This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer File: a-tglLyrS9Ox9vVsUYK6EiDiK28.cer (raw, json) Hash identifier: Aj9GymuQdJSqiYRRvzADeqlcxOzyRRlolWfZA35ytpE= Subject key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1162EB0D73B601441B137D7EDD207B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28928 IP: 194.11.172.0 -- 194.11.187.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:62:eb:0d:73:b6:01:44:1b:13:7d:7e:dd:20:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:6c:b6:1f:f3:49:1e:5b:af:4c:80:8c:76: 96:c2:42:82:43:47:6b:c3:3b:9a:b2:81:da:49:8c: ca:e5:5c:e6:c3:10:55:3f:f4:cb:c2:bb:6d:95:54: 36:9f:0d:ca:df:ed:fd:85:b6:4c:db:e5:5f:4a:6f: 46:ce:46:b0:a6:eb:d0:2a:84:6f:e8:48:85:ef:e8: dc:07:5e:30:03:69:36:84:9a:0b:95:4b:4c:b5:98: 80:3d:fa:86:c8:bf:26:41:9c:45:bf:73:86:50:93: 24:83:f1:ca:34:4e:3a:87:ff:9d:7d:55:6f:5f:41: 0d:e4:92:71:77:2b:4c:ca:9a:b4:ff:1e:c2:c9:a3: c0:d2:06:56:c9:85:f5:95:af:33:2c:dd:5c:fd:ea: b7:e3:9b:25:f9:0a:29:6e:7b:1a:f5:45:27:3f:3f: 26:bf:cf:1f:51:b9:b8:25:04:84:c4:20:df:29:7a: 5a:84:df:43:bd:17:0a:42:c5:72:89:f6:35:d2:dd: fd:38:1b:74:ef:81:99:ea:af:c1:cc:26:c6:9e:b8: f6:6a:33:44:72:28:84:a4:79:c1:03:d9:33:f8:eb: 53:c6:51:39:a6:63:9d:7c:c0:04:3b:42:57:cd:66: af:1b:2f:60:48:7b:35:f3:3d:7c:94:0e:01:41:38: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.172.0-194.11.187.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28928 Signature Algorithm: sha256WithRSAEncryption a5:a8:7b:a9:e4:65:a8:ed:c2:81:ab:9d:04:ab:4a:a3:5e:18: 21:f7:7f:96:b5:48:60:bf:22:a3:06:28:25:7c:da:32:4d:dd: c1:e1:58:21:2a:ac:0a:f8:8c:3a:4b:f9:9a:22:9f:4d:79:2f: 97:8e:de:3c:b7:5a:c8:e6:dd:73:4e:c8:8a:c5:ad:e1:29:74: 99:05:bc:13:8e:8e:6d:06:21:01:bb:0b:cd:77:6c:b4:2f:1c: d8:bc:b7:4c:7d:48:e3:dc:a9:8e:82:18:4b:e6:80:1c:08:1d: 5c:3c:0d:12:2c:c0:e9:c9:87:91:81:b0:be:a7:da:bd:d7:b1: ea:f5:6b:3f:2e:5a:70:fe:0b:e0:a1:07:d6:3f:53:04:41:47: 67:53:5b:30:60:ce:62:45:0b:5e:32:bd:bd:70:13:6a:a8:03: 53:5f:c3:ed:d2:82:cc:e6:2f:5d:9b:47:d5:70:88:2a:01:3c: e7:27:fc:ad:c4:f7:a0:3f:68:44:18:34:28:da:64:9e:0e:e2: d8:12:80:65:b8:eb:80:69:05:c5:e6:72:d9:0c:1b:75:da:79: 48:1c:2e:2c:0d:f4:5a:2d:bc:54:ac:de:24:94:9c:58:4f:96: c2:4f:98:c9:68:a7:a3:b9:c5:0d:82:af:e4:1a:11:71:e6:5e: ed:6a:3f:ad -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZt8EWLrDXO2AUQbE31+3SB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmViNjA5NGJjYWI0YmQzYjFmNmY1NmM1MTgyYmExMjIwZTIyYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD5sth/zSR5br0yAjHaWwkKCQ0dr wzuasoHaSYzK5VzmwxBVP/TLwrttlVQ2nw3K3+39hbZM2+VfSm9GzkawpuvQKoRv 6EiF7+jcB14wA2k2hJoLlUtMtZiAPfqGyL8mQZxFv3OGUJMkg/HKNE46h/+dfVVv X0EN5JJxdytMypq0/x7CyaPA0gZWyYX1la8zLN1c/eq345sl+Qopbnsa9UUnPz8m v88fUbm4JQSExCDfKXpahN9DvRcKQsVyifY10t39OBt074GZ6q/BzCbGnrj2ajNE ciiEpHnBA9kz+OtTxlE5pmOdfMAEO0JXzWavGy9gSHs18z18lA4BQThbtwIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFGvrYJS8q0vTsfb1bFGCuhIg4itvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2JhNDY0 MC0xNjNlLTQ2NWYtOTBmOS1lYTU4N2ZkNjU4YjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvYmE0NjQw LTE2M2UtNDY1Zi05MGY5LWVhNTg3ZmQ2NThiMi8xL2EtdGdsTHlyUzlPeDl2VnNV WUs2RWlEaUsyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBALCC6wDBALCC7gwGQYIKwYBBQUHAQgBAf8E CjAIoAYwBAICcQAwDQYJKoZIhvcNAQELBQADggEBAKWoe6nkZajtwoGrnQSrSqNe GCH3f5a1SGC/IqMGKCV82jJN3cHhWCEqrAr4jDpL+Zoin015L5eO3jy3Wsjm3XNO yIrFreEpdJkFvBOOjm0GIQG7C813bLQvHNi8t0x9SOPcqY6CGEvmgBwIHVw8DRIs wOnJh5GBsL6n2r3Xser1az8uWnD+C+ChB9Y/UwRBR2dTWzBgzmJFC14yvb1wE2qo A1Nfw+3SgszmL12bR9VwiCoBPOcn/K3E96A/aEQYNCjaZJ4O4tgSgGW464BpBcXm ctkMG3XaeUgcLiwN9FotvFSs3iSUnFhPlsJPmMlop6O5xQ2Cr+QaEXHmXu1qP60= -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:58 2026 by rpki-client