This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer File: TlyvXlSV9UsDnx0PJHERJGfJeRw.cer (raw, json) Hash identifier: 9nru3NOyszGSUkC/S8S+behc6UYnUyx1P4XO0zkM4kg= Subject key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2BCC59BE4CA22BF856439C1FAF4DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58231 IP: 194.33.92.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:bc:c5:9b:e4:ca:22:bf:85:64:39:c1:fa:f4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:65:db:88:0a:13:b1:4e:cc:4a:c2:be:17: 59:08:97:e5:d0:9a:89:f0:84:26:cd:39:66:89:00: b0:92:02:d9:de:e0:c2:62:22:2c:50:9f:b1:8e:fc: e5:7b:01:fa:02:ef:06:be:c9:ce:37:ff:cc:b1:80: 0f:4e:1b:8d:bd:3d:f1:ef:93:08:5e:74:62:b4:18: 33:17:4a:5c:f1:b0:60:84:9a:fe:e2:87:57:3a:ef: f1:b9:a9:65:c6:47:a6:f0:d8:ec:42:53:f8:67:ad: a9:9f:b6:ce:e8:e2:b6:85:11:59:74:d2:62:04:0e: b6:30:0e:bb:4e:13:45:23:56:28:5d:33:d7:a6:e4: d4:7c:8f:ba:3a:38:5e:bd:12:b8:3c:ab:b8:04:ab: c0:06:b9:40:76:00:90:b4:ba:86:b5:e9:7a:59:6c: b8:8e:96:42:88:5d:73:2c:6c:a1:44:c4:bc:48:53: a3:54:67:7c:01:af:45:bc:5b:cb:00:b2:1e:d8:3d: 6b:93:3a:be:26:eb:0a:29:ed:83:cc:49:16:7c:21: e7:af:57:e3:ab:97:35:37:94:ea:5e:3c:ae:b9:61: af:27:b7:c3:94:0e:b2:5b:ec:fb:61:fe:f7:b6:e1: 89:74:b2:ba:3c:ad:21:b0:c6:3b:9c:ac:67:67:bd: 5c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58231 Signature Algorithm: sha256WithRSAEncryption 1d:4c:43:42:2c:bd:4e:93:a8:f0:ef:24:d3:6b:19:c1:e6:e1: 31:19:2d:3e:0a:c2:00:71:67:64:f7:44:d5:01:f8:53:58:28: 16:5e:77:3d:f5:72:5f:fb:b8:f7:2f:60:ef:d4:17:53:e7:7d: 45:36:f1:7f:31:24:e3:33:49:18:63:b2:02:c4:14:22:86:af: d2:9e:27:cf:60:af:01:12:e9:b4:ee:18:28:86:82:52:64:fa: aa:e4:1d:ec:6a:d1:82:11:78:cc:cb:ec:e4:48:25:a5:49:d0: b2:ae:99:dc:ab:f3:e5:19:93:77:d4:44:f9:d2:f2:e7:3d:76: 5a:70:a9:bd:f1:18:fd:d1:58:09:c1:29:fb:99:1e:49:a1:18: 58:7a:0e:4e:0d:8f:2c:99:ab:c8:cb:c5:e9:56:6a:49:c9:4d: 19:ea:56:30:9e:5f:16:94:fe:d3:16:98:6c:8f:98:79:e6:c8: a3:f9:8f:7d:53:ca:7a:eb:5f:00:5f:30:82:c5:ed:00:b1:1f: 76:80:a0:60:f0:c9:d4:a8:5f:43:ae:11:e2:58:03:25:49:ea: 82:57:ea:e9:ee:f1:9f:3c:f9:ef:f9:72:c9:60:2e:0d:d2:ad: 23:02:d1:c0:02:d8:42:28:22:57:76:b9:45:b6:8d:b7:40:b7: a8:f7:82:88 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8rzFm+TKIr+FZDnB+vTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTVjYWY1ZTU0OTVmNTRiMDM5ZjFkMGYyNDcxMTEyNDY3Yzk3OTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXNl24gKE7FOzErCvhdZCJfl0JqJ 8IQmzTlmiQCwkgLZ3uDCYiIsUJ+xjvzlewH6Au8GvsnON//MsYAPThuNvT3x75MI XnRitBgzF0pc8bBghJr+4odXOu/xuallxkem8NjsQlP4Z62pn7bO6OK2hRFZdNJi BA62MA67ThNFI1YoXTPXpuTUfI+6OjhevRK4PKu4BKvABrlAdgCQtLqGtel6WWy4 jpZCiF1zLGyhRMS8SFOjVGd8Aa9FvFvLALIe2D1rkzq+JusKKe2DzEkWfCHnr1fj q5c1N5TqXjyuuWGvJ7fDlA6yW+z7Yf73tuGJdLK6PK0hsMY7nKxnZ71cRQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE5cr15UlfVLA58dDyRxESRnyXkcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2Y4OTY4 NS0xMTc0LTQ1ZDUtYTVkYy0wOWRiNTc0NjliYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvZjg5Njg1 LTExNzQtNDVkNS1hNWRjLTA5ZGI1NzQ2OWJiOC8xL1RseXZYbFNWOVVzRG54MFBK SEVSSkdmSmVSdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwiFcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDjdzANBgkqhkiG9w0BAQsFAAOCAQEAHUxDQiy9TpOo8O8k02sZwebhMRktPgrC AHFnZPdE1QH4U1goFl53PfVyX/u49y9g79QXU+d9RTbxfzEk4zNJGGOyAsQUIoav 0p4nz2CvARLptO4YKIaCUmT6quQd7GrRghF4zMvs5EglpUnQsq6Z3Kvz5RmTd9RE +dLy5z12WnCpvfEY/dFYCcEp+5keSaEYWHoOTg2PLJmryMvF6VZqSclNGepWMJ5f FpT+0xaYbI+YeebIo/mPfVPKeutfAF8wgsXtALEfdoCgYPDJ1KhfQ64R4lgDJUnq glfq6e7xnzz57/lyyWAuDdKtIwLRwALYQigiV3a5RbaNt0C3qPeCiA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:37 2026 by rpki-client