This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TYJcWjaxil5MorUyJtWgW1kN3J4.cer File: TYJcWjaxil5MorUyJtWgW1kN3J4.cer (raw, json) Hash identifier: ZzEHzdV4JVPu7HjHVB4Sj689aoTaClYqb5jO2P1gAMY= Subject key identifier: 4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B459C3F79D4CE21053975C5CE1C445FB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 22 Dec 2025 10:30:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 8435 AS: 49758 IP: 141.92.0.0/16 IP: 159.34.0.0/16 IP: 193.32.250.0 -- 193.32.253.255 IP: 193.34.230.0/23 IP: 193.164.233.0/24 IP: 195.60.95.128/25 IP: 2a07:e200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:9c:3f:79:d4:ce:21:05:39:75:c5:ce:1c:44:5f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 22 10:30:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4d825c5a36b18a5e4ca2b53226d5a05b590ddc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:1a:9f:36:40:fa:a5:b4:cf:f5:fb:e8:15: e5:bd:4b:12:15:a6:65:12:86:18:7c:64:f9:f2:d3: a3:1f:d1:8f:64:b4:04:cd:1f:d6:3c:62:6c:d4:84: 50:ca:87:fd:31:23:e4:52:89:d3:a7:27:21:9a:0c: 88:54:00:60:98:bd:91:cf:d8:8d:b7:16:54:e8:ce: 32:02:97:b6:07:13:8e:62:ed:8e:d8:f1:4b:6c:02: b0:77:3a:34:bb:5e:cd:90:a9:bc:24:b7:d1:49:80: 70:ee:ff:c1:48:09:b6:2d:89:78:a1:b0:98:45:df: f6:b5:43:42:08:1d:9d:77:cf:70:6b:2f:91:c5:19: 96:d4:9a:0d:82:9f:ef:6b:fc:47:2f:29:80:10:ce: 73:4f:57:91:66:f9:1a:44:8c:a4:b0:32:e6:30:24: 21:c5:95:db:01:9f:89:9e:97:ef:4c:2b:4b:99:10: 32:84:05:cd:74:7a:82:e2:41:a6:1e:da:d8:91:26: 23:26:9c:35:91:95:5f:13:4c:cd:95:c7:27:b8:cd: 99:e2:cb:fe:d5:c8:c6:4e:9d:6c:2e:1d:f4:f2:63: 8a:8f:ee:3f:15:58:4f:fb:d1:b4:32:80:a7:0e:35: e6:8a:0e:c8:76:cc:03:72:15:e7:01:ac:a7:22:ce: 5c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:82:5C:5A:36:B1:8A:5E:4C:A2:B5:32:26:D5:A0:5B:59:0D:DC:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/TYJcWjaxil5MorUyJtWgW1kN3J4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.92.0.0/16 159.34.0.0/16 193.32.250.0-193.32.253.255 193.34.230.0/23 193.164.233.0/24 195.60.95.128/25 IPv6: 2a07:e200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8435 49758 Signature Algorithm: sha256WithRSAEncryption 66:91:4c:79:b0:c8:be:dc:66:39:ec:2b:2b:3f:35:bf:c5:f0: d5:e6:09:7b:ae:3e:ef:84:bf:ab:82:75:4c:bf:6a:b9:03:c9: b2:1c:77:9c:b3:da:f8:03:66:69:a4:ea:45:aa:b7:6c:d2:a5: b5:2a:2c:9f:f6:ce:a3:da:eb:02:29:c8:a4:10:48:b7:75:79: 73:b0:c9:21:91:48:47:2b:85:e2:ba:e3:b4:cc:85:59:f8:b5: 0a:87:45:85:ae:90:f4:8b:50:5b:dc:1d:05:97:0a:b9:d3:c1: 2e:88:b8:b8:3e:7a:fb:2f:46:30:e3:8c:6e:bf:0e:3a:87:a7: 4b:7b:8d:2d:50:8c:c3:43:3a:67:4d:9e:c9:70:35:a8:5c:d2: 2e:76:44:0a:c8:08:e0:0b:e7:96:07:c2:55:e8:62:e8:e3:14: 9b:9d:6b:97:d0:f7:a2:e3:7f:96:f2:3f:09:d1:7b:8e:d9:a7: 2b:03:f7:18:b3:1b:d9:74:40:80:00:96:97:fa:25:df:6f:dc: c1:7a:be:c0:1a:0a:74:a0:4d:82:75:f0:2e:7d:e6:a0:4d:68: 97:4c:08:ee:1a:b5:65:49:61:1d:9e:2e:72:cd:8c:cf:84:62: cf:43:83:63:d9:48:89:70:21:15:52:0e:d1:83:ea:28:e0:bd: 3c:38:3f:f2 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZtFnD951M4hBTl1xc4cRF+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIyMTAzMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDgyNWM1YTM2YjE4YTVlNGNhMmI1MzIyNmQ1YTA1YjU5MGRkYzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSIanzZA+qW0z/X76BXlvUsSFaZl EoYYfGT58tOjH9GPZLQEzR/WPGJs1IRQyof9MSPkUonTpychmgyIVABgmL2Rz9iN txZU6M4yApe2BxOOYu2O2PFLbAKwdzo0u17NkKm8JLfRSYBw7v/BSAm2LYl4obCY Rd/2tUNCCB2dd89way+RxRmW1JoNgp/va/xHLymAEM5zT1eRZvkaRIyksDLmMCQh xZXbAZ+JnpfvTCtLmRAyhAXNdHqC4kGmHtrYkSYjJpw1kZVfE0zNlccnuM2Z4sv+ 1cjGTp1sLh308mOKj+4/FVhP+9G0MoCnDjXmig7IdswDchXnAaynIs5cewIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFE2CXFo2sYpeTKK1MibVoFtZDdyeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2E0ZWQ4 ZS05ZGU4LTRlMTEtYjEzZS1lZmVjYTQzMTczYTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTRlZDhl LTlkZTgtNGUxMS1iMTNlLWVmZWNhNDMxNzNhOC8xL1RZSmNXamF4aWw1TW9yVXlK dFdnVzFrTjNKNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAxBAIAATArAwMAjVwDAwCfIjAMAwQBwSD6AwQBwSD8AwQBwSLm AwQAwaTpAwUHwzxfgDANBAIAAjAHAwUDKgfiADAeBggrBgEFBQcBCAEB/wQPMA2g CzAJAgIg8wIDAMJeMA0GCSqGSIb3DQEBCwUAA4IBAQBmkUx5sMi+3GY57CsrPzW/ xfDV5gl7rj7vhL+rgnVMv2q5A8myHHecs9r4A2ZppOpFqrds0qW1Kiyf9s6j2usC KcikEEi3dXlzsMkhkUhHK4XiuuO0zIVZ+LUKh0WFrpD0i1Bb3B0Flwq508EuiLi4 Pnr7L0Yw44xuvw46h6dLe40tUIzDQzpnTZ7JcDWoXNIudkQKyAjgC+eWB8JV6GLo 4xSbnWuX0Pei43+W8j8J0XuO2acrA/cYsxvZdECAAJaX+iXfb9zBer7AGgp0oE2C dfAufeagTWiXTAjuGrVlSWEdni5yzYzPhGLPQ4Nj2UiJcCEVUg7Rg+oo4L08OD/y -----END CERTIFICATE-----Generated at Fri Dec 26 14:13:19 2025 by rpki-client