This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TeHTcc2fJqEftklGZ0wxl198Lt8.cer File: TeHTcc2fJqEftklGZ0wxl198Lt8.cer (raw, json) Hash identifier: 07f/JkNMFQ6O8efWuHh8iKYzwmjjR68oV/Oi/AwhIcI= Subject key identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D2BFEA71085A8155350FD16198410 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205057 IP: 185.231.92.0/22 IP: 2a0c:4f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2b:fe:a7:10:85:a8:15:53:50:fd:16:19:84:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4de1d371cd9f26a11fb64946674c31975f7c2edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:48:c5:33:c9:b8:db:ab:f2:2c:24:66:16: a9:e4:db:4b:71:be:88:36:21:e3:c4:e7:2c:f2:fe: 12:a5:12:a0:e4:14:ac:7d:66:ef:99:ca:ac:31:11: ff:17:55:a9:7d:d2:b1:15:14:19:fe:28:df:9f:79: b9:88:54:25:8f:c2:45:0e:c4:62:26:ab:bf:4f:f5: a7:8a:ab:91:1f:ff:ed:af:9f:33:8d:e5:bf:ac:87: a0:b6:f2:1e:75:2f:39:3f:43:61:32:91:bd:53:0d: eb:f3:28:76:79:12:07:42:d9:19:1e:4b:38:b6:a2: f2:92:3d:9d:ba:02:73:3a:a5:56:9a:e6:0d:0f:31: 5e:cd:9e:0d:d6:ea:18:77:f5:13:23:d5:17:d9:b8: 97:b4:5b:66:27:4c:43:60:2b:5f:ab:1e:b9:b2:32: 6c:62:01:57:7f:62:35:0c:af:93:d2:eb:50:ed:c4: 1f:ec:21:5c:3c:bc:40:c7:05:4d:42:f7:02:8e:2a: bf:78:a3:74:23:42:a4:61:3d:bc:60:3e:85:30:0c: 6f:1f:f4:97:a1:9d:8a:c4:22:79:dd:27:27:88:39: 0e:1c:90:19:33:67:8f:d3:e0:c2:de:bc:d7:57:7c: ba:6c:54:88:1e:0c:1e:60:3d:fb:3b:c2:8b:38:3e: 4f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E1:D3:71:CD:9F:26:A1:1F:B6:49:46:67:4C:31:97:5F:7C:2E:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/061f23-4fb8-4636-b874-5e42a3f66f32/1/TeHTcc2fJqEftklGZ0wxl198Lt8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.92.0/22 IPv6: 2a0c:4f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205057 Signature Algorithm: sha256WithRSAEncryption 4e:1d:d2:4b:60:3e:42:a5:36:a4:6c:9d:50:94:49:d2:7b:73: 1a:9d:12:3f:db:8c:57:eb:8d:35:ea:f0:30:b7:d1:f4:1d:d4: 34:10:32:4a:73:08:a6:18:3e:48:0a:c9:2b:d2:1e:12:c9:90: be:91:03:e8:61:67:e1:12:3f:66:4b:98:05:76:49:45:40:db: c2:af:95:18:d9:b5:f3:cd:55:44:4d:46:ca:6f:de:11:2e:33: 73:4e:24:0f:02:6a:a6:08:25:3e:31:e6:4a:fe:bf:34:21:f4: 05:20:07:de:b6:0e:39:6b:76:70:1e:66:c6:e8:79:b2:c4:09: 43:87:66:fa:fc:00:50:be:f4:2b:1d:c7:a4:d9:52:cd:c0:52: 0a:8e:8a:ae:6b:a9:b1:1b:40:6e:c7:12:9d:5b:8a:97:bd:71: 70:21:81:7b:65:31:93:e4:10:d4:73:0b:99:0c:69:1d:9b:3b: 4f:08:b6:33:28:6f:d8:ad:aa:51:8e:f9:0e:01:7b:bf:0a:75: 1d:25:b8:ab:e4:ef:d6:67:47:65:dc:f7:d5:66:c5:9a:e1:3b: dc:54:18:b7:76:1e:aa:d6:48:90:58:7b:e1:21:d5:ae:bb:90: a0:50:3d:83:e9:30:e8:5c:c2:a1:c3:59:a7:d6:a6:ea:17:7b: db:40:d4:8c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XSv+pxCFqBVTUP0WGYQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGUxZDM3MWNkOWYyNmExMWZiNjQ5NDY2NzRjMzE5NzVmN2MyZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHRIxTPJuNur8iwkZhap5NtLcb6I NiHjxOcs8v4SpRKg5BSsfWbvmcqsMRH/F1WpfdKxFRQZ/ijfn3m5iFQlj8JFDsRi Jqu/T/WniquRH//tr58zjeW/rIegtvIedS85P0NhMpG9Uw3r8yh2eRIHQtkZHks4 tqLykj2dugJzOqVWmuYNDzFezZ4N1uoYd/UTI9UX2biXtFtmJ0xDYCtfqx65sjJs YgFXf2I1DK+T0utQ7cQf7CFcPLxAxwVNQvcCjiq/eKN0I0KkYT28YD6FMAxvH/SX oZ2KxCJ53ScniDkOHJAZM2eP0+DC3rzXV3y6bFSIHgweYD37O8KLOD5PswIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFE3h03HNnyahH7ZJRmdMMZdffC7fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzA2MWYy My00ZmI4LTQ2MzYtYjg3NC01ZTQyYTNmNjZmMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMDYxZjIz LTRmYjgtNDYzNi1iODc0LTVlNDJhM2Y2NmYzMi8xL1RlSFRjYzJmSnFFZnRrbEda MHd4bDE5OEx0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuedcMA0EAgACMAcDBQMqDE8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMhATANBgkqhkiG9w0BAQsFAAOCAQEATh3SS2A+QqU2 pGydUJRJ0ntzGp0SP9uMV+uNNerwMLfR9B3UNBAySnMIphg+SArJK9IeEsmQvpED 6GFn4RI/ZkuYBXZJRUDbwq+VGNm1881VRE1Gym/eES4zc04kDwJqpgglPjHmSv6/ NCH0BSAH3rYOOWt2cB5mxuh5ssQJQ4dm+vwAUL70Kx3HpNlSzcBSCo6KrmupsRtA bscSnVuKl71xcCGBe2Uxk+QQ1HMLmQxpHZs7Twi2Myhv2K2qUY75DgF7vwp1HSW4 q+Tv1mdHZdz31WbFmuE73FQYt3YeqtZIkFh74SHVrruQoFA9g+kw6FzCocNZp9am 6hd720DUjA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:37 2026 by rpki-client