This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer (raw, json) Hash identifier: Caf3xYhgAOSPN1AY9NfqY8aNz247CN3Xs3OGmx+ajQE= Subject key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F152A54A636E97649711064E8A92D9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48871 AS: 205198 IP: 185.30.152.0/22 IP: 185.50.40.0/22 IP: 185.225.48.0/22 IP: 195.49.172.0/22 IP: 2a04:4240::/29 IP: 2a04:bcc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2a:54:a6:36:e9:76:49:71:10:64:e8:a9:2d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b414b09beeab905ff41e6813256054b182294297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:f5:ed:7c:91:52:d4:6e:79:96:16:1a:d4: a0:4a:11:7e:4a:be:8b:c6:14:c0:bd:ee:81:7f:bf: 66:c9:0d:af:a1:40:2d:d2:cf:47:7e:5b:15:ee:a1: b9:8a:a8:cf:e0:e6:09:5e:d6:a0:d6:dd:74:58:33: b8:af:28:43:7f:be:d7:c8:bd:e8:d0:3d:6a:d0:8d: ac:42:01:44:7a:0f:08:7c:9f:6f:cd:46:0c:64:8b: d8:9d:f4:91:49:69:9b:76:02:fc:bd:00:24:d0:ae: c0:17:a4:46:d5:80:76:6a:85:77:5a:c3:5c:0a:ec: 27:9c:5e:5a:af:72:48:6f:9b:6e:6f:75:00:63:d0: c8:5a:65:6d:26:04:0c:2d:d8:84:30:52:57:d6:53: f2:05:30:7d:af:2a:cc:f8:c1:31:99:a4:83:4c:8b: 4d:be:b5:d4:1e:33:b8:7b:c9:6e:72:ad:c8:18:90: 98:85:1d:f0:86:bf:7d:ad:44:a2:8a:9f:49:51:6c: 2d:6a:3b:c1:7f:ac:5e:e3:d4:0f:fe:2f:f9:21:4d: 7c:59:59:fe:04:ca:8c:0e:13:db:6d:b1:24:47:64: b8:a5:38:b3:d9:0a:51:a0:9a:b9:2b:b1:9e:45:e3: 4d:bf:2e:33:65:5a:5a:9d:ba:c9:5c:78:78:ce:4b: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.152.0/22 185.50.40.0/22 185.225.48.0/22 195.49.172.0/22 IPv6: 2a04:4240::/29 2a04:bcc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48871 205198 Signature Algorithm: sha256WithRSAEncryption 81:98:79:67:84:e7:9e:4f:6b:f9:03:4f:d2:94:e5:9d:98:4d: 5a:5a:5f:4a:6a:89:9a:18:5b:46:68:56:1a:89:2f:2f:14:69: 61:ca:86:d1:69:cb:f6:08:fb:00:0b:4b:92:30:3e:28:d4:08: 59:c5:22:27:34:d3:05:ca:80:7f:71:45:85:34:43:b8:ad:4a: 92:8c:03:ee:d9:31:eb:82:dc:0a:45:03:02:d2:b3:41:3e:da: 3c:05:4a:0a:3f:33:f0:5d:3b:b1:17:bd:04:e7:ff:1c:b2:22: 4f:a3:a8:d9:90:3d:19:c6:12:5f:aa:d0:a7:6f:f6:93:9b:1c: 4b:56:34:3f:e3:9b:47:a8:aa:9a:4c:20:2c:6c:fc:c5:3f:b0: 32:df:b2:bd:95:ad:53:bd:2b:da:d2:1d:70:40:5f:5c:a6:aa: 36:cb:e4:b4:bb:a1:a7:8e:35:e5:49:fe:61:99:fa:08:d0:3c: c3:81:96:ac:0c:43:af:ac:da:2b:19:f6:c8:79:90:17:ad:ad: af:30:f2:db:b7:c6:4a:cd:66:27:2c:77:28:aa:96:46:dd:ba: 4c:f7:aa:3e:c9:da:6e:a6:87:2b:69:41:6b:d1:d4:66:1f:7e: 40:6c:d1:45:01:b6:e3:66:b2:f0:fd:d2:0f:6f:73:8c:44:12: c2:32:77:4c -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt/FSpUpjbpdklxEGToqS2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDE0YjA5YmVlYWI5MDVmZjQxZTY4MTMyNTYwNTRiMTgyMjk0Mjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HT17XyRUtRueZYWGtSgShF+Sr6L xhTAve6Bf79myQ2voUAt0s9HflsV7qG5iqjP4OYJXtag1t10WDO4ryhDf77XyL3o 0D1q0I2sQgFEeg8IfJ9vzUYMZIvYnfSRSWmbdgL8vQAk0K7AF6RG1YB2aoV3WsNc CuwnnF5ar3JIb5tub3UAY9DIWmVtJgQMLdiEMFJX1lPyBTB9ryrM+MExmaSDTItN vrXUHjO4e8lucq3IGJCYhR3whr99rUSiip9JUWwtajvBf6xe49QP/i/5IU18WVn+ BMqMDhPbbbEkR2S4pTiz2QpRoJq5K7GeReNNvy4zZVpanbrJXHh4zktjKwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFLQUsJvuq5Bf9B5oEyVgVLGCKUKXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzgwMGVi Ni04NjhiLTRhMzAtYjQwMi00YmNlNDI0NzIzZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvODAwZWI2 LTg2OGItNGEzMC1iNDAyLTRiY2U0MjQ3MjNkOS8xL3RCU3dtLTZya0ZfMEhtZ1RK V0JVc1lJcFFwYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCuR6YAwQCuTIoAwQCueEwAwQCwzGsMBQEAgAC MA4DBQMqBEJAAwUDKgS8wDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAvucCAwMh jjANBgkqhkiG9w0BAQsFAAOCAQEAgZh5Z4Tnnk9r+QNP0pTlnZhNWlpfSmqJmhhb RmhWGokvLxRpYcqG0WnL9gj7AAtLkjA+KNQIWcUiJzTTBcqAf3FFhTRDuK1KkowD 7tkx64LcCkUDAtKzQT7aPAVKCj8z8F07sRe9BOf/HLIiT6Oo2ZA9GcYSX6rQp2/2 k5scS1Y0P+ObR6iqmkwgLGz8xT+wMt+yvZWtU70r2tIdcEBfXKaqNsvktLuhp441 5Un+YZn6CNA8w4GWrAxDr6zaKxn2yHmQF62trzDy27fGSs1mJyx3KKqWRt26TPeq PsnabqaHK2lBa9HUZh9+QGzRRQG242ay8P3SD29zjEQSwjJ3TA== -----END CERTIFICATE-----Generated at Tue Feb 10 06:53:58 2026 by rpki-client