This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer File: Tni20AYU9VZdnYr4JHzHLqm4gz0.cer (raw, json) Hash identifier: Li34GLCvBrS6Gwz4TvCXojVdRjsJ9AdVPjjcR43MCII= Subject key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35DCC629489E1E11157304FA1D30E1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203976 AS: 208700 AS: 212734 IP: 45.88.36.0/22 IP: 62.192.155.0/24 IP: 80.92.200.0/22 IP: 2a07:3a40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:dc:c6:29:48:9e:1e:11:15:73:04:fa:1d:30:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:a3:c5:93:1c:6e:2a:e8:87:e0:18:95:a9: ef:07:60:c9:86:9f:ce:a6:7a:7b:e9:49:92:2f:e6: 01:29:4b:96:0b:9f:a7:69:fd:cf:c5:fb:79:8b:bb: 50:a6:bb:29:d7:9e:38:89:59:80:80:84:61:a3:ec: 71:2d:0d:f7:a0:0a:1d:3c:d2:4f:c0:a0:c5:10:95: f7:88:2a:2c:53:4a:fe:fa:d5:1a:9f:72:a6:9e:e8: d3:96:58:72:08:3b:c9:bc:e1:aa:e4:61:9b:c9:ef: 0c:1d:16:b5:3e:14:36:b4:4a:2c:7d:b0:29:6a:33: dd:c7:d9:34:5c:1d:da:b1:6b:4b:03:74:8e:39:76: 8b:b2:89:95:e7:ec:b7:b9:0f:2d:01:6d:83:09:8e: f4:19:c4:49:ab:87:95:f3:3e:c5:06:d0:a4:70:d0: 1a:07:92:07:19:a1:e6:c1:0f:10:d2:1e:50:8a:48: 08:3b:d9:4b:f9:97:9f:e4:9b:dc:5d:e2:39:2e:de: 53:5e:01:ce:48:b2:4e:96:c0:59:58:97:15:4a:06: f6:cf:1e:b5:a6:cf:71:a3:1d:cf:60:c3:17:90:14: 37:39:92:db:52:80:b4:cd:fb:2a:37:c5:35:67:51: 7d:06:c8:d7:7e:7b:3e:95:5d:59:f6:df:73:c0:4e: 2e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.36.0/22 62.192.155.0/24 80.92.200.0/22 IPv6: 2a07:3a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203976 208700 212734 Signature Algorithm: sha256WithRSAEncryption 81:52:7a:67:08:90:b1:1b:a4:59:27:ff:5d:86:d2:0d:ba:92: 84:bc:e6:b6:89:57:d7:3a:9d:9f:c1:0c:e5:b1:84:55:57:e2: 01:80:0c:53:be:45:70:77:39:98:2e:0a:3d:f9:a2:de:e8:52: f5:20:1e:f5:da:8e:b9:47:a6:51:5e:25:04:a2:e5:ee:78:3b: c4:76:eb:96:a4:ce:84:f0:6d:7f:48:30:df:e5:78:3f:87:7b: be:84:b1:6c:75:a8:93:ca:40:44:c8:ba:d6:93:55:30:62:0a: fe:d6:a7:62:19:70:ec:7a:ac:d0:e9:71:49:18:09:4b:f8:bf: a3:ec:11:bf:b5:57:59:b1:69:4c:60:d5:23:7a:a2:ca:a0:8c: fd:be:85:13:c3:2d:94:04:60:37:85:a6:4c:71:be:df:1a:c3: b0:90:f0:23:1f:83:02:18:11:f5:ad:b9:f5:ee:c3:a4:40:9a: 22:c2:77:c4:74:e8:ce:85:08:47:43:c0:cf:88:be:f6:d3:49: bd:ef:e9:c7:f6:f1:55:00:49:6e:3b:cb:10:3d:b1:e4:dd:67: 51:78:7d:06:ce:d0:d2:c0:8a:3e:6c:d0:dc:4e:1d:67:84:a8: ab:0f:6e:25:f6:95:eb:e6:04:40:1f:d5:3e:50:71:cd:ad:25: 2f:9a:9b:20 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt7NdzGKUieHhEVcwT6HTDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTc4YjZkMDA2MTRmNTU2NWQ5ZDhhZjgyNDdjYzcyZWE5Yjg4MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulujxZMcbiroh+AYlanvB2DJhp/O pnp76UmSL+YBKUuWC5+naf3Pxft5i7tQprsp1544iVmAgIRho+xxLQ33oAodPNJP wKDFEJX3iCosU0r++tUan3KmnujTllhyCDvJvOGq5GGbye8MHRa1PhQ2tEosfbAp ajPdx9k0XB3asWtLA3SOOXaLsomV5+y3uQ8tAW2DCY70GcRJq4eV8z7FBtCkcNAa B5IHGaHmwQ8Q0h5QikgIO9lL+Zef5JvcXeI5Lt5TXgHOSLJOlsBZWJcVSgb2zx61 ps9xox3PYMMXkBQ3OZLbUoC0zfsqN8U1Z1F9BsjXfns+lV1Z9t9zwE4u9wIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFE54ttAGFPVWXZ2K+CR8xy6puIM9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2NiODI2 NS1jNjMyLTQ4MTMtYjg1OC1kZWYzODY3NDNmMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvY2I4MjY1 LWM2MzItNDgxMy1iODU4LWRlZjM4Njc0M2YzMi8xL1RuaTIwQVlVOVZaZG5ZcjRK SHpITHFtNGd6MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLVgkAwQAPsCbAwQCUFzIMA0EAgACMAcDBQAq BzpAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwMcyAIDAy88AgMDPv4wDQYJKoZI hvcNAQELBQADggEBAIFSemcIkLEbpFkn/12G0g26koS85raJV9c6nZ/BDOWxhFVX 4gGADFO+RXB3OZguCj35ot7oUvUgHvXajrlHplFeJQSi5e54O8R265akzoTwbX9I MN/leD+He76EsWx1qJPKQETIutaTVTBiCv7Wp2IZcOx6rNDpcUkYCUv4v6PsEb+1 V1mxaUxg1SN6osqgjP2+hRPDLZQEYDeFpkxxvt8aw7CQ8CMfgwIYEfWtufXuw6RA miLCd8R06M6FCEdDwM+IvvbTSb3v6cf28VUASW47yxA9seTdZ1F4fQbO0NLAij5s 0NxOHWeEqKsPbiX2levmBEAf1T5Qcc2tJS+amyA= -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:54 2026 by rpki-client