This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer File: tEORSkjl2uWnVrHjuPvkN-4Niww.cer (raw, json) Hash identifier: FkJqRCRo7QDY6joVEqcW5nPwKdAVqED5Vh/g5vFfkjY= Subject key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C69C10B7B41AFAB8A8EE9B5981AC6A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21239 AS: 199670 IP: 149.126.56.0/21 IP: 193.109.126.0/24 IP: 194.0.6.0/24 IP: 194.0.37.0/24 IP: 194.0.43.0 -- 194.0.44.255 IP: 195.22.138.0/23 IP: 2001:678:9::/48 IP: 2001:678:64::/48 IP: 2001:678:68::/48 IP: 2001:678:6c::/48 IP: 2a02:6e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9c:10:b7:b4:1a:fa:b8:a8:ee:9b:59:81:ac:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:26:34:6a:23:5b:4f:cf:05:f1:b7:33:b0: dc:0f:14:91:00:cd:d6:86:ac:33:94:48:64:a0:98: 8f:26:76:01:bc:69:be:af:4b:b8:87:9c:76:23:ec: d4:83:ce:b8:b1:02:19:12:be:e5:ba:7c:ea:26:e6: ec:dc:98:b7:d0:29:e7:4e:36:43:58:ff:a8:9d:e1: 4f:e6:ab:2b:10:d3:74:f1:83:5f:4b:71:35:7b:47: 94:53:5e:dc:de:72:e1:fd:85:74:22:dc:ae:5c:77: 31:82:54:aa:19:12:a8:a9:fc:bd:f6:30:69:d1:85: 5d:79:78:68:6d:01:46:5f:43:df:f4:2d:e7:7f:36: da:07:d8:99:50:74:01:80:52:bf:46:d4:e8:28:79: 87:ae:46:ba:31:94:85:a0:45:46:e2:29:ba:d7:4c: 23:71:91:9f:c3:1d:dd:8c:2a:0c:01:2a:08:61:51: f5:d1:75:17:9c:3f:dc:86:1d:49:5d:99:ae:96:29: 18:e8:c8:1d:31:97:3a:d7:4c:6b:3b:df:f3:a7:dc: 26:28:60:f9:ea:0b:76:15:80:e9:be:77:61:14:a4: 13:d2:b0:4b:4e:e1:16:30:cf:db:59:70:6e:a4:55: c3:88:f4:4f:e8:af:f8:3d:73:05:fb:b5:1f:b6:e7: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.126.56.0/21 193.109.126.0/24 194.0.6.0/24 194.0.37.0/24 194.0.43.0-194.0.44.255 195.22.138.0/23 IPv6: 2001:678:9::/48 2001:678:64::/48 2001:678:68::/48 2001:678:6c::/48 2a02:6e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21239 199670 Signature Algorithm: sha256WithRSAEncryption 80:52:82:65:09:ae:f0:c0:8e:c2:90:3e:01:03:3c:60:89:3b: ce:69:80:3f:93:84:36:c5:3c:b2:42:3d:67:28:b6:ee:0b:0a: 36:ca:40:31:a4:05:2c:af:b8:c7:bb:9a:ec:65:c3:08:04:7f: 33:39:26:8a:5a:dd:be:6f:a8:8c:71:63:d8:9c:ee:b8:37:78: 97:f8:88:df:85:ec:47:d9:89:6f:d0:21:50:9a:eb:d9:8a:72: 7f:79:2c:ec:25:09:85:7c:a3:21:3c:c2:d5:f4:f9:38:19:8e: 45:cf:ce:44:7c:ad:9a:b1:ea:69:25:70:da:5d:f4:ff:04:5f: 67:a0:12:89:4c:18:9e:c5:87:79:50:f1:4e:b1:82:ae:ce:21: 7a:78:fa:68:4d:4e:07:ac:ea:cc:da:83:7c:3e:d2:d7:15:f3: 91:52:f6:e6:66:4f:14:25:f7:0e:db:28:9f:0c:f3:7c:c9:7a: 17:06:89:53:d2:26:84:53:d7:a5:4d:00:d3:02:8c:92:33:5b: f2:5e:88:b5:78:d1:81:e7:e7:9a:31:4a:70:90:b4:7c:1e:f8: b5:00:cc:8b:3d:ff:ef:5f:16:54:a6:1a:19:66:64:0d:4d:db: 30:60:9d:71:dd:eb:09:ab:f4:e7:c9:03:54:bb:80:df:08:69: f3:a8:e8:91 -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISAZt3xpwQt7Qa+rio7ptZgaxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQzOTE0YTQ4ZTVkYWU1YTc1NmIxZTNiOGZiZTQzN2VlMGQ4YjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0UmNGojW0/PBfG3M7DcDxSRAM3W hqwzlEhkoJiPJnYBvGm+r0u4h5x2I+zUg864sQIZEr7lunzqJubs3Ji30CnnTjZD WP+oneFP5qsrENN08YNfS3E1e0eUU17c3nLh/YV0ItyuXHcxglSqGRKoqfy99jBp 0YVdeXhobQFGX0Pf9C3nfzbaB9iZUHQBgFK/RtToKHmHrka6MZSFoEVG4im610wj cZGfwx3djCoMASoIYVH10XUXnD/chh1JXZmulikY6MgdMZc610xrO9/zp9wmKGD5 6gt2FYDpvndhFKQT0rBLTuEWMM/bWXBupFXDiPRP6K/4PXMF+7UftudLxQIDAQAB o4IC/TCCAvkwHQYDVR0OBBYEFLRDkUpI5drlp1ax47j75DfuDYsMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzY5MjBk Mi1hN2E2LTQxYTUtOTZlMC0zMTRlZjc0NmQ4YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvNjkyMGQy LWE3YTYtNDFhNS05NmUwLTMxNGVmNzQ2ZDhhNi8xL3RFT1JTa2psMnVXblZySGp1 UHZrTi00Tml3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF BwEHAQH/BGkwZzAyBAIAATAsAwQDlX44AwQAwW1+AwQAwgAGAwQAwgAlMAwDBADC ACsDBADCACwDBAHDFoowMQQCAAIwKwMHACABBngACQMHACABBngAZAMHACABBngA aAMHACABBngAbAMFACoCBuAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICUvcCAwML 9jANBgkqhkiG9w0BAQsFAAOCAQEAgFKCZQmu8MCOwpA+AQM8YIk7zmmAP5OENsU8 skI9Zyi27gsKNspAMaQFLK+4x7ua7GXDCAR/Mzkmilrdvm+ojHFj2JzuuDd4l/iI 34XsR9mJb9AhUJrr2Ypyf3ks7CUJhXyjITzC1fT5OBmORc/ORHytmrHqaSVw2l30 /wRfZ6ASiUwYnsWHeVDxTrGCrs4henj6aE1OB6zqzNqDfD7S1xXzkVL25mZPFCX3 DtsonwzzfMl6FwaJU9ImhFPXpU0A0wKMkjNb8l6ItXjRgefnmjFKcJC0fB74tQDM iz3/718WVKYaGWZkDU3bMGCdcd3rCav058kDVLuA3whp86jokQ== -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:20 2026 by rpki-client