This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer File: Tddxzuh-yov3sS4KYwbxgdKlWm0.cer (raw, json) Hash identifier: DPhQ421HyAjOukyjXs3Tgu8YD0Q68Oiia38jEbZEPbg= Subject key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C65EF8398F1A1480D92A91B3B21364 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213730 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:5e:f8:39:8f:1a:14:80:d9:2a:91:b3:b2:13:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d0:4c:06:c6:fd:ed:8a:e1:a0:4a:fa:7f:75: 0c:26:14:30:fe:4e:25:35:75:f6:e0:a6:40:c6:da: 87:b1:f0:7a:73:b5:dd:44:da:94:38:45:7e:cc:dd: 2b:8d:cd:5e:a1:9e:d6:69:d1:de:b3:ef:34:06:41: 90:68:fc:d6:d3:ab:fd:26:6f:88:b6:5e:af:57:19: ad:a2:7f:6c:7c:e8:ef:28:07:57:04:e8:6a:39:94: d7:13:48:37:d9:1c:51:ed:a2:fd:97:1f:f4:a1:86: 36:2c:f3:9c:55:28:5b:86:f8:58:f4:eb:a4:cc:d5: f6:2a:e3:5e:01:c1:06:ac:b4:5c:b1:1f:77:9d:3a: 48:ce:ba:03:41:3a:c0:21:3d:80:24:ad:68:be:02: e8:d9:2e:51:e3:00:2b:f8:e1:c7:f7:8d:1a:5d:f6: a0:41:d3:6d:e8:54:04:33:b4:75:f7:a6:8e:69:a9: 32:4a:85:3e:47:b9:40:ae:f5:e0:e8:1c:ab:47:1e: b6:a4:31:a0:df:5a:86:15:86:77:8b:30:c4:5e:b2: fc:8e:e7:78:b3:cc:49:a0:b9:63:05:62:fc:0b:4b: cb:e9:3b:e7:4b:01:da:3a:dc:b5:63:c1:a2:13:4f: 23:78:d2:f4:46:38:3b:ee:b9:07:b6:7d:27:42:41: ba:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213730 Signature Algorithm: sha256WithRSAEncryption 48:a9:71:d6:43:03:5e:4d:ed:a1:4d:9f:90:5a:0b:ee:2a:63: 8b:c3:ff:93:10:a0:fa:39:1e:97:1b:fa:2c:f9:e5:9d:88:2d: aa:6b:05:b3:1c:eb:98:87:60:a8:b9:97:32:97:5b:4a:71:e9: 34:5b:12:88:d1:cf:bc:4e:ee:51:37:af:63:d3:90:8e:05:53: 15:c8:0e:a6:32:28:12:65:b0:5c:9a:7f:e7:db:a2:35:f6:2c: 3d:b4:5b:43:6b:be:e2:26:29:c3:79:9b:e9:4f:3e:e6:20:69: 9f:50:95:9b:67:da:00:54:05:dc:96:f4:a5:62:65:bb:d3:6a: 7a:38:94:d8:4a:d5:a5:70:a4:c6:9c:cd:5f:08:58:10:a2:5c: 77:c6:c1:e9:f3:03:cd:14:3e:9f:7d:59:a5:4d:c3:db:00:5c: cc:90:26:f2:23:ea:13:40:27:32:dc:5b:d0:6c:af:ad:d1:6b: b2:8a:58:ed:6c:67:76:37:18:90:18:fb:81:3e:f3:ae:a5:9f: cc:e9:8d:67:7d:27:6c:53:e3:ab:b4:f8:c5:54:13:28:ba:8d: 4d:35:f7:0a:7b:05:94:94:2c:65:65:c4:1d:c0:c1:49:38:fe: 16:cf:a2:1c:80:cd:40:33:4b:71:6a:06:78:c0:0a:1e:fd:61: 5b:39:a6:13 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3xl74OY8aFIDZKpGzshNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGQ3NzFjZWU4N2VjYThiZjdiMTJlMGE2MzA2ZjE4MWQyYTU1YTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdBMBsb97YrhoEr6f3UMJhQw/k4l NXX24KZAxtqHsfB6c7XdRNqUOEV+zN0rjc1eoZ7WadHes+80BkGQaPzW06v9Jm+I tl6vVxmton9sfOjvKAdXBOhqOZTXE0g32RxR7aL9lx/0oYY2LPOcVShbhvhY9Ouk zNX2KuNeAcEGrLRcsR93nTpIzroDQTrAIT2AJK1ovgLo2S5R4wAr+OHH940aXfag QdNt6FQEM7R196aOaakySoU+R7lArvXg6ByrRx62pDGg31qGFYZ3izDEXrL8jud4 s8xJoLljBWL8C0vL6TvnSwHaOty1Y8GiE08jeNL0Rjg77rkHtn0nQkG6RQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFE3Xcc7ofsqL97EuCmMG8YHSpVptMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1L2YyMWJm MC1iYTQ5LTQzYmEtODk4Yy01MzlmOWNiYTAwYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvZjIxYmYw LWJhNDktNDNiYS04OThjLTUzOWY5Y2JhMDBjNS8xL1RkZHh6dWgteW92M3NTNEtZ d2J4Z2RLbFdtMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNC4jANBgkqhkiG9w0BAQsFAAOCAQEASKlx1kMDXk3t oU2fkFoL7ipji8P/kxCg+jkelxv6LPnlnYgtqmsFsxzrmIdgqLmXMpdbSnHpNFsS iNHPvE7uUTevY9OQjgVTFcgOpjIoEmWwXJp/59uiNfYsPbRbQ2u+4iYpw3mb6U8+ 5iBpn1CVm2faAFQF3Jb0pWJlu9NqejiU2ErVpXCkxpzNXwhYEKJcd8bB6fMDzRQ+ n31ZpU3D2wBczJAm8iPqE0AnMtxb0GyvrdFrsopY7WxndjcYkBj7gT7zrqWfzOmN Z30nbFPjq7T4xVQTKLqNTTX3CnsFlJQsZWXEHcDBSTj+Fs+iHIDNQDNLcWoGeMAK Hv1hWzmmEw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:52 2026 by rpki-client