This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer File: TtHX3yWkqdXnJ8QvVenjGD02qTo.cer (raw, json) Hash identifier: Z/pqHNnKPiZBTDJvgfFIJZq3PVFsskBo5nPzn+poSrw= Subject key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB245307F2C451E48AED32EAA86E21 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60561 IP: 188.64.137.0/24 IP: 194.24.172.0/24 IP: 2a11:1040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:24:53:07:f2:c4:51:e4:8a:ed:32:ea:a8:6e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f4:30:8d:40:14:a4:c0:6c:af:85:71:ef:ee: f5:f9:82:50:2e:87:47:35:74:ab:92:a5:a3:5d:1a: 3f:f8:6d:00:77:03:80:20:69:fc:85:22:70:10:53: df:a7:53:f5:c0:f9:65:89:38:7e:e5:44:c0:d8:75: 7f:00:d1:a9:43:8b:68:5c:e9:c4:e3:3d:23:45:88: 1c:be:fd:ac:20:9c:1f:1e:56:43:a6:da:d2:98:ba: 1d:4e:1c:7b:c3:e3:b6:88:29:b1:ef:58:22:35:ab: 9c:0e:74:ed:4b:ca:33:c1:45:8c:c0:d7:2b:7e:55: 97:c3:11:cb:f2:49:62:f7:1f:1f:93:1d:90:c9:0e: 29:38:25:a6:a9:dc:ee:e4:92:7c:89:21:3a:0e:44: 4b:2d:83:83:2a:7b:54:0a:90:1c:00:db:8a:d6:26: 62:27:d8:4c:fc:ff:6a:c8:c2:d9:25:86:9c:a6:56: 4b:0c:25:4e:0e:bb:db:07:3d:87:1d:98:55:37:47: eb:c0:10:02:9b:cc:b7:6d:0f:20:81:66:ce:09:c6: ee:b8:14:19:69:a1:df:97:d4:ba:31:69:39:e7:a5: 39:65:b2:20:61:48:72:ce:a3:7c:40:0a:e2:39:60: 93:47:f8:f9:cf:39:0d:c4:2b:cd:b1:61:45:27:d8: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.64.137.0/24 194.24.172.0/24 IPv6: 2a11:1040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60561 Signature Algorithm: sha256WithRSAEncryption 0d:4f:bf:96:d9:c1:19:99:16:da:6f:4e:3e:d3:08:56:94:7e: 4f:b0:5e:4b:6b:cf:c2:95:95:b9:db:8e:9d:c2:60:7f:bf:fe: e4:92:49:bd:bc:43:48:6b:75:ae:fb:40:7b:fc:ce:75:26:56: 5d:0b:9a:11:0c:06:81:92:f4:df:69:3a:9c:9d:4e:33:58:f4: 6a:d0:f6:49:e3:44:38:6b:5d:c3:51:a6:6a:09:29:10:10:21: 07:10:15:96:a3:59:b3:7c:cb:ed:08:21:c0:60:bb:83:c5:25: be:54:e8:af:ee:34:42:6c:61:8f:f7:6b:87:37:eb:b2:67:99: f9:c4:16:e0:36:72:5b:e4:0f:37:5f:41:ad:7d:d3:7b:10:dc: 2e:58:05:73:9a:f0:df:1d:17:ad:0d:08:b7:32:32:cf:8e:f6: c9:e8:a5:d2:23:1b:f7:f4:ff:76:de:a0:56:69:a7:c5:f2:13: e2:cc:c4:0a:fc:95:c9:e4:79:11:b8:30:c3:0b:b0:4c:27:1b: 40:83:56:ae:e5:dd:22:6c:79:4d:58:fa:ce:79:c4:b2:65:4d: 1f:c7:a6:cf:fb:a7:b0:31:7a:b0:d0:cf:29:fc:5d:1a:00:17: 28:52:6b:49:3d:b2:5b:ab:c7:e6:41:fe:3d:b9:fa:38:d2:63: db:03:35:ca -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yyRTB/LEUeSK7TLqqG4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWQxZDdkZjI1YTRhOWQ1ZTcyN2M0MmY1NWU5ZTMxODNkMzZhOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PQwjUAUpMBsr4Vx7+71+YJQLodH NXSrkqWjXRo/+G0AdwOAIGn8hSJwEFPfp1P1wPlliTh+5UTA2HV/ANGpQ4toXOnE 4z0jRYgcvv2sIJwfHlZDptrSmLodThx7w+O2iCmx71giNaucDnTtS8ozwUWMwNcr flWXwxHL8kli9x8fkx2QyQ4pOCWmqdzu5JJ8iSE6DkRLLYODKntUCpAcANuK1iZi J9hM/P9qyMLZJYacplZLDCVODrvbBz2HHZhVN0frwBACm8y3bQ8ggWbOCcbuuBQZ aaHfl9S6MWk556U5ZbIgYUhyzqN8QAriOWCTR/j5zzkNxCvNsWFFJ9hxNwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFE7R198lpKnV5yfEL1Xp4xg9Nqk6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzQ1OWU2 My00MGI4LTQ1MzYtODRiNC1hYTgxYjk2MDM4NTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvNDU5ZTYz LTQwYjgtNDUzNi04NGI0LWFhODFiOTYwMzg1Ny8xL1R0SFgzeVdrcWRYbko4UXZW ZW5qR0QwMnFUby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAvECJAwQAwhisMA0EAgACMAcDBQMqERBAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDskTANBgkqhkiG9w0BAQsFAAOCAQEADU+/ ltnBGZkW2m9OPtMIVpR+T7BeS2vPwpWVuduOncJgf7/+5JJJvbxDSGt1rvtAe/zO dSZWXQuaEQwGgZL032k6nJ1OM1j0atD2SeNEOGtdw1GmagkpEBAhBxAVlqNZs3zL 7QghwGC7g8UlvlTor+40Qmxhj/drhzfrsmeZ+cQW4DZyW+QPN19BrX3TexDcLlgF c5rw3x0XrQ0ItzIyz472yeil0iMb9/T/dt6gVmmnxfIT4szECvyVyeR5Ebgwwwuw TCcbQINWruXdImx5TVj6znnEsmVNH8emz/unsDF6sNDPKfxdGgAXKFJrST2yW6vH 5kH+Pbn6ONJj2wM1yg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:10 2026 by rpki-client