:4d:a1:7c:c2: 2f:b1:53:08:16:9a:94:6d:4b:0f:a0:c3:2e:21:7a:76:2c:40: f8:31:bc:b8:77:43:58:e7:a5:23:11:a8:58:6b:a4:04:c2:f7: 06:e6:95:8b:e8:41:fd:0e:d4:51:0e:bd:d5:13:d0:72:dd:11: 27:45:ef:6d:f2:fb:9f:7c:1d:f1:cf:d3:4f:16:f6:7a:44:5d: 64:c8:73:00:0f:fe:26:aa:fb:b0:54:4a:3c:e3:c8:b0:7d:43: 19:b5:e1:31:b0:c4:fe:ad:cb:56:f0:cf:de:6f:bf:fd:e8:20: aa:a2:76:50:00:7a:d9:db:db:88:ff:8d:e4:a4:f1:b8:17:a8: e8:57:c8:47 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9yjVyXXsa9g2iN7L5uuZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDZmMGU0NGE3ZjZmMGM4OGNjZTljNDZkYmE4ZWM3MmVjNjE3NTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mg29kawjEREGVHK76voZbd3R3WE csh77Yd9a/50pJ1CvWbXWF7+q44C7fteIYSIl7x9zL03eJ51wh0A9cL9TI2J/Pha aKjQZ0OBz1mOyuBIX+DjyIJvWUYIEigsRia+C5oavyekLmhOcmb9rbwMHkjk0ulF cMvKAIWHuF3nP2yXu+jRuFnBljymBvMxUaL3ofLUDykp1nz6ROrQSBJJWFSKNW7B E4NuZscrSZqWyirk9fqH66Rfe8w+g7QgIlzcZyh3WH1YuSvsEoVBHvXGvTrEdvtQ ATg6KM1e1HhA8nqH0FH8dGFj1WYU/fOm1laiUKUaQrnYoFLu7t498LDypQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFE1vDkSn9vDIjM6cRtuo7HLsYXUrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzEzM2Ji NS0xMWZiLTRmOTQtOGYyOS1hY2EzYjgyODNmZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMTMzYmI1 LTExZmItNGY5NC04ZjI5LWFjYTNiODI4M2ZlMy8xL1RXOE9SS2YyOE1pTXpweEcy NmpzY3V4aGRTcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVdwMA0EAgACMAcDBQMqBcBAMA0GCSqGSIb3 DQEBCwUAA4IBAQAaXk4BtvBEH1Mjliv0B/0nIQQMjzLIKChnvsVJRRa0U8cBzffY F0b+++71x0kt4Ho9vB7vXQVEpE43QeeRnhgX6EK5Y12LbKeAfKW97l1fcwxh2hXL aX1e05guO/MqKdALEfyMAk5Eo6jv0igThha6bRqIzBAGBcV+UU2hfMIvsVMIFpqU bUsPoMMuIXp2LED4Mby4d0NY56UjEahYa6QEwvcG5pWL6EH9DtRRDr3VE9By3REn Re9t8vuffB3xz9NPFvZ6RF1kyHMAD/4mqvuwVEo848iwfUMZteExsMT+rctW8M/e b7/96CCqonZQAHrZ29uI/43kpPG4F6joV8hH -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:56 2026 by rpki-client