This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer File: tCV3H5kv1037Bzbmla61nGr2fpM.cer (raw, json) Hash identifier: ub0xAKxC+cuLJy2hFMGLoZzBPiJ2B5ry5OePgbySB+Q= Subject key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910034265157D49A649FE33B999AB78 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51438 IP: 194.77.158.0/24 IP: 2a13:b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:03:42:65:15:7d:49:a6:49:fe:33:b9:99:ab:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b425771f992fd74dfb0736e695aeb59c6af67e93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cf:b5:c1:25:6f:88:34:ab:58:1f:2a:53:d6: 7e:f9:d0:67:1d:02:a8:4b:5e:70:6c:6f:f3:62:6d: e8:eb:4d:c1:f3:5b:b6:95:51:1d:37:79:ec:e3:d5: d2:e2:45:d7:18:0b:ff:bb:e7:04:cb:78:ed:eb:98: 19:b3:61:ea:ed:4a:c2:49:ab:18:91:28:ed:4c:dd: 69:33:5c:f4:0d:6e:0f:81:80:52:89:4f:2a:c1:ed: d4:9c:46:f2:68:fc:18:ab:63:57:65:d7:42:5a:c7: 88:02:72:2a:fd:ca:22:c1:4b:27:a0:85:b8:44:6d: 36:a6:3c:2a:73:ca:58:4e:72:3d:28:69:20:03:c5: d7:d5:7b:8f:32:f0:d0:2b:48:31:d2:a7:98:f4:67: 41:24:fa:59:5b:36:f0:91:e1:bc:f7:d5:4b:bd:18: 5f:b6:de:a0:64:a3:25:95:22:e0:b8:da:d4:b7:0c: 36:e9:c6:0d:70:00:66:0d:82:fd:08:61:c0:49:05: 51:0f:b1:49:e0:4a:24:07:01:ea:21:66:28:eb:87: 1f:72:c7:5c:c8:58:e4:f3:b1:05:5b:ef:0d:71:d3: 51:2c:4a:fc:c6:e6:ab:72:71:c2:f4:38:01:af:5e: c0:ab:49:b2:5e:11:a3:a2:a5:48:b6:30:08:a1:ee: 3d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.77.158.0/24 IPv6: 2a13:b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51438 Signature Algorithm: sha256WithRSAEncryption 96:b2:63:56:32:6d:68:16:bd:94:c9:e6:c9:a9:af:a5:20:73: 79:27:4f:76:fb:cc:0e:08:c6:16:a2:ac:65:b1:aa:e4:98:8f: 31:ab:70:8b:0c:ae:d2:73:4f:0e:37:6a:6a:f4:62:83:29:40: 52:05:ce:69:53:ea:94:e6:cb:76:0b:ee:bc:fb:7b:47:54:d6: e7:a9:22:ef:9e:9f:8d:d2:75:64:d6:70:65:d7:e3:93:95:65: 85:05:63:f0:a8:bc:61:43:a3:44:d5:f0:5b:46:a3:e5:2e:69: a7:6c:9c:47:52:13:29:00:b0:42:73:a0:67:4c:38:58:73:ae: fe:b9:a2:49:8b:f8:9d:a2:5c:68:2d:30:bc:c5:4b:4d:ab:f9: bb:18:ec:36:96:6a:25:fa:4b:f4:3b:8b:38:9a:ea:3c:7a:69: 40:d7:80:83:1b:81:c6:4e:05:47:ef:1f:12:0f:ea:9a:d6:99: 74:ab:69:e7:0f:e0:83:58:bd:cb:35:e8:2b:ff:40:71:e3:70: a4:56:3c:2d:bb:72:c3:06:ac:6f:05:4a:45:79:d2:9b:80:b6: b7:8b:01:02:d4:41:bc:4b:3b:f4:d4:d2:42:37:57:2e:38:98: 60:e3:c8:a2:50:5e:0e:9f:c4:dc:52:c2:4b:3c:79:23:ba:de: f4:66:b6:8b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EANCZRV9SaZJ/jO5mat4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDI1NzcxZjk5MmZkNzRkZmIwNzM2ZTY5NWFlYjU5YzZhZjY3ZTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8+1wSVviDSrWB8qU9Z++dBnHQKo S15wbG/zYm3o603B81u2lVEdN3ns49XS4kXXGAv/u+cEy3jt65gZs2Hq7UrCSasY kSjtTN1pM1z0DW4PgYBSiU8qwe3UnEbyaPwYq2NXZddCWseIAnIq/coiwUsnoIW4 RG02pjwqc8pYTnI9KGkgA8XX1XuPMvDQK0gx0qeY9GdBJPpZWzbwkeG899VLvRhf tt6gZKMllSLguNrUtww26cYNcABmDYL9CGHASQVRD7FJ4EokBwHqIWYo64cfcsdc yFjk87EFW+8NcdNRLEr8xuarcnHC9DgBr17Aq0myXhGjoqVItjAIoe49yQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLQldx+ZL9dN+wc25pWutZxq9n6TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2U4Zjk1 ZC1hZDM4LTRiNWMtYjA5MC04YTg1NjRiYTNjOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvZThmOTVk LWFkMzgtNGI1Yy1iMDkwLThhODU2NGJhM2M4Yy8xL3RDVjNINWt2MTAzN0J6Ym1s YTYxbkdyMmZwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwk2eMA0EAgACMAcDBQMqEwsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDI7jANBgkqhkiG9w0BAQsFAAOCAQEAlrJjVjJtaBa9 lMnmyamvpSBzeSdPdvvMDgjGFqKsZbGq5JiPMatwiwyu0nNPDjdqavRigylAUgXO aVPqlObLdgvuvPt7R1TW56ki756fjdJ1ZNZwZdfjk5VlhQVj8Ki8YUOjRNXwW0aj 5S5pp2ycR1ITKQCwQnOgZ0w4WHOu/rmiSYv4naJcaC0wvMVLTav5uxjsNpZqJfpL 9DuLOJrqPHppQNeAgxuBxk4FR+8fEg/qmtaZdKtp5w/gg1i9yzXoK/9AceNwpFY8 LbtywwasbwVKRXnSm4C2t4sBAtRBvEs79NTSQjdXLjiYYOPIolBeDp/E3FLCSzx5 I7re9Ga2iw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:33 2026 by rpki-client