This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer File: tFrdzVeWSPw_YSTlWEee8LB_AYw.cer (raw, json) Hash identifier: CjSHWElh6MnlcpX/9rsC1cEXL7R3N+okVSN9yUGvFTY= Subject key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED53C3C2E8E6B9BC91835099A1DC6D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215024 IP: 45.138.0.0/22 IP: 45.148.64.0/22 IP: 109.71.159.0/24 IP: 2a14:48c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:53:c3:c2:e8:e6:b9:bc:91:83:50:99:a1:dc:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b45addcd579648fc3f6124e558479ef0b07f018c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f3:ac:8e:88:84:18:a6:3b:82:ab:b5:fe:73: 48:d7:26:d0:d3:14:00:2e:33:23:55:f3:8a:e5:01: 52:7d:f7:45:c6:92:ed:a8:df:ec:e1:ac:7f:e7:6f: 7c:52:b9:08:1a:1e:a8:40:17:3f:ee:c3:9b:67:cd: 51:e0:ee:a7:bb:f7:c2:42:c3:4c:ca:0c:3d:41:24: 29:60:94:0d:11:f3:5a:0b:a5:08:b9:3e:eb:59:cb: bc:9c:8d:d4:2f:8c:ee:73:9d:15:80:a2:d7:4a:b1: 5d:02:70:74:86:02:ee:6f:03:93:25:b9:e9:71:52: 46:c6:53:fa:1e:53:41:8d:25:58:e5:69:7a:58:d3: 36:49:69:d0:25:77:62:2e:f0:52:28:27:be:89:ba: 21:32:68:a1:40:db:39:7d:89:aa:36:16:9a:ed:00: ce:28:b9:2b:6c:0f:ae:7b:23:38:f9:f2:f9:a6:c6: 7f:f1:47:f3:3a:f6:d0:51:4a:7c:a0:f9:be:ae:79: 06:b9:21:ff:d6:a5:dc:57:db:ae:2e:5c:9a:30:96: 31:0e:a9:2e:2a:22:b4:bd:24:b2:4b:4e:e7:77:93: 70:c8:1b:62:34:07:6b:14:c6:e3:75:73:90:e1:df: a1:19:5f:c4:74:4d:00:13:e0:3f:05:17:ac:17:47: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.138.0.0/22 45.148.64.0/22 109.71.159.0/24 IPv6: 2a14:48c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215024 Signature Algorithm: sha256WithRSAEncryption 79:9c:e0:28:25:47:98:bb:38:d1:d8:a9:f1:46:b6:63:04:8b: 68:52:c3:a9:11:a8:a9:fe:8f:3c:b3:22:a7:f5:b4:0a:d7:28: 9e:13:76:dd:b8:27:e3:51:0e:a2:fc:50:58:6b:71:9f:81:26: c5:2f:9f:f9:70:b3:b0:13:9d:fa:0b:f5:48:4d:21:98:c5:70: 01:3a:5b:fb:19:ed:77:dd:06:92:53:71:bf:a1:d6:73:93:e2: d6:ec:96:88:d6:1c:78:3f:51:50:dc:ed:bc:5b:d5:13:e5:ab: 39:ca:6e:15:2d:5c:b6:61:2b:37:02:11:03:ea:69:87:ef:84: d0:7a:ed:9c:3e:ce:07:ca:73:15:38:f1:95:01:44:2b:b0:c8: e8:c8:47:0a:4b:4f:43:b9:c1:6a:05:bf:99:a4:3c:a5:0c:ec: 37:cc:7f:e6:fe:df:1d:06:94:aa:0b:32:97:dd:ba:ad:09:f7: 07:1a:57:5e:ec:d7:84:fc:3e:39:2c:0b:e3:30:4b:45:41:f7: 77:31:86:d6:74:49:4c:e4:dc:02:d6:b0:13:6d:10:11:8c:4a: c9:b4:90:61:c5:f9:2a:fb:5e:0c:1f:c3:77:51:ae:76:aa:08: 3d:04:f7:c9:05:2b:5f:51:9b:17:81:46:f6:6f:a0:d4:7b:78: 20:08:df:fa -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt57VPDwujmubyRg1CZodxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDVhZGRjZDU3OTY0OGZjM2Y2MTI0ZTU1ODQ3OWVmMGIwN2YwMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/OsjoiEGKY7gqu1/nNI1ybQ0xQA LjMjVfOK5QFSffdFxpLtqN/s4ax/5298UrkIGh6oQBc/7sObZ81R4O6nu/fCQsNM ygw9QSQpYJQNEfNaC6UIuT7rWcu8nI3UL4zuc50VgKLXSrFdAnB0hgLubwOTJbnp cVJGxlP6HlNBjSVY5Wl6WNM2SWnQJXdiLvBSKCe+ibohMmihQNs5fYmqNhaa7QDO KLkrbA+ueyM4+fL5psZ/8UfzOvbQUUp8oPm+rnkGuSH/1qXcV9uuLlyaMJYxDqku KiK0vSSyS07nd5NwyBtiNAdrFMbjdXOQ4d+hGV/EdE0AE+A/BResF0d9xwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFLRa3c1Xlkj8P2Ek5VhHnvCwfwGMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2Y0ZjI0 NC04YzBjLTQ1NjQtOWM0Mi1hZjYwZmQ1ZjA2YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvZjRmMjQ0 LThjMGMtNDU2NC05YzQyLWFmNjBmZDVmMDZiMS8xL3RGcmR6VmVXU1B3X1lTVGxX RWVlOExCX0FZdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLYoAAwQCLZRAAwQAbUefMA0EAgACMAcDBQMq FEjAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNH8DANBgkqhkiG9w0BAQsFAAOC AQEAeZzgKCVHmLs40dip8Ua2YwSLaFLDqRGoqf6PPLMip/W0CtconhN23bgn41EO ovxQWGtxn4EmxS+f+XCzsBOd+gv1SE0hmMVwATpb+xntd90GklNxv6HWc5Pi1uyW iNYceD9RUNztvFvVE+WrOcpuFS1ctmErNwIRA+pph++E0HrtnD7OB8pzFTjxlQFE K7DI6MhHCktPQ7nBagW/maQ8pQzsN8x/5v7fHQaUqgsyl926rQn3BxpXXuzXhPw+ OSwL4zBLRUH3dzGG1nRJTOTcAtawE20QEYxKybSQYcX5KvteDB/Dd1GudqoIPQT3 yQUrX1GbF4FG9m+g1Ht4IAjf+g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:39 2026 by rpki-client