This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer (raw, json) Hash identifier: StZyKkQumU0y539RQgrcTRRR+pZrobnCVPXOKf/guUY= Subject key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6F63237B7927D29AF5E59E4B2C1C7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51225 IP: 91.218.4.0/22 IP: 2001:7f8:94::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f6:32:37:b7:92:7d:29:af:5e:59:e4:b2:c1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4430ba11506741d676ea202e291ec7ec6191b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:c6:7f:45:68:63:61:87:1c:03:dc:1a:c2: 53:5a:60:65:a8:32:f0:61:69:d6:4c:e0:ad:15:73: b0:7e:c4:13:78:8c:b8:05:9e:05:62:6e:2f:f9:8c: cd:e5:2c:2a:c7:bf:88:62:37:0c:89:12:bb:ee:15: 5b:12:59:6f:4e:73:e7:36:ad:22:7b:12:24:1c:15: c2:8f:a8:97:d9:64:57:fc:9d:20:44:06:88:95:3b: b2:8c:8d:d0:c3:4f:be:3f:e8:5e:84:e2:47:b9:93: 70:15:c6:4c:6d:6a:95:9e:5b:57:8c:3d:64:ea:10: 9c:d0:50:c6:22:24:46:9d:49:de:17:12:75:d4:f9: e8:57:89:dc:41:e3:a0:c5:36:96:a2:38:29:b3:ab: ad:e3:ab:46:14:2b:9f:69:46:7c:f9:2a:8e:42:4f: d3:c8:9c:5a:78:48:ed:bf:85:f7:50:30:20:39:28: 5b:3c:e3:5e:84:ee:27:28:51:55:8c:fd:1c:9e:4a: 20:8d:84:9d:8e:e6:5d:f3:5d:dc:ae:fc:24:3b:f7: 46:2f:5f:1f:1a:8d:53:0e:48:52:b6:db:0b:82:a7: 18:d5:01:f9:1c:4d:8c:5d:93:6a:da:a7:e4:9f:a5: ed:67:22:a4:97:35:d6:52:5d:79:ca:da:22:f1:cf: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.4.0/22 IPv6: 2001:7f8:94::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51225 Signature Algorithm: sha256WithRSAEncryption 32:68:50:93:90:ea:5c:21:bf:11:f4:8c:27:b8:15:30:22:ef: 0b:40:32:b7:93:94:98:62:d9:87:60:c5:aa:d6:ea:44:a1:5d: 5a:e0:8c:e5:7c:83:22:6d:d7:a6:f6:eb:8e:8f:46:19:1b:0f: 7a:b4:3b:61:c4:23:af:e9:b1:aa:c6:cb:5b:57:bf:8a:4b:0c: 50:63:5a:9e:cc:d5:89:ff:a9:6d:87:a2:d4:22:c9:1d:c5:fc: d3:00:5c:29:74:0d:e1:ed:ae:10:98:cc:29:69:eb:1e:95:a3: 81:90:f2:2d:85:a7:31:68:93:0c:d1:c2:21:44:10:0a:a5:b6: 3c:20:b9:28:40:d7:f9:f6:2d:c9:86:ea:57:ab:e2:95:7c:32: c5:90:e6:e1:3b:83:98:89:d4:ad:51:ee:58:53:5c:b1:07:6d: 8d:43:44:62:ef:b1:35:58:36:23:aa:07:ad:05:3c:6f:f3:41: 36:01:ee:52:21:4a:9f:92:c3:9e:4d:83:6b:f5:48:93:14:8c: fa:29:d3:67:c2:7d:95:2e:39:87:7d:a4:45:44:ef:b6:90:72: 66:bc:db:37:2d:67:2b:80:54:26:ad:90:c5:bc:92:be:b0:d4: 3b:ca:04:3c:74:a5:b5:ea:7f:e5:ea:f0:12:3e:d8:69:8b:c0: f7:75:7e:49 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt+pvYyN7eSfSmvXlnkssHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQzMGJhMTE1MDY3NDFkNjc2ZWEyMDJlMjkxZWM3ZWM2MTkxYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NPGf0VoY2GHHAPcGsJTWmBlqDLw YWnWTOCtFXOwfsQTeIy4BZ4FYm4v+YzN5Swqx7+IYjcMiRK77hVbEllvTnPnNq0i exIkHBXCj6iX2WRX/J0gRAaIlTuyjI3Qw0++P+hehOJHuZNwFcZMbWqVnltXjD1k 6hCc0FDGIiRGnUneFxJ11PnoV4ncQeOgxTaWojgps6ut46tGFCufaUZ8+SqOQk/T yJxaeEjtv4X3UDAgOShbPONehO4nKFFVjP0cnkogjYSdjuZd813crvwkO/dGL18f Go1TDkhSttsLgqcY1QH5HE2MXZNq2qfkn6XtZyKklzXWUl15ytoi8c8diwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFLRDC6EVBnQdZ26iAuKR7H7GGRsXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzYwY2Nm YS0wOTMwLTQ2YjQtODMxNy1mOGNhOWNiNjMzMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvNjBjY2Zh LTA5MzAtNDZiNC04MzE3LWY4Y2E5Y2I2MzMxNy8xL3RFTUxvUlVHZEIxbmJxSUM0 cEhzZnNZWkd4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCW9oEMA8EAgACMAkDBwAgAQf4AJQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAMgZMA0GCSqGSIb3DQEBCwUAA4IBAQAyaFCTkOpc Ib8R9IwnuBUwIu8LQDK3k5SYYtmHYMWq1upEoV1a4IzlfIMibdem9uuOj0YZGw96 tDthxCOv6bGqxstbV7+KSwxQY1qezNWJ/6lth6LUIskdxfzTAFwpdA3h7a4QmMwp aeselaOBkPIthacxaJMM0cIhRBAKpbY8ILkoQNf59i3JhupXq+KVfDLFkObhO4OY idStUe5YU1yxB22NQ0Ri77E1WDYjqgetBTxv80E2Ae5SIUqfksOeTYNr9UiTFIz6 KdNnwn2VLjmHfaRFRO+2kHJmvNs3LWcrgFQmrZDFvJK+sNQ7ygQ8dKW16n/l6vAS Pthpi8D3dX5J -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:58 2026 by rpki-client