This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer File: tDlkbascuAzWConx-qE0bzlSO_o.cer (raw, json) Hash identifier: HM1wA5CxZBzXOKfDjjF1ClsTyV6O6xh+x1HAMDhZkQQ= Subject key identifier: B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14E183486A55B490A2398CDBF0377B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.150.200.0/22 IP: 2a0b:7bc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e1:83:48:6a:55:b4:90:a2:39:8c:db:f0:37:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b439646dab1cb80cd60a89f1faa1346f39523bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1f:61:fa:42:3a:c5:4f:c3:a1:f5:22:6c:23: 3e:7b:58:fd:36:6a:e7:52:69:08:65:d5:65:68:e6: 2d:a3:13:76:97:ae:71:17:1f:5d:90:69:07:02:e3: 28:18:80:69:3a:a6:b8:c2:f7:c8:f6:95:92:78:c2: 4f:8e:2a:23:2d:ac:c6:ab:8e:ea:e4:59:33:fc:62: 13:fa:64:da:dc:f9:8d:5b:eb:0e:c1:a6:09:c8:ac: 21:4e:35:44:51:dc:5f:7c:82:67:c0:4e:d5:dd:fc: a8:a9:ef:e1:de:30:b9:e1:db:93:86:dd:46:15:00: 5a:54:39:3b:a6:23:df:ca:f4:1a:ff:2a:5d:52:44: 06:69:1a:c2:2e:1d:d9:1b:3c:1d:7e:41:2e:9c:98: 16:c9:60:71:86:12:9b:c0:8a:f8:cd:00:86:a1:5e: ea:4c:b9:fc:e0:8f:a0:78:9e:d5:7c:e6:83:cd:65: f5:c8:96:79:79:d3:90:4a:ba:71:e3:aa:ad:5d:41: 49:96:c9:a9:24:97:77:4f:e9:7d:c9:d8:b6:fa:94: 7e:dd:02:dd:b8:cf:9c:8c:e3:a3:ba:84:d8:9f:1c: 7e:47:f3:4c:ae:b8:63:de:1c:d0:7e:77:0c:66:60: d4:17:44:8b:23:5b:c5:10:08:a4:39:5f:e4:f7:e1: ea:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.200.0/22 IPv6: 2a0b:7bc0::/32 Signature Algorithm: sha256WithRSAEncryption a8:90:94:2c:a9:a7:d4:4e:d7:c8:25:12:1e:62:b0:d8:98:be: fb:c9:ce:a9:61:cc:b5:06:88:ec:16:24:14:49:c3:7f:42:93: a9:87:e0:cb:bb:23:d5:9a:44:eb:bb:dd:73:ee:ad:c4:9c:88: 25:57:d1:37:98:18:27:e0:f8:63:ec:18:d2:c2:7a:b9:bd:0e: 4b:b1:6b:78:55:e7:c1:67:73:53:06:4e:73:b0:ed:87:5b:2a: 6e:f1:61:af:bd:30:90:5d:b2:12:7c:1d:d8:ad:93:af:64:64: ee:51:6d:85:89:c5:a0:5c:62:37:56:b4:6f:b3:05:4c:50:1e: 4d:f4:f3:7a:9a:b1:78:57:a4:52:f0:94:51:51:05:10:09:c5: c3:a7:44:b2:18:81:b2:91:56:2f:2d:31:30:af:63:a4:c0:11: a0:65:f2:55:08:4a:1a:07:61:b8:2b:88:94:1d:e9:a3:23:69: 2c:21:b6:9f:fb:fa:79:99:40:d1:ae:e1:f0:3f:ca:9e:94:ef: b8:cf:7a:d9:52:33:be:7b:9b:bd:e7:98:3e:8e:5c:61:3e:f6: 67:b1:1e:c5:2e:c7:b0:7c:7e:32:33:f7:cb:91:5b:de:be:8c: 7c:72:39:f1:b3:6b:a5:9a:a7:19:e1:48:be:4d:3b:4c:c7:90: 57:a3:2e:77 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FOGDSGpVtJCiOYzb8Dd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDM5NjQ2ZGFiMWNiODBjZDYwYTg5ZjFmYWExMzQ2ZjM5NTIzYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB9h+kI6xU/DofUibCM+e1j9Nmrn UmkIZdVlaOYtoxN2l65xFx9dkGkHAuMoGIBpOqa4wvfI9pWSeMJPjiojLazGq47q 5Fkz/GIT+mTa3PmNW+sOwaYJyKwhTjVEUdxffIJnwE7V3fyoqe/h3jC54duTht1G FQBaVDk7piPfyvQa/ypdUkQGaRrCLh3ZGzwdfkEunJgWyWBxhhKbwIr4zQCGoV7q TLn84I+geJ7VfOaDzWX1yJZ5edOQSrpx46qtXUFJlsmpJJd3T+l9ydi2+pR+3QLd uM+cjOOjuoTYnxx+R/NMrrhj3hzQfncMZmDUF0SLI1vFEAikOV/k9+HqrwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLQ5ZG2rHLgM1gqJ8fqhNG85Ujv6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2NkNGY0 ZC1hYTU4LTRhMmYtYTNjNS03ZThjNTQ1YTk3YWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvY2Q0ZjRk LWFhNTgtNGEyZi1hM2M1LTdlOGM1NDVhOTdhZS8xL3REbGtiYXNjdUF6V0Nvbngt cUUwYnpsU09fby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZbIMA0EAgACMAcDBQAqC3vAMA0GCSqGSIb3 DQEBCwUAA4IBAQCokJQsqafUTtfIJRIeYrDYmL77yc6pYcy1BojsFiQUScN/QpOp h+DLuyPVmkTru91z7q3EnIglV9E3mBgn4Phj7BjSwnq5vQ5LsWt4VefBZ3NTBk5z sO2HWypu8WGvvTCQXbISfB3YrZOvZGTuUW2FicWgXGI3VrRvswVMUB5N9PN6mrF4 V6RS8JRRUQUQCcXDp0SyGIGykVYvLTEwr2OkwBGgZfJVCEoaB2G4K4iUHemjI2ks Ibaf+/p5mUDRruHwP8qelO+4z3rZUjO+e5u955g+jlxhPvZnsR7FLsewfH4yM/fL kVvevox8cjnxs2ulmqcZ4Ui+TTtMx5BXoy53 -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:37 2026 by rpki-client