This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer File: tGS0UjqJcrni9GpPShY06XAnrt8.cer (raw, json) Hash identifier: ifWx+Q/kmHWMC5FI8bw71Qio3FkAO4dXfG7W++zi+aU= Subject key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79111C5E5C470D9C3821421DEFB9C148 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199373 IP: 5.61.112.0/21 IP: 2a01:69c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1c:5e:5c:47:0d:9c:38:21:42:1d:ef:b9:c1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:c9:99:40:45:07:75:be:51:57:1f:f8:c5: d4:e2:3b:15:95:0a:74:39:a8:72:b6:e1:8b:a9:a5: 90:65:36:38:18:e6:71:97:e1:c2:42:85:d4:c5:aa: dd:85:58:da:41:91:42:3d:4d:1a:d4:3e:6b:d4:52: d9:09:ed:72:78:31:aa:61:21:62:fe:d0:66:7c:9f: f9:97:ab:3a:54:9e:f5:26:9a:e8:e5:8a:b6:7f:52: 98:ff:3d:61:5d:dc:50:b5:2f:18:66:07:dd:83:02: b0:c8:46:3c:c3:22:91:f3:12:0a:13:60:29:ce:67: 5e:a7:92:66:94:2f:27:a6:32:76:f3:34:20:79:89: 86:ad:d0:4f:7b:08:b1:ab:24:b0:99:e8:b1:4d:0a: 12:cc:8c:4c:fa:ec:ed:b7:cd:05:71:ac:b5:29:3b: aa:16:64:bd:92:b2:2d:a0:68:10:42:66:45:08:09: cb:12:76:68:37:02:1a:98:df:a3:61:34:d6:83:ce: 3d:a3:0d:24:7f:cf:e0:18:c4:d4:ee:c7:61:55:28: 75:e0:67:72:af:ff:24:e8:a3:19:23:db:b9:77:50: 7e:6f:9c:01:b5:1e:87:9c:09:b8:71:5d:3b:1f:da: af:85:8c:10:81:4e:24:d4:56:9a:b7:bd:50:83:d5: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.112.0/21 IPv6: 2a01:69c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199373 Signature Algorithm: sha256WithRSAEncryption 15:66:e9:d4:52:b9:7f:66:b3:21:5f:26:5d:2d:42:4e:4c:81: 81:a0:c6:5d:35:e2:c6:38:7b:69:0a:57:d4:ac:fe:01:4d:ec: 3c:76:ce:9a:ae:e2:6a:dd:4e:f5:4b:83:94:e6:70:9a:ce:0d: cb:d6:04:e6:c8:3c:cb:b5:f2:fd:4e:25:0f:44:32:2b:a3:25: 4e:2c:25:1e:4e:ca:56:42:f2:71:75:e8:8c:b4:94:ab:62:58: 2f:8a:40:26:1c:06:36:e1:70:34:a9:e4:5a:57:d4:17:65:c0: ce:d4:83:1b:41:56:d8:49:c1:89:45:69:01:b3:68:2f:6c:93: 89:fb:8c:c9:1d:35:c7:bc:e0:fd:67:a3:59:f4:c5:3d:49:3f: fd:9a:6e:49:54:fd:aa:66:6b:82:f7:b2:73:c4:b4:71:38:5b: 89:23:b7:16:a1:8a:c4:7e:8b:b7:65:42:d9:91:0e:bc:22:03: 91:69:61:2f:87:77:12:3d:ec:0a:35:2d:14:ee:ad:5f:79:d6: 8e:22:7b:77:c2:94:63:8b:08:d1:60:c0:7a:16:25:c5:54:b5: d3:61:f6:e4:a2:12:dd:95:6c:4b:ca:7c:fc:34:be:4a:4c:77: e8:a2:32:cc:8d:0f:59:2e:81:91:38:4e:5a:9a:3d:f7:32:dc: 7e:53:71:a6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ERxeXEcNnDghQh3vucFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDY0YjQ1MjNhODk3MmI5ZTJmNDZhNGY0YTE2MzRlOTcwMjdhZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoizJmUBFB3W+UVcf+MXU4jsVlQp0 OahytuGLqaWQZTY4GOZxl+HCQoXUxardhVjaQZFCPU0a1D5r1FLZCe1yeDGqYSFi /tBmfJ/5l6s6VJ71Jpro5Yq2f1KY/z1hXdxQtS8YZgfdgwKwyEY8wyKR8xIKE2Ap zmdep5JmlC8npjJ28zQgeYmGrdBPewixqySwmeixTQoSzIxM+uztt80Fcay1KTuq FmS9krItoGgQQmZFCAnLEnZoNwIamN+jYTTWg849ow0kf8/gGMTU7sdhVSh14Gdy r/8k6KMZI9u5d1B+b5wBtR6HnAm4cV07H9qvhYwQgU4k1Faat71Qg9UlYwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLRktFI6iXK54vRqT0oWNOlwJ67fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmL2M3Y2Fm My1lYjA4LTQ1NTYtYTViNy1mYzZlNzc4ODQwNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvYzdjYWYz LWViMDgtNDU1Ni1hNWI3LWZjNmU3Nzg4NDA1NC8xL3RHUzBVanFKY3JuaTlHcFBT aFkwNlhBbnJ0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDBT1wMA0EAgACMAcDBQAqAWnAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMKzTANBgkqhkiG9w0BAQsFAAOCAQEAFWbp1FK5f2az IV8mXS1CTkyBgaDGXTXixjh7aQpX1Kz+AU3sPHbOmq7iat1O9UuDlOZwms4Ny9YE 5sg8y7Xy/U4lD0QyK6MlTiwlHk7KVkLycXXojLSUq2JYL4pAJhwGNuFwNKnkWlfU F2XAztSDG0FW2EnBiUVpAbNoL2yTifuMyR01x7zg/WejWfTFPUk//ZpuSVT9qmZr gveyc8S0cThbiSO3FqGKxH6Lt2VC2ZEOvCIDkWlhL4d3Ej3sCjUtFO6tX3nWjiJ7 d8KUY4sI0WDAehYlxVS102H25KIS3ZVsS8p8/DS+Skx36KIyzI0PWS6BkThOWpo9 9zLcflNxpg== -----END CERTIFICATE-----Generated at Fri Jan 9 00:52:25 2026 by rpki-client