This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer File: TWh9higIIltFn6OZ5l-KBpRpq6M.cer (raw, json) Hash identifier: 4YiriXXjwrt9MKA33Xc0uayHOZ6DD+kjiz8ST8PeaIM= Subject key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC785D155B530E7F32F0FE85AB1B6BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 77.87.191.0/24 IP: 2001:678:e40::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:85:d1:55:b5:30:e7:f3:2f:0f:e8:5a:b1:b6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d687d862808225b459fa399e65f8a069469aba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ae:73:5b:9d:97:29:a3:88:4f:04:8e:a8:ec: 0c:94:9f:98:68:6a:cc:61:51:50:41:03:e0:66:fd: 36:3d:8c:74:11:6c:59:70:de:6a:b6:db:fd:00:eb: 57:3f:19:06:2e:14:3f:ff:2e:51:d1:ce:eb:36:de: 6a:47:ea:09:e1:d0:b0:a2:14:f8:44:c7:cb:23:dd: 51:d9:81:4d:05:7c:1e:34:99:62:d2:33:dd:cf:75: 58:f4:b5:c4:ab:6d:c0:c9:cb:09:3b:82:75:b9:2e: 54:56:45:64:8e:51:9f:0e:a4:ba:66:45:c8:2a:59: 11:6e:14:25:51:a0:9b:6b:ee:f4:4b:6f:f3:8d:a7: 50:f0:cf:52:3b:df:85:3b:58:05:6a:68:2d:3a:fa: d1:4f:2c:6f:3c:29:44:80:71:cd:1f:19:fd:8e:03: 63:95:bf:3b:56:45:7e:63:d2:49:c5:0b:e5:5a:78: 1f:f6:02:bd:05:a5:95:b5:69:9e:cc:ad:ff:f7:5b: ef:41:a0:59:0a:cb:44:d9:4c:a7:0f:94:17:b9:9e: e1:f2:07:e7:0e:94:be:30:95:06:6a:0e:9a:e1:8d: 39:2a:49:98:0d:7d:cb:d0:80:d8:5e:ff:47:bd:c4: 2f:e0:d6:9f:f1:97:6e:ef:ad:93:5d:f2:ab:26:3b: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.191.0/24 IPv6: 2001:678:e40::/48 Signature Algorithm: sha256WithRSAEncryption 4c:c0:16:a1:bd:a7:74:20:74:ee:7c:92:dd:89:0b:6c:b1:59: 4a:e8:cb:d8:5b:0c:7f:7c:b8:b1:c1:7d:81:d2:4b:3c:b0:55: f5:e9:e5:32:fd:ae:68:d4:2a:08:92:9d:8f:06:55:05:f0:c7: 44:3d:96:c3:bf:0e:d6:db:db:06:17:a4:c7:ef:dd:a7:d3:1f: 2e:6f:e3:b0:f3:04:4d:28:81:ae:5f:99:49:c8:9f:91:67:ce: dc:ad:30:77:81:6c:0b:8c:43:15:a7:3d:60:1c:e2:0d:2f:67: 67:0b:98:c3:92:a7:32:e0:92:b7:35:c6:37:4b:18:0b:f0:23: 0e:21:d2:47:5a:11:c0:04:2a:4e:d5:00:2e:bd:84:17:80:b9: 65:8c:27:05:a2:bf:1d:74:e5:07:c0:c8:3b:cd:fd:18:46:6a: 47:a2:63:d4:7d:25:01:5e:77:0b:02:a7:45:10:e6:49:3e:2f: a5:23:a2:5c:cc:35:3b:76:9e:cc:9f:0e:0c:da:81:1b:df:f1: 63:5c:58:85:d3:31:b1:4c:20:63:da:be:7d:21:3c:da:5e:8c: 0c:03:70:d3:59:36:0e:4d:90:46:fb:ec:82:24:8e:ed:fd:d8: 45:04:0c:b7:c8:33:c1:cd:0a:6b:1d:76:0b:74:dc:fb:e7:b8: 44:eb:6e:e0 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt6x4XRVbUw5/MvD+hasba6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDY4N2Q4NjI4MDgyMjViNDU5ZmEzOTllNjVmOGEwNjk0NjlhYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq5zW52XKaOITwSOqOwMlJ+YaGrM YVFQQQPgZv02PYx0EWxZcN5qttv9AOtXPxkGLhQ//y5R0c7rNt5qR+oJ4dCwohT4 RMfLI91R2YFNBXweNJli0jPdz3VY9LXEq23AycsJO4J1uS5UVkVkjlGfDqS6ZkXI KlkRbhQlUaCba+70S2/zjadQ8M9SO9+FO1gFamgtOvrRTyxvPClEgHHNHxn9jgNj lb87VkV+Y9JJxQvlWngf9gK9BaWVtWmezK3/91vvQaBZCstE2UynD5QXuZ7h8gfn DpS+MJUGag6a4Y05KkmYDX3L0IDYXv9HvcQv4Naf8Zdu762TXfKrJjsjhwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFE1ofYYoCCJbRZ+jmeZfigaUaaujMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmL2VkM2Iy ZS1mMGZlLTQ0NjAtODUwZC01ODQ3YjE0NjkzMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvZWQzYjJl LWYwZmUtNDQ2MC04NTBkLTU4NDdiMTQ2OTMyNi8xL1RXaDloaWdJSWx0Rm42T1o1 bC1LQnBScHE2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQATVe/MA8EAgACMAkDBwAgAQZ4DkAwDQYJKoZI hvcNAQELBQADggEBAEzAFqG9p3QgdO58kt2JC2yxWUroy9hbDH98uLHBfYHSSzyw VfXp5TL9rmjUKgiSnY8GVQXwx0Q9lsO/Dtbb2wYXpMfv3afTHy5v47DzBE0oga5f mUnIn5FnztytMHeBbAuMQxWnPWAc4g0vZ2cLmMOSpzLgkrc1xjdLGAvwIw4h0kda EcAEKk7VAC69hBeAuWWMJwWivx105QfAyDvN/RhGakeiY9R9JQFedwsCp0UQ5kk+ L6UjolzMNTt2nsyfDgzagRvf8WNcWIXTMbFMIGPavn0hPNpejAwDcNNZNg5NkEb7 7IIkju392EUEDLfIM8HNCmsddgt03PvnuETrbuA= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:02 2026 by rpki-client