This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer File: _trmiRA5jJ2O51bhaCAd2eiYm1I.cer (raw, json) Hash identifier: f67lARoaADXc47YrA6OST5dOLI2f1DpAIgxL1wDVfcc= Subject key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ED64C2D515596A8F5457DE5E5AF98 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198133 IP: 91.246.208.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d6:4c:2d:51:55:96:a8:f5:45:7d:e5:e5:af:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fedae68910398c9d8ee756e168201dd9e8989b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:cb:ec:d9:a5:46:7b:a9:2d:f2:14:37:a7: 34:83:ac:03:ba:82:3d:16:29:ae:c1:44:16:0f:cc: 60:57:21:38:d9:6a:7b:e1:aa:9a:4d:87:80:b8:dc: 40:c0:9a:d1:e1:72:ed:d1:e8:9c:8b:9c:e9:b6:8b: 50:37:d2:db:0d:f5:2b:b0:74:22:5f:6c:f9:78:cf: 69:50:ba:17:f6:f4:2e:36:47:6f:85:c8:2a:12:2c: bc:7e:33:e9:66:b1:c0:5e:92:7f:c1:61:97:22:1d: d1:69:3e:1a:0f:9b:5a:88:f8:35:cb:46:51:0a:49: ab:59:f2:68:fc:b9:f3:bb:cd:80:61:62:41:7b:e0: d0:ec:e0:43:61:bd:55:0e:89:13:d0:d5:91:68:5a: 50:a7:f2:46:62:08:4b:0f:43:01:f0:6c:b1:ab:c8: ee:a4:60:be:35:35:96:44:93:ba:8e:58:ae:a1:d3: 7b:46:58:09:78:78:f9:c0:e7:a0:62:38:9b:b7:ae: 48:e3:b8:c8:da:57:01:e1:36:52:db:d8:d7:78:ad: 52:09:b6:15:62:53:d7:05:c8:40:6c:02:16:dd:4e: 3f:57:9f:84:f9:cd:f4:04:be:74:84:4d:3a:ee:6d: ee:51:37:25:39:19:66:18:da:33:fc:85:54:fd:72: 77:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.208.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198133 Signature Algorithm: sha256WithRSAEncryption 3b:c1:cc:59:a8:ed:62:26:40:a1:5e:b3:3e:92:55:3b:b0:79: c9:0d:5d:71:3a:da:2d:16:75:30:34:1f:d4:b4:08:03:dc:e9: 3c:8f:25:d1:01:95:86:8e:28:4e:8e:6d:c0:5c:4c:e9:9d:69: 99:08:e3:7e:c4:6c:2a:a9:f1:7a:30:56:36:8c:33:d7:c5:9e: 62:10:cd:22:7c:6a:d6:f7:c9:20:b6:fe:87:fa:9c:9e:7f:7d: 94:ba:c5:7e:84:66:b7:4e:44:62:be:ea:c1:84:49:f9:47:6d: e7:f0:e4:bc:ea:fb:6f:3f:a6:07:4b:e4:b7:d3:ec:a3:ac:ad: a6:21:49:68:a7:7e:8e:f3:1b:86:0c:e9:77:38:61:18:7e:ce: e7:8c:e4:8e:61:67:45:d7:5e:fd:89:29:ae:92:54:04:7d:e2: dd:56:b3:11:7e:73:3a:bf:22:50:0e:5b:0f:64:90:80:67:ed: 13:fa:36:49:08:50:1d:2a:8d:ee:82:6e:67:9c:e7:3a:09:20: 04:65:4e:28:6d:e1:a7:35:01:20:99:af:59:d3:aa:b1:46:87: 16:93:b5:1b:41:c6:25:60:3e:ff:d4:88:77:e6:eb:80:84:21: aa:f5:45:f7:a9:2b:2d:25:da:ad:12:9c:b5:24:5b:1b:7a:1e: a1:6c:c9:d5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5ftZMLVFVlqj1RX3l5a+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWRhZTY4OTEwMzk4YzlkOGVlNzU2ZTE2ODIwMWRkOWU4OTg5YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9TL7NmlRnupLfIUN6c0g6wDuoI9 FimuwUQWD8xgVyE42Wp74aqaTYeAuNxAwJrR4XLt0eici5zptotQN9LbDfUrsHQi X2z5eM9pULoX9vQuNkdvhcgqEiy8fjPpZrHAXpJ/wWGXIh3RaT4aD5taiPg1y0ZR CkmrWfJo/Lnzu82AYWJBe+DQ7OBDYb1VDokT0NWRaFpQp/JGYghLD0MB8Gyxq8ju pGC+NTWWRJO6jliuodN7RlgJeHj5wOegYjibt65I47jI2lcB4TZS29jXeK1SCbYV YlPXBchAbAIW3U4/V5+E+c30BL50hE067m3uUTclORlmGNoz/IVU/XJ33QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFP7a5okQOYydjudW4WggHdnomJtSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1LzVmNTNh My0yMjYwLTQxYjAtYTM0MS01MDA0MzI1MDE3NDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvNWY1M2Ez LTIyNjAtNDFiMC1hMzQxLTUwMDQzMjUwMTc0My8xL190cm1pUkE1akoyTzUxYmhh Q0FkMmVpWW0xSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDW/bQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMF9TANBgkqhkiG9w0BAQsFAAOCAQEAO8HMWajtYiZAoV6zPpJVO7B5yQ1dcTra LRZ1MDQf1LQIA9zpPI8l0QGVho4oTo5twFxM6Z1pmQjjfsRsKqnxejBWNowz18We YhDNInxq1vfJILb+h/qcnn99lLrFfoRmt05EYr7qwYRJ+Udt5/DkvOr7bz+mB0vk t9Pso6ytpiFJaKd+jvMbhgzpdzhhGH7O54zkjmFnRdde/YkprpJUBH3i3VazEX5z Or8iUA5bD2SQgGftE/o2SQhQHSqN7oJuZ5znOgkgBGVOKG3hpzUBIJmvWdOqsUaH FpO1G0HGJWA+/9SId+brgIQhqvVF96krLSXarRKctSRbG3oeoWzJ1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:07 2026 by rpki-client