This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer File: TgfHPboamfW7wV94xjkKqZwmmCQ.cer (raw, json) Hash identifier: wG9r4p4DLr/dAdphPR1+eFkS08wrGQgsxnTx9WkZmbQ= Subject key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED4146E1E25687D421E3A919D5E820 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207171 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:41:46:e1:e2:56:87:d4:21:e3:a9:19:d5:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:73:e8:72:c9:6c:50:80:4d:d5:91:98:97: 81:88:41:87:e2:09:7a:35:33:f8:2f:77:b3:cf:db: ce:14:2a:ef:ac:53:d2:1e:ce:43:1a:d7:a9:ae:cf: 02:ef:0f:24:b5:a7:d1:cb:20:f7:da:16:c9:be:31: 74:f0:91:81:2d:32:c5:1c:7e:77:58:63:33:f0:d9: 11:b0:99:48:d4:f9:a2:e3:0b:76:cc:7d:13:7e:fe: 53:bb:70:ed:93:aa:27:b9:a5:0f:21:2c:5f:46:fa: e1:6c:65:d4:ef:fc:eb:74:b5:49:88:59:5a:a1:06: d9:25:3b:f2:1e:63:df:c5:b0:98:26:bf:0c:ef:a0: eb:0b:65:84:a4:0a:de:36:cd:52:8c:7e:50:3d:d9: 5c:22:5a:7d:d9:3a:a4:2a:89:6a:a5:e2:86:da:fc: b5:a7:5f:b2:b3:f3:0a:0b:5c:c2:86:d5:9b:14:6f: b1:62:48:4f:0d:bc:30:c8:55:96:75:56:0e:b8:03: 95:66:0a:ed:8f:fe:05:80:d1:f0:ec:bb:94:bc:41: 60:2a:e4:b4:58:1f:00:27:75:5f:b6:0a:0f:46:cd: 05:d6:eb:3f:ea:05:11:80:96:8d:83:44:3b:e5:0d: 70:d7:07:15:7e:c9:57:52:00:0f:68:43:2f:bb:f9: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207171 Signature Algorithm: sha256WithRSAEncryption 45:6c:4d:6a:16:12:b0:a3:77:38:2d:fc:ed:61:a3:fb:72:c0: 85:0f:18:84:a6:62:33:b9:ec:ef:57:64:67:2e:50:03:20:6a: 71:07:cb:33:4a:9d:24:a0:8f:32:10:b2:25:7c:2b:bc:f2:ae: a7:1c:bb:8a:54:84:e7:8b:35:e0:fe:95:0e:66:f7:11:7f:cb: 1d:cd:2a:83:af:e3:bf:4a:64:a8:48:ba:89:44:9a:a9:80:e4: f4:c8:cb:8d:8f:28:63:a9:72:6a:82:4a:46:c0:86:b4:78:f8: 55:6a:18:14:98:6e:78:a3:1e:51:2c:be:19:22:12:56:2f:75: 5e:71:36:43:ac:6a:8a:b1:a2:a5:b3:8a:7c:19:d9:53:cf:a1: ae:78:64:30:cd:e9:62:e4:b9:53:eb:5d:56:21:81:19:50:e8: 59:9f:8a:21:14:cf:84:ba:93:5a:02:db:74:c9:41:ad:09:95: 9b:49:cf:f2:66:7d:35:66:ee:6a:91:2e:8b:57:a3:85:97:8b: 0b:2b:c6:57:e1:e8:2b:ae:a0:3b:ad:cb:cc:f3:c3:db:5b:ec: ce:9a:42:58:d2:36:e6:44:16:47:c1:86:07:93:be:0d:98:31: 4f:5a:93:ee:16:ae:f9:54:97:88:b4:7c:e4:9d:23:d7:6b:17: ed:f7:50:b0 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87UFG4eJWh9Qh46kZ1eggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTA3YzczZGJhMWE5OWY1YmJjMTVmNzhjNjM5MGFhOTljMjY5ODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14xz6HLJbFCATdWRmJeBiEGH4gl6 NTP4L3ezz9vOFCrvrFPSHs5DGteprs8C7w8ktafRyyD32hbJvjF08JGBLTLFHH53 WGMz8NkRsJlI1Pmi4wt2zH0Tfv5Tu3Dtk6onuaUPISxfRvrhbGXU7/zrdLVJiFla oQbZJTvyHmPfxbCYJr8M76DrC2WEpAreNs1SjH5QPdlcIlp92TqkKolqpeKG2vy1 p1+ys/MKC1zChtWbFG+xYkhPDbwwyFWWdVYOuAOVZgrtj/4FgNHw7LuUvEFgKuS0 WB8AJ3VftgoPRs0F1us/6gURgJaNg0Q75Q1w1wcVfslXUgAPaEMvu/ltWwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFE4Hxz26Gpn1u8FfeMY5CqmcJpgkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzFmMWU3 Yi01OTA3LTQ4YzEtOTBmZC01NjAyNzEyYmFhNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvMWYxZTdi LTU5MDctNDhjMS05MGZkLTU2MDI3MTJiYWE1Yi8xL1RnZkhQYm9hbWZXN3dWOTR4 amtLcVp3bW1DUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpQzANBgkqhkiG9w0BAQsFAAOCAQEARWxNahYSsKN3 OC387WGj+3LAhQ8YhKZiM7ns71dkZy5QAyBqcQfLM0qdJKCPMhCyJXwrvPKupxy7 ilSE54s14P6VDmb3EX/LHc0qg6/jv0pkqEi6iUSaqYDk9MjLjY8oY6lyaoJKRsCG tHj4VWoYFJhueKMeUSy+GSISVi91XnE2Q6xqirGipbOKfBnZU8+hrnhkMM3pYuS5 U+tdViGBGVDoWZ+KIRTPhLqTWgLbdMlBrQmVm0nP8mZ9NWbuapEui1ejhZeLCyvG V+HoK66gO63LzPPD21vszppCWNI25kQWR8GGB5O+DZgxT1qT7hau+VSXiLR85J0j 12sX7fdQsA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:35 2026 by rpki-client