This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer File: Tc_QAaZn4WRatAxbvtifWScAT4U.cer (raw, json) Hash identifier: AWiDAzKZqV78NlD/rcwuLxhiExQ7LY8uZUl8mdcVh9o= Subject key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECE3B9F65ADC1338DA9E8BBEB42C2A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34947 IP: 45.89.200.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e3:b9:f6:5a:dc:13:38:da:9e:8b:be:b4:2c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0a:e9:2e:c7:e8:41:f0:2f:28:24:af:25:42: 46:80:be:ba:f2:72:42:19:d2:a3:4d:a5:97:bf:b3: 52:b3:d6:63:b3:12:ca:98:c9:d9:40:c6:5d:2b:11: e9:63:7c:5e:6b:cf:f6:5f:ee:79:d5:fa:5d:68:67: ee:69:f6:b9:24:74:49:35:2e:88:15:9c:01:14:73: 78:a9:fd:98:1d:9a:44:0a:9b:42:e2:bc:12:7b:d9: 6f:be:c9:4c:5a:42:b8:49:1b:46:24:d1:94:b3:f5: 6d:80:86:58:73:a2:54:17:6c:74:d1:ca:fe:e8:7d: b1:35:46:07:a9:21:42:75:38:31:4a:a5:7a:43:80: f9:d3:93:3d:ad:69:1c:77:4f:2b:df:38:37:c5:ae: 6a:18:45:a0:18:64:c4:21:c7:5f:1a:49:3b:19:45: 5f:b9:75:94:11:cd:9b:3d:1f:c9:41:46:ca:9e:b9: 5b:2f:de:46:30:6b:5d:3a:b2:50:1c:ad:b4:25:81: 63:df:aa:34:e0:76:69:3e:0c:51:be:ad:60:8e:6f: dc:47:54:38:83:7c:f2:76:a7:51:1b:bc:b0:27:6b: d9:38:04:c1:dc:80:73:c0:82:68:3a:93:6d:b5:93: 77:8a:0e:0c:e2:2c:94:8c:57:75:74:cd:64:42:31: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.200.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34947 Signature Algorithm: sha256WithRSAEncryption 4c:59:ca:3c:25:f6:f3:8e:cb:bf:61:93:56:dc:d3:fe:83:66: 1e:ce:59:5f:02:6e:69:0b:f0:24:bd:59:67:3e:9c:b4:36:33: 5f:a2:e3:69:aa:6c:a1:da:39:ab:f7:45:7a:83:ec:5c:c3:b8: cd:f9:1b:84:ee:d0:b5:51:d4:b6:c6:61:82:e6:01:6c:85:54: dd:a4:70:ce:c6:06:75:ed:a6:2b:f7:f0:df:1b:6f:66:92:99: b2:55:bb:2a:6d:a6:ff:83:2c:90:15:0a:63:d7:c2:59:f0:c3: 39:5b:05:58:06:33:b7:da:58:e9:85:60:3e:eb:8c:20:05:61: b5:a2:47:41:56:26:70:ac:fb:d2:e8:30:80:6d:53:a6:c1:3a: a7:33:81:f9:cb:71:7f:33:5d:32:d6:15:84:e6:ee:8b:c4:08: 0e:a7:fd:f6:df:cc:ff:b3:fc:90:7f:84:21:3e:03:bc:62:3c: 6d:c1:2d:17:a8:42:02:9b:6f:93:4e:63:c7:a6:70:81:3a:cf: 1e:dc:94:b4:4f:01:33:62:21:b2:c0:68:5c:2f:bc:ca:07:34: 2e:b9:9a:74:be:10:30:74:65:48:78:d6:81:2a:24:16:e3:89: 8b:45:9d:82:65:76:ba:56:3f:b9:cd:9e:de:c2:1a:fc:65:b9: f6:25:fb:df -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57OO59lrcEzjanou+tCwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGNmZDAwMWE2NjdlMTY0NWFiNDBjNWJiZWQ4OWY1OTI3MDA0Zjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QrpLsfoQfAvKCSvJUJGgL668nJC GdKjTaWXv7NSs9ZjsxLKmMnZQMZdKxHpY3xea8/2X+551fpdaGfuafa5JHRJNS6I FZwBFHN4qf2YHZpECptC4rwSe9lvvslMWkK4SRtGJNGUs/VtgIZYc6JUF2x00cr+ 6H2xNUYHqSFCdTgxSqV6Q4D505M9rWkcd08r3zg3xa5qGEWgGGTEIcdfGkk7GUVf uXWUEc2bPR/JQUbKnrlbL95GMGtdOrJQHK20JYFj36o04HZpPgxRvq1gjm/cR1Q4 g3zydqdRG7ywJ2vZOATB3IBzwIJoOpNttZN3ig4M4iyUjFd1dM1kQjFY1QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE3P0AGmZ+FkWrQMW77Yn1knAE+FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzViYTgx ZS1lMjc0LTRiYTMtOTU0ZC1iZGY5NGEzZmIzMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvNWJhODFl LWUyNzQtNGJhMy05NTRkLWJkZjk0YTNmYjMyZC8xL1RjX1FBYVpuNFdSYXRBeGJ2 dGlmV1NjQVQ0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVnIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCIgzANBgkqhkiG9w0BAQsFAAOCAQEATFnKPCX2847Lv2GTVtzT/oNmHs5ZXwJu aQvwJL1ZZz6ctDYzX6Ljaapsodo5q/dFeoPsXMO4zfkbhO7QtVHUtsZhguYBbIVU 3aRwzsYGde2mK/fw3xtvZpKZslW7Km2m/4MskBUKY9fCWfDDOVsFWAYzt9pY6YVg PuuMIAVhtaJHQVYmcKz70ugwgG1TpsE6pzOB+ctxfzNdMtYVhObui8QIDqf99t/M /7P8kH+EIT4DvGI8bcEtF6hCAptvk05jx6ZwgTrPHtyUtE8BM2IhssBoXC+8ygc0 LrmadL4QMHRlSHjWgSokFuOJi0WdgmV2ulY/uc2e3sIa/GW59iX73w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:18 2026 by rpki-client