This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer File: tGasCkklUoPNUwZpcc17Pf4qPOg.cer (raw, json) Hash identifier: +hgBcOjikv1VgIf4pIIuD1Ra067p31uNI03zrs8h4xU= Subject key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A301DA33C2BAFF2C63A090E32D0BD8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48101 IP: 37.25.44.0/22 IP: 91.151.240.0/20 IP: 91.228.232.0 -- 91.228.234.255 IP: 95.166.0.0/18 IP: 98.96.160.0/20 IP: 134.19.192.0/21 IP: 134.65.128.0/19 IP: 146.103.128.0/18 IP: 176.20.128.0/18 IP: 185.16.160.0/22 IP: 185.122.192.0/22 IP: 199.15.232.0/21 IP: 2a04:200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:01:da:33:c2:ba:ff:2c:63:a0:90:e3:2d:0b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b6:3e:bf:01:83:24:53:4a:ef:65:9c:56:07: c3:80:cb:ae:ac:4b:2e:49:77:ba:31:32:04:50:ca: 05:02:88:58:a4:01:04:bf:73:c9:c8:40:cf:09:b7: 87:fb:c6:61:6b:d8:09:b2:23:8d:10:10:e9:79:be: 22:43:25:5f:63:d5:df:28:08:cb:2f:91:a2:99:a7: 2a:70:76:34:c9:ca:fc:67:bf:7f:9d:6e:93:ef:90: 69:4e:ae:25:b0:bd:a6:db:12:fe:79:87:72:99:7e: bf:e7:c1:bc:c9:8d:21:94:d7:d8:29:b3:5b:c6:af: 58:fb:fa:39:cf:ef:86:b5:1a:48:bf:e9:4b:22:76: 69:50:10:49:74:15:86:f8:e5:68:03:82:56:b2:51: 11:a2:21:a8:12:40:ac:92:9f:3b:63:a7:80:45:91: e3:b3:cc:24:94:49:87:b3:fe:a2:f4:f0:56:e3:da: 42:da:87:af:b0:99:10:b6:ee:ac:17:52:69:3e:7a: f4:69:70:fa:04:a4:7b:f2:d4:d0:e3:8a:75:3a:9d: 76:22:e8:e0:b3:99:f5:3d:8e:68:cf:b5:a2:d6:2b: 5f:cc:3a:7e:86:3e:04:6e:2c:ab:8a:c6:6a:a4:b0: fd:0e:65:bd:04:f5:76:4b:c9:29:bf:6a:a0:6e:2f: 99:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.25.44.0/22 91.151.240.0/20 91.228.232.0-91.228.234.255 95.166.0.0/18 98.96.160.0/20 134.19.192.0/21 134.65.128.0/19 146.103.128.0/18 176.20.128.0/18 185.16.160.0/22 185.122.192.0/22 199.15.232.0/21 IPv6: 2a04:200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48101 Signature Algorithm: sha256WithRSAEncryption 14:ef:d4:cd:e8:9f:4b:26:bf:fa:e0:95:9e:ec:d5:70:b4:4d: ab:f1:ae:a3:61:59:bc:9c:1c:b3:9c:c9:fe:b8:7d:6c:93:d1: 4d:82:e4:a3:a0:f8:e6:e2:c5:49:22:f2:64:ff:18:b0:81:0e: 77:d9:e5:74:7b:eb:bb:03:19:d1:b9:71:87:67:c5:7d:d9:82: b9:96:cb:20:d0:76:9f:13:0a:83:a7:b8:c7:57:dd:21:d3:b7: 5f:78:0f:d8:86:a9:9b:4b:f0:87:cb:f3:a2:57:70:c0:cf:59: f8:9f:11:39:9b:44:fb:9a:b9:57:2e:cc:26:b2:e1:c8:63:cc: ba:da:00:ee:db:a4:b4:96:70:92:01:94:d3:8a:17:22:24:6e: 96:d0:b2:36:e3:31:9e:ef:2a:8b:da:cb:9a:cb:3c:29:9a:af: 14:1f:90:b0:af:27:a7:c0:6a:06:54:87:f6:34:a2:c5:6d:4d: 9f:2e:20:74:ce:07:a0:a5:89:3d:6e:1c:bc:68:8d:fb:53:cf: 1b:74:ae:52:4b:31:19:a9:18:f4:eb:da:1b:31:12:6a:8a:16: 5e:16:14:9b:2a:51:9c:0e:79:be:81:7e:e6:eb:5a:82:83:cf: 1d:c9:73:6a:fd:02:81:47:6f:9b:03:f8:0d:10:92:86:3c:76: ad:20:f5:de -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgISAZt4owHaM8K6/yxjoJDjLQvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDY2YWMwYTQ5MjU1MjgzY2Q1MzA2Njk3MWNkN2IzZGZlMmEzY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LY+vwGDJFNK72WcVgfDgMuurEsu SXe6MTIEUMoFAohYpAEEv3PJyEDPCbeH+8Zha9gJsiONEBDpeb4iQyVfY9XfKAjL L5GimacqcHY0ycr8Z79/nW6T75BpTq4lsL2m2xL+eYdymX6/58G8yY0hlNfYKbNb xq9Y+/o5z++GtRpIv+lLInZpUBBJdBWG+OVoA4JWslERoiGoEkCskp87Y6eARZHj s8wklEmHs/6i9PBW49pC2oevsJkQtu6sF1JpPnr0aXD6BKR78tTQ44p1Op12Iujg s5n1PY5oz7Wi1itfzDp+hj4EbiyrisZqpLD9DmW9BPV2S8kpv2qgbi+ZrQIDAQAB o4IC+TCCAvUwHQYDVR0OBBYEFLRmrApJJVKDzVMGaXHNez3+KjzoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzEzM2I1 Mi03YTY2LTQxYWItYWVlZS1jOWI0NzBkYzI0MGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvMTMzYjUy LTdhNjYtNDFhYi1hZWVlLWM5YjQ3MGRjMjQwYi8xL3RHYXNDa2tsVW9QTlV3WnBj YzE3UGY0cVBPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF BwEHAQH/BGkwZzBWBAIAATBQAwQCJRksAwQEW5fwMAwDBANb5OgDBABb5OoDBAZf pgADBARiYKADBAOGE8ADBAWGQYADBAaSZ4ADBAawFIADBAK5EKADBAK5esADBAPH D+gwDQQCAAIwBwMFAyoEAgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALvlMA0G CSqGSIb3DQEBCwUAA4IBAQAU79TN6J9LJr/64JWe7NVwtE2r8a6jYVm8nByznMn+ uH1sk9FNguSjoPjm4sVJIvJk/xiwgQ532eV0e+u7AxnRuXGHZ8V92YK5lssg0Haf EwqDp7jHV90h07dfeA/YhqmbS/CHy/OiV3DAz1n4nxE5m0T7mrlXLswmsuHIY8y6 2gDu26S0lnCSAZTTihciJG6W0LI24zGe7yqL2suayzwpmq8UH5CwryenwGoGVIf2 NKLFbU2fLiB0zgegpYk9bhy8aI37U88bdK5SSzEZqRj069obMRJqihZeFhSbKlGc Dnm+gX7m61qCg88dyXNq/QKBR2+bA/gNEJKGPHatIPXe -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:03 2026 by rpki-client