This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer File: TnKscetFB6wKZSpUWY2uRR_jP0c.cer (raw, json) Hash identifier: +lsWzGXIki3llv/c4hkc38HfoYqwZde+YwJXBkE8gEs= Subject key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA72F43EDAF231499F6B8E0CF54BEAB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48431 IP: 95.80.128.0/18 IP: 185.57.132.0/22 IP: 2a00:ff8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2f:43:ed:af:23:14:99:f6:b8:e0:cf:54:be:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:32:e3:b3:ee:30:e1:bc:67:47:b3:26:02:2e: 97:0e:65:1e:97:af:75:02:df:97:a1:a8:1f:5e:e3: 02:c3:13:98:82:a0:02:79:65:9e:ec:1b:ee:b8:1a: 98:56:12:71:25:7f:3a:e1:e4:83:c6:e5:cc:87:d7: 3e:5b:88:e4:1a:86:ef:bc:3b:e5:26:7a:c0:59:98: a0:5f:87:d4:ea:c2:f0:7f:81:1a:00:26:1b:20:26: 85:ed:46:24:6a:f6:d6:e2:fc:f2:ca:8a:17:5b:4a: c0:33:0f:35:79:27:67:2c:3e:d9:23:fc:cd:20:20: 2a:0d:b7:f9:ad:3a:81:74:23:94:42:cc:44:d9:dc: f1:cb:c9:aa:e6:1a:ae:2b:11:7a:21:54:fc:30:bd: 4f:14:c7:5d:af:d4:c4:9a:b7:7a:2c:00:b1:a3:68: 5a:8f:86:de:ea:ab:51:6c:ab:de:6e:45:69:09:b9: 75:f1:0f:7f:7d:17:bd:3f:cf:8e:0b:58:df:f5:37: 8a:06:9e:6d:11:27:0a:d4:57:db:d6:2d:37:da:5b: 3a:50:59:b8:24:35:cf:12:c9:7c:89:39:54:c3:f1: 58:66:4a:e0:0a:a8:db:48:47:52:e1:4a:e8:ee:0e: ae:1e:ac:68:f8:38:07:cd:24:71:59:53:18:56:a4: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.80.128.0/18 185.57.132.0/22 IPv6: 2a00:ff8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48431 Signature Algorithm: sha256WithRSAEncryption 0f:3b:90:fe:bb:af:ad:a8:cc:88:5d:0b:bd:9e:98:91:74:93: cb:bf:e1:77:05:c1:99:37:34:6a:62:6a:4a:5f:7e:32:36:10: b5:15:cb:f3:c1:c6:64:dd:c8:51:8b:7f:e8:34:80:77:c7:34: 5f:0e:3f:00:dd:2b:e5:7f:42:a8:7c:24:6c:9a:e6:f4:d2:f7: d1:ec:af:69:cf:d7:40:1b:8d:96:17:7c:ae:59:e5:91:10:84: 13:d8:45:51:34:d1:9c:a1:12:c6:25:38:45:04:5f:eb:08:a5: cf:74:c3:52:f7:d9:36:ed:8d:ca:5d:e1:a0:6d:bc:83:fc:f7: 37:74:14:71:61:87:27:d1:7c:0e:42:9e:05:17:72:eb:75:8a: 4b:d0:c8:c1:7b:32:f7:59:48:c0:9b:30:ec:0c:03:09:cd:7f: a1:98:05:25:19:10:8c:58:61:d5:f8:dd:e5:69:e7:e6:d0:89: fd:da:27:e4:d9:78:36:e0:8a:1e:84:94:c5:32:43:11:d5:f0: 90:36:14:95:77:82:1e:7b:16:89:d6:3a:a0:88:0c:24:23:0d: 84:ae:8c:68:c2:d6:f6:bc:31:63:e8:d0:2b:ff:76:07:3e:14: 8f:77:4e:92:c8:1f:0f:c8:f3:26:fb:f1:13:6a:78:1f:29:e0: 80:d4:7c:ea -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+py9D7a8jFJn2uODPVL6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTcyYWM3MWViNDUwN2FjMGE2NTJhNTQ1OThkYWU0NTFmZTMzZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzLjs+4w4bxnR7MmAi6XDmUel691 At+XoagfXuMCwxOYgqACeWWe7BvuuBqYVhJxJX864eSDxuXMh9c+W4jkGobvvDvl JnrAWZigX4fU6sLwf4EaACYbICaF7UYkavbW4vzyyooXW0rAMw81eSdnLD7ZI/zN ICAqDbf5rTqBdCOUQsxE2dzxy8mq5hquKxF6IVT8ML1PFMddr9TEmrd6LACxo2ha j4be6qtRbKvebkVpCbl18Q9/fRe9P8+OC1jf9TeKBp5tEScK1Ffb1i032ls6UFm4 JDXPEsl8iTlUw/FYZkrgCqjbSEdS4Uro7g6uHqxo+DgHzSRxWVMYVqQWVwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFE5yrHHrRQesCmUqVFmNrkUf4z9HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2EwNzUy My04MzkyLTQ3ZjUtODJiMy0zMGM0MzBhMzk4ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYTA3NTIz LTgzOTItNDdmNS04MmIzLTMwYzQzMGEzOThlNi8xL1RuS3NjZXRGQjZ3S1pTcFVX WTJ1UlJfalAwYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGX1CAAwQCuTmEMA0EAgACMAcDBQMqAA/4MBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9LzANBgkqhkiG9w0BAQsFAAOCAQEADzuQ /ruvrajMiF0LvZ6YkXSTy7/hdwXBmTc0amJqSl9+MjYQtRXL88HGZN3IUYt/6DSA d8c0Xw4/AN0r5X9CqHwkbJrm9NL30eyvac/XQBuNlhd8rlnlkRCEE9hFUTTRnKES xiU4RQRf6wilz3TDUvfZNu2Nyl3hoG28g/z3N3QUcWGHJ9F8DkKeBRdy63WKS9DI wXsy91lIwJsw7AwDCc1/oZgFJRkQjFhh1fjd5Wnn5tCJ/don5Nl4NuCKHoSUxTJD EdXwkDYUlXeCHnsWidY6oIgMJCMNhK6MaMLW9rwxY+jQK/92Bz4Uj3dOksgfD8jz JvvxE2p4HynggNR86g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:38 2026 by rpki-client