This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer File: TmROKYPFxQTYAPLQWCsYLrq_JIc.cer (raw, json) Hash identifier: nvwvHHxIX78bwyT9IOFtMKsqYu/py/SgoOipJQZEiUg= Subject key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAC885AF1856B2FCDE81A2EFCFC9A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.135.190.0/24 IP: 216.170.113.0/24 IP: 216.170.115.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c8:85:af:18:56:b2:fc:de:81:a2:ef:cf:c9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e644e2983c5c504d800f2d0582b182ebabf2487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:92:90:51:eb:b5:f7:62:50:ce:7f:a7:4f:97: e2:33:bc:e2:95:bd:5c:25:2c:ef:f7:2e:53:46:15: 23:cd:35:e6:c0:5d:06:b1:94:44:56:bc:fe:c8:1c: c2:4c:48:48:59:0a:db:d2:88:91:0a:cc:bd:10:d2: 5b:87:4d:1f:df:0f:13:e5:b0:53:1b:7a:52:34:86: 5a:83:6d:1d:b0:7b:6f:15:d5:09:b0:b2:a3:92:5c: 5c:6c:0b:3f:73:41:07:85:29:fc:05:a2:db:d1:b7: 23:76:74:7c:f8:d9:fa:c4:d0:61:ad:76:f9:d0:e5: 2d:36:3f:0b:50:f5:55:a5:72:82:e8:1d:42:9b:96: df:d1:79:02:ad:30:b5:96:b8:d7:b7:6c:3d:34:8f: 39:32:81:cd:11:8e:b2:69:0b:db:f1:a7:c8:29:9b: ce:49:b0:e8:c9:9f:12:1c:fd:79:c8:9b:44:64:4a: 00:85:00:36:22:90:58:b5:d5:1a:39:c3:ee:c4:14: 92:b3:a0:c7:66:80:e6:ce:c3:6d:86:bc:e5:00:33: 4c:03:5a:63:04:af:0c:87:08:6d:2c:a0:c3:1a:bd: 0f:d2:ed:b9:a8:87:a9:28:42:e4:f7:d1:0e:fb:87: 46:03:32:e6:19:24:b5:6d:15:c7:57:39:c9:85:32: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.190.0/24 216.170.113.0/24 216.170.115.0/24 Signature Algorithm: sha256WithRSAEncryption 12:79:c1:b9:d5:d1:6a:c0:fc:fa:c6:db:aa:46:27:2c:b3:32: d0:e9:df:d5:15:ee:99:5d:df:62:01:cb:0d:31:40:50:42:94: 94:d1:92:ed:0f:08:11:81:cd:e5:46:63:de:d6:9f:b1:12:1c: c6:81:c2:f9:23:32:64:f0:46:41:e3:34:45:f3:12:67:62:55: 2f:d9:6b:00:24:4f:d5:24:52:3f:d3:c9:6f:80:2c:f3:f7:55: 09:35:b8:9d:12:d9:12:6a:78:69:be:2e:c4:41:01:c4:05:b6: 6f:98:21:d1:4e:e1:17:73:79:dd:8e:28:fb:7b:10:cb:94:f0: 6e:e3:80:01:52:12:f6:fa:2d:a0:2e:c0:c8:6c:c0:54:f1:eb: d7:ac:ea:53:d6:2c:23:e5:05:85:4c:db:fe:85:ec:83:0a:c4: 1b:3e:50:f9:d1:8c:8b:67:b8:3f:2f:41:ac:95:b1:06:e7:da: 61:fb:c8:70:71:ad:c5:3c:6a:88:4b:d0:5a:4a:cd:93:36:3e: f1:2d:78:8e:75:a0:40:7a:01:96:12:91:de:d6:d3:04:4c:dc: 93:7e:f3:b0:41:6b:62:a3:36:76:b6:73:1f:d0:ab:20:b0:e5: 11:cf:d4:ee:4f:52:b9:3b:ed:ba:23:08:a7:40:40:9d:a0:75: 0a:32:b8:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt9ysiFrxhWsvzegaLvz8mkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTY0NGUyOTgzYzVjNTA0ZDgwMGYyZDA1ODJiMTgyZWJhYmYyNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JKQUeu192JQzn+nT5fiM7zilb1c JSzv9y5TRhUjzTXmwF0GsZREVrz+yBzCTEhIWQrb0oiRCsy9ENJbh00f3w8T5bBT G3pSNIZag20dsHtvFdUJsLKjklxcbAs/c0EHhSn8BaLb0bcjdnR8+Nn6xNBhrXb5 0OUtNj8LUPVVpXKC6B1Cm5bf0XkCrTC1lrjXt2w9NI85MoHNEY6yaQvb8afIKZvO SbDoyZ8SHP15yJtEZEoAhQA2IpBYtdUaOcPuxBSSs6DHZoDmzsNthrzlADNMA1pj BK8MhwhtLKDDGr0P0u25qIepKELk99EO+4dGAzLmGSS1bRXHVznJhTKMawIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFE5kTimDxcUE2ADy0FgrGC66vySHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2MwZTZh Mi04YjIwLTQ0ODAtYThhYi1iMzg4YzU3NzBlMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYzBlNmEy LThiMjAtNDQ4MC1hOGFiLWIzODhjNTc3MGUwNC8xL1RtUk9LWVBGeFFUWUFQTFFX Q3NZTHJxX0pJYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAuYe+AwQA2KpxAwQA2KpzMA0GCSqGSIb3DQEB CwUAA4IBAQASecG51dFqwPz6xtuqRicsszLQ6d/VFe6ZXd9iAcsNMUBQQpSU0ZLt DwgRgc3lRmPe1p+xEhzGgcL5IzJk8EZB4zRF8xJnYlUv2WsAJE/VJFI/08lvgCzz 91UJNbidEtkSanhpvi7EQQHEBbZvmCHRTuEXc3ndjij7exDLlPBu44ABUhL2+i2g LsDIbMBU8evXrOpT1iwj5QWFTNv+heyDCsQbPlD50YyLZ7g/L0GslbEG59ph+8hw ca3FPGqIS9BaSs2TNj7xLXiOdaBAegGWEpHe1tMETNyTfvOwQWtiozZ2tnMf0Ksg sOURz9TuT1K5O+26IwinQECdoHUKMrjK -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:04 2026 by rpki-client