This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer File: Tk9mXUbWoqvwUh5csffEUcozeoc.cer (raw, json) Hash identifier: 90DGaYa7XRUTsXlA78ycDNp2Thu0r+5QSDqh+lohrMY= Subject key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9486EAC11FE8B5594C27B036FC7D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48952 AS: 202047 AS: 209791 IP: 85.208.140.0/22 IP: 93.175.240.0/22 IP: 185.161.40.0/22 IP: 194.169.184.0/22 IP: 2a07:c340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:94:86:ea:c1:1f:e8:b5:59:4c:27:b0:36:fc:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:5b:61:32:9e:58:6b:48:f6:7e:e1:ae:80: d6:69:e6:ae:54:f2:a1:90:aa:ca:e0:0b:42:83:a5: 84:ce:b4:52:aa:bd:4b:2f:54:bd:87:dd:b5:f1:b8: ff:31:76:72:11:dd:ea:46:1a:1f:01:da:ca:f2:d4: dd:0f:69:cb:83:30:7e:c2:5d:d4:f5:ee:10:5b:99: 04:a4:8c:ec:79:e0:99:f7:bb:dd:d0:f3:d1:47:10: 15:c4:1d:74:ff:cf:07:70:0c:cc:f0:02:2e:2d:54: ae:b8:f8:8d:42:cc:52:97:ac:5c:bd:17:4e:de:7f: 49:2a:70:4e:4a:da:cf:37:df:5b:53:8b:b4:e7:14: 87:b1:b9:68:ad:1f:f6:3d:a5:da:ec:65:18:d9:b3: 57:35:ca:b2:e6:eb:fb:14:1a:8f:aa:45:1b:59:1b: 10:0e:cb:65:a2:28:76:19:8d:49:cc:47:bc:f8:96: 4e:b4:29:2f:a5:60:09:35:81:19:eb:47:05:e3:ba: 45:cc:fb:46:39:f1:53:47:fd:ad:93:b9:bb:ad:aa: 3f:50:52:ad:31:e0:42:30:ee:c7:86:02:6c:7d:d4: 26:a3:63:c6:63:31:b1:79:14:0c:63:05:ab:09:fd: df:83:59:5b:ef:bf:37:14:a5:d6:6c:b0:25:c2:0d: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.140.0/22 93.175.240.0/22 185.161.40.0/22 194.169.184.0/22 IPv6: 2a07:c340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48952 202047 209791 Signature Algorithm: sha256WithRSAEncryption 5b:5f:27:7a:d6:30:7e:19:0f:80:1e:f2:5d:56:a3:74:65:fa: 6f:88:e4:1d:98:b8:f0:75:60:ab:73:69:ae:f8:e2:8b:04:b3: a0:22:d6:3a:86:b2:05:6f:6c:6e:8c:93:58:70:8c:df:b6:d3: 3d:7a:5e:c9:49:dc:ce:da:01:e9:2f:18:cc:dd:be:0f:94:fa: 4a:0a:39:9f:f5:d0:fa:9e:6e:b2:ce:3b:7b:1d:45:22:91:2a: c3:e8:15:b1:54:67:e3:90:ff:5a:c9:f3:46:76:8b:55:27:af: 0c:d2:2b:67:b5:24:2b:7d:99:0c:4f:40:f9:e3:c9:e4:95:ef: 94:ec:de:51:06:d2:32:ca:eb:5c:c8:f8:3c:12:43:14:a8:68: e8:1c:4e:d5:11:16:8f:16:0b:32:18:39:98:01:e3:3e:a3:1b: 7e:2c:ab:d4:c8:d5:36:ca:1b:74:6a:33:bb:b9:20:0f:85:e1: ee:e8:04:a7:c5:21:b4:fc:0d:9f:34:6e:8c:84:7d:4a:25:0b: ea:0c:be:38:a5:be:1f:0c:34:92:c6:57:f6:09:6a:29:c0:f9: 71:3d:d6:3c:61:db:70:78:a1:39:98:22:69:c9:b8:ae:96:fd: 1f:4d:11:81:e4:7b:d5:95:a5:04:f1:b3:f0:d6:07:fe:8a:1c: 6e:62:b4:39 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt6W5SG6sEf6LVZTCewNvx9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTRmNjY1ZDQ2ZDZhMmFiZjA1MjFlNWNiMWY3YzQ1MWNhMzM3YTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswZbYTKeWGtI9n7hroDWaeauVPKh kKrK4AtCg6WEzrRSqr1LL1S9h9218bj/MXZyEd3qRhofAdrK8tTdD2nLgzB+wl3U 9e4QW5kEpIzseeCZ97vd0PPRRxAVxB10/88HcAzM8AIuLVSuuPiNQsxSl6xcvRdO 3n9JKnBOStrPN99bU4u05xSHsblorR/2PaXa7GUY2bNXNcqy5uv7FBqPqkUbWRsQ Dstloih2GY1JzEe8+JZOtCkvpWAJNYEZ60cF47pFzPtGOfFTR/2tk7m7rao/UFKt MeBCMO7HhgJsfdQmo2PGYzGxeRQMYwWrCf3fg1lb7783FKXWbLAlwg02GQIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFE5PZl1G1qKr8FIeXLH3xFHKM3qHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzI3MGI4 OS03YzQ3LTQyNjMtODZhMC0wMDczYzJiN2E3ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvMjcwYjg5 LTdjNDctNDI2My04NmEwLTAwNzNjMmI3YTdlZS8xL1RrOW1YVWJXb3F2d1VoNWNz ZmZFVWNvemVvYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCVdCMAwQCXa/wAwQCuaEoAwQCwqm4MA0EAgAC MAcDBQMqB8NAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwC/OAIDAxU/AgMDM38w DQYJKoZIhvcNAQELBQADggEBAFtfJ3rWMH4ZD4Ae8l1Wo3Rl+m+I5B2YuPB1YKtz aa744osEs6Ai1jqGsgVvbG6Mk1hwjN+20z16XslJ3M7aAekvGMzdvg+U+koKOZ/1 0PqebrLOO3sdRSKRKsPoFbFUZ+OQ/1rJ80Z2i1UnrwzSK2e1JCt9mQxPQPnjyeSV 75Ts3lEG0jLK61zI+DwSQxSoaOgcTtURFo8WCzIYOZgB4z6jG34sq9TI1TbKG3Rq M7u5IA+F4e7oBKfFIbT8DZ80boyEfUolC+oMvjilvh8MNJLGV/YJainA+XE91jxh 23B4oTmYImnJuK6W/R9NEYHke9WVpQTxs/DWB/6KHG5itDk= -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:54 2026 by rpki-client