This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer (raw, json) Hash identifier: y8lm8w5vAXZVjCbu79wirsLMLn0rGX4vdlWSvUJgv1M= Subject key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA76942AB4255C951ABF3262895619 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202230 IP: 185.32.88.0/22 IP: 2a04:54c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:76:94:2a:b4:25:5c:95:1a:bf:32:62:89:56:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:ad:53:3e:4d:a0:3e:60:52:fe:0b:f8:2b: 40:b4:d6:d5:8a:96:7e:93:00:42:e2:a2:d7:61:ae: 1c:8b:2c:7a:d7:10:57:48:6a:34:24:d5:b4:33:1e: 8c:d2:f2:db:ab:20:76:6e:7f:34:9d:09:c6:ed:1d: 3f:69:3c:52:50:08:ec:be:29:f7:b9:57:37:e1:d6: 22:cf:4d:bc:10:5a:63:af:f9:6e:36:c2:86:b2:3a: 8e:ef:b6:74:57:ac:90:04:e2:09:90:cc:48:d9:ce: 08:db:3a:c8:8f:18:c7:39:c7:75:5d:40:78:eb:0b: fd:e4:3a:96:df:b0:b8:36:ff:37:d7:cd:32:7f:d9: 13:dd:2a:9a:57:21:59:10:df:c0:11:69:30:5a:f0: 81:63:bc:3f:17:67:8f:d4:e2:28:0d:33:30:36:c0: 53:15:e0:22:2f:84:1b:1d:e6:4c:e6:01:0a:7a:e0: 84:de:d3:e8:15:9b:b0:d8:fb:3e:4d:09:00:6b:e7: 54:8b:e0:a7:88:a6:76:54:0c:91:36:71:74:28:ac: d3:f8:62:cf:80:dc:56:7e:42:22:cb:9a:e0:aa:b2: 54:1f:78:f4:0b:68:fb:ad:4b:01:95:f6:d6:cb:eb: ae:ff:c6:07:dc:71:58:50:83:cf:73:83:8a:94:0a: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.32.88.0/22 IPv6: 2a04:54c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202230 Signature Algorithm: sha256WithRSAEncryption 8b:aa:ab:b6:0f:c0:1d:f5:f2:2c:dd:92:d3:07:ea:ee:d4:5a: a7:b0:f3:ea:11:90:31:d0:82:a1:b6:fc:29:d5:20:b8:f7:ae: 27:b2:95:b4:e1:90:d0:40:92:c6:c7:a5:e9:36:33:f6:88:f2: 68:99:00:da:6f:34:1c:3a:46:f4:96:42:0c:ab:d0:9d:44:4e: 66:92:2d:45:af:8b:3c:b5:d9:69:1b:da:3b:81:d6:0f:43:2c: d6:87:79:a5:9f:04:de:ad:7f:8a:84:df:a2:58:14:ec:da:0b: a4:4c:61:56:0e:d9:02:e9:4a:eb:75:77:99:d3:fe:a5:17:d0: 6c:64:7c:02:be:2e:65:36:af:e6:5e:b4:17:ed:c3:27:91:c6: 0d:95:6f:44:47:bc:53:60:0e:38:fe:22:38:d0:be:9c:5c:9e: 1b:a4:49:69:82:51:37:0d:53:eb:f0:87:1c:33:6d:d6:47:a0: 76:e9:ec:f4:8f:7a:3b:b1:a4:6b:b6:1e:60:e3:10:59:be:6f: c0:d9:27:d2:2e:56:4b:82:72:4e:ed:26:8a:39:75:65:91:8c: b2:70:b9:90:eb:27:e9:7e:fe:58:a8:43:41:7d:e7:41:15:e5: ae:b7:78:70:3b:a5:20:1f:56:c5:4a:ce:73:0a:15:14:c1:86: da:9f:a9:8c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9ynaUKrQlXJUavzJiiVYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTQ4OWY2NjE1OWY3N2JiNThkMmJiYzdlNGZjMWRmZDlkZGNiMDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmOtUz5NoD5gUv4L+CtAtNbVipZ+ kwBC4qLXYa4ciyx61xBXSGo0JNW0Mx6M0vLbqyB2bn80nQnG7R0/aTxSUAjsvin3 uVc34dYiz028EFpjr/luNsKGsjqO77Z0V6yQBOIJkMxI2c4I2zrIjxjHOcd1XUB4 6wv95DqW37C4Nv83180yf9kT3SqaVyFZEN/AEWkwWvCBY7w/F2eP1OIoDTMwNsBT FeAiL4QbHeZM5gEKeuCE3tPoFZuw2Ps+TQkAa+dUi+CniKZ2VAyRNnF0KKzT+GLP gNxWfkIiy5rgqrJUH3j0C2j7rUsBlfbWy+uu/8YH3HFYUIPPc4OKlArBuQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFE5In2YVn3e7WNK7x+T8Hf2d3LA0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2E1ODE5 Ny1lYjA5LTQ0MTUtYTYxZC1hYmQ2MWFhODI0MjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvYTU4MTk3 LWViMDktNDQxNS1hNjFkLWFiZDYxYWE4MjQyNi8xL1RraWZaaFdmZDd0WTBydkg1 UHdkX1ozY3NEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSBYMA0EAgACMAcDBQMqBFTAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMV9jANBgkqhkiG9w0BAQsFAAOCAQEAi6qrtg/AHfXy LN2S0wfq7tRap7Dz6hGQMdCCobb8KdUguPeuJ7KVtOGQ0ECSxsel6TYz9ojyaJkA 2m80HDpG9JZCDKvQnUROZpItRa+LPLXZaRvaO4HWD0Ms1od5pZ8E3q1/ioTfolgU 7NoLpExhVg7ZAulK63V3mdP+pRfQbGR8Ar4uZTav5l60F+3DJ5HGDZVvREe8U2AO OP4iONC+nFyeG6RJaYJRNw1T6/CHHDNt1kegduns9I96O7Gka7YeYOMQWb5vwNkn 0i5WS4JyTu0mijl1ZZGMsnC5kOsn6X7+WKhDQX3nQRXlrrd4cDulIB9WxUrOcwoV FMGG2p+pjA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:17 2026 by rpki-client