This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer File: ThPQwKcD4JzaZMErCN2it0mgQpw.cer (raw, json) Hash identifier: kee2XdeHVS3eEbX8RV5OMTGT8QUjLfZGeJ/D8yOORwc= Subject key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910F661758FE7A37BA4E11ABE737E19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2121 IP: 193.0.24.0/21 IP: 2001:67c:64::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f6:61:75:8f:e7:a3:7b:a4:e1:1a:be:73:7e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9d:85:4c:5d:9b:dc:52:ea:01:e2:d7:11:84: 9d:a5:a2:39:ac:62:83:1f:31:ca:87:fe:14:b3:69: 90:3e:48:dc:4a:3e:c9:67:f8:e4:9c:be:bc:73:98: 9f:c7:6a:5e:23:e3:02:fe:a9:09:7c:c4:18:54:80: f9:33:cc:5a:82:10:e5:3a:ac:86:bc:83:cb:69:3e: 25:7b:e1:94:f4:2e:4f:49:5d:b1:6e:cb:87:df:8d: b0:b2:d8:b0:5f:cb:39:da:81:3b:86:21:48:27:ae: 62:44:26:a7:ee:06:63:f7:80:f6:b5:7a:99:5c:6f: bd:28:3b:88:f1:1c:0b:e5:1e:7a:72:6f:fd:2a:fa: 74:5e:b9:57:54:9b:14:32:7d:46:2b:48:0e:7a:f0: 08:f2:55:82:f6:7b:47:1e:e9:d1:ad:d8:d5:91:e8: 4d:52:20:e8:6b:27:00:1b:2c:5b:24:07:65:3f:e1: 9b:3f:9b:d1:51:cb:3f:09:7e:a3:07:89:16:9c:77: f5:2e:41:f3:c9:58:a6:0e:2c:80:88:fa:fe:35:51: 1b:69:71:98:b9:43:8e:ad:33:c5:c4:a4:a1:db:6d: 89:9a:4e:0e:c8:7d:5d:14:2e:6e:d8:8a:bb:be:fc: b6:36:ac:e0:cc:83:73:37:ca:32:04:cc:c1:86:6e: 8f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2121 Signature Algorithm: sha256WithRSAEncryption 64:82:d9:34:6a:88:76:a2:02:bd:f4:2f:e5:25:8e:5e:c9:12: 95:4c:0b:4c:53:33:c3:17:e5:c4:04:47:45:a7:61:c3:c7:c5: c5:cb:79:27:48:d8:4f:ed:36:95:31:ce:cd:44:50:77:48:c9: ef:10:06:a8:05:b5:97:6b:b5:f3:85:d4:88:51:93:0e:58:02: 10:a4:8a:f6:be:65:b9:c6:12:7b:fd:f3:45:ec:14:21:e9:13: 46:8d:02:68:f2:42:90:0c:61:ce:50:71:43:7d:d7:e6:c5:79: 17:66:bb:d2:f6:48:55:ce:e5:5c:b0:2a:a6:4a:2c:be:bc:c9: 22:48:e8:b8:76:a1:a6:01:da:5b:66:d8:b6:e0:eb:d1:70:a2: d7:fa:88:ba:91:0d:86:bd:e0:d1:46:e9:15:7a:f8:62:e5:86: a4:12:b3:40:54:5f:7d:47:0f:2c:16:7b:4c:88:db:6e:2d:dc: a4:08:14:5d:48:0c:af:ca:7b:14:e7:85:ce:7a:f9:34:f2:5b: 22:75:6b:2a:6a:3e:12:2f:2f:84:05:88:73:00:c6:05:5c:6c: 5d:94:9c:3e:c5:58:2a:1a:1a:73:c3:61:6d:14:08:74:a7:a9: fc:3d:71:7b:ac:77:42:a2:4e:c2:49:09:95:b7:a1:28:59:17: 6c:d4:4c:64 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt5EPZhdY/no3uk4Rq+c34ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTEzZDBjMGE3MDNlMDljZGE2NGMxMmIwOGRkYTJiNzQ5YTA0MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ2FTF2b3FLqAeLXEYSdpaI5rGKD HzHKh/4Us2mQPkjcSj7JZ/jknL68c5ifx2peI+MC/qkJfMQYVID5M8xaghDlOqyG vIPLaT4le+GU9C5PSV2xbsuH342wstiwX8s52oE7hiFIJ65iRCan7gZj94D2tXqZ XG+9KDuI8RwL5R56cm/9Kvp0XrlXVJsUMn1GK0gOevAI8lWC9ntHHunRrdjVkehN UiDoaycAGyxbJAdlP+GbP5vRUcs/CX6jB4kWnHf1LkHzyVimDiyAiPr+NVEbaXGY uUOOrTPFxKSh222Jmk4OyH1dFC5u2Iq7vvy2NqzgzINzN8oyBMzBhm6PBwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFE4T0MCnA+Cc2mTBKwjdordJoEKcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2FlMDQ5 YS0wNzhiLTQyZWQtYTI4Zi02YWE0NDM1MjhjZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvYWUwNDlh LTA3OGItNDJlZC1hMjhmLTZhYTQ0MzUyOGNlNS8xL1RoUFF3S2NENEp6YVpNRXJD TjJpdDBtZ1Fwdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8EAgACMAkDBwAgAQZ8AGQwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICCEkwDQYJKoZIhvcNAQELBQADggEBAGSC2TRqiHai Ar30L+Uljl7JEpVMC0xTM8MX5cQER0WnYcPHxcXLeSdI2E/tNpUxzs1EUHdIye8Q BqgFtZdrtfOF1IhRkw5YAhCkiva+ZbnGEnv980XsFCHpE0aNAmjyQpAMYc5QcUN9 1+bFeRdmu9L2SFXO5VywKqZKLL68ySJI6Lh2oaYB2ltm2Lbg69Fwotf6iLqRDYa9 4NFG6RV6+GLlhqQSs0BUX31HDywWe0yI224t3KQIFF1IDK/KexTnhc56+TTyWyJ1 aypqPhIvL4QFiHMAxgVcbF2UnD7FWCoaGnPDYW0UCHSnqfw9cXusd0KiTsJJCZW3 oShZF2zUTGQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:52 2026 by rpki-client