This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer File: tIENfJv8WLngoeWRacPdMi3p9zc.cer (raw, json) Hash identifier: 3z3rtgI0utxWq2YWyiT0ucJ63lDGMYSPX5yrkK1sRfE= Subject key identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B03F5E706B3B194722C156B977243 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29050 IP: 5.43.232.0/21 IP: 46.182.152.0/21 IP: 185.14.76.0/22 IP: 213.243.192.0/18 IP: 2a01:b080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:03:f5:e7:06:b3:b1:94:72:2c:15:6b:97:72:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e1:ca:15:2f:f0:66:32:82:c3:92:72:4d:31: 7d:7b:55:ca:39:b7:6e:7b:0b:8a:41:ca:2e:74:30: d1:bf:4f:f3:52:08:43:6e:1a:70:ed:b8:59:25:55: d6:9c:ec:a4:61:0e:47:83:95:7a:a0:89:64:c7:e8: a1:e8:76:c9:33:94:0d:d8:13:b9:89:5d:a2:9e:f2: 64:a4:ba:ce:d8:80:bd:b9:6c:f5:95:6d:b4:ba:27: 0e:1c:35:fd:59:9c:34:2a:97:ad:e6:e9:94:30:1d: 5e:81:c3:3e:b3:58:07:8f:52:2e:54:ef:c0:a9:c3: 9f:d0:81:4a:52:d2:75:24:e5:53:b0:d4:7b:1b:3c: 80:79:90:4d:ca:ff:e1:f4:7b:b8:0f:9b:f5:32:33: f0:97:b0:bd:44:a6:d6:a5:ce:e7:21:38:0d:21:eb: 24:37:92:ba:97:f9:a3:2e:c8:ad:ab:de:93:f1:5d: 76:d2:f0:84:b6:1e:9b:0b:57:93:37:cb:1c:ba:9c: f5:03:bc:65:a5:dc:73:f5:ce:ef:c6:e4:7a:b0:d0: 45:08:75:31:8e:d5:4f:f0:be:f7:66:3e:db:84:3d: b4:8e:b8:8e:f9:e4:04:fe:3e:c2:f8:60:8f:2a:ce: a8:4c:35:d7:c9:bb:d6:d9:d4:51:aa:25:49:0e:2d: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.43.232.0/21 46.182.152.0/21 185.14.76.0/22 213.243.192.0/18 IPv6: 2a01:b080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29050 Signature Algorithm: sha256WithRSAEncryption 5c:ea:dd:1b:d2:24:86:9c:ed:4f:25:2e:fe:7c:1d:42:f2:33: 4d:2f:ba:95:b4:86:bf:da:36:54:50:5d:ff:46:b7:7d:26:eb: 71:a6:fa:9e:61:c0:0f:ac:18:36:31:55:d2:1c:83:51:15:27: 6b:bd:5a:fb:9b:e1:fe:68:42:55:14:a1:aa:31:77:af:38:ac: d6:1b:01:30:44:31:3d:69:8a:66:3f:bf:90:fa:31:89:77:2b: ce:3e:cb:3f:eb:0e:ab:37:0b:83:22:14:e7:84:22:9e:ca:bd: 1e:2d:4f:2b:af:0c:8a:df:5c:9f:f2:3d:dc:64:24:8c:40:47: 38:90:4e:47:c9:ef:be:20:3e:40:62:6b:5a:28:ab:c9:12:c7: 93:6e:88:2b:cf:99:76:e7:46:31:01:fc:8f:d1:53:ed:b5:cc: 87:44:84:98:48:9d:46:2e:ec:70:cd:d8:2c:55:b5:8e:e4:e9: 5e:73:05:41:be:ec:ba:1a:1e:24:d8:b6:fe:ef:08:9d:b1:18: e4:63:b6:55:0b:45:ef:8e:67:e3:3b:36:5b:37:3e:90:f9:6c: 06:0a:ca:47:e5:87:0b:97:64:bf:3a:e0:55:30:3c:5b:18:16: 46:f2:e4:14:26:ef:cb:b0:20:97:67:10:f5:8a:d6:c2:5a:72: cd:db:32:f9 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt6WwP15wazsZRyLBVrl3JDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDgxMGQ3YzliZmM1OGI5ZTBhMWU1OTE2OWMzZGQzMjJkZTlmNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOHKFS/wZjKCw5JyTTF9e1XKObdu ewuKQcoudDDRv0/zUghDbhpw7bhZJVXWnOykYQ5Hg5V6oIlkx+ih6HbJM5QN2BO5 iV2invJkpLrO2IC9uWz1lW20uicOHDX9WZw0Kpet5umUMB1egcM+s1gHj1IuVO/A qcOf0IFKUtJ1JOVTsNR7GzyAeZBNyv/h9Hu4D5v1MjPwl7C9RKbWpc7nITgNIesk N5K6l/mjLsitq96T8V120vCEth6bC1eTN8scupz1A7xlpdxz9c7vxuR6sNBFCHUx jtVP8L73Zj7bhD20jriO+eQE/j7C+GCPKs6oTDXXybvW2dRRqiVJDi2v/QIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFLSBDXyb/Fi54KHlkWnD3TIt6fc3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzNkNGM0 Ni03NTQ1LTRiM2QtOGYxYy0yYTYzNDAyYmVjNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvM2Q0YzQ2 LTc1NDUtNGIzZC04ZjFjLTJhNjM0MDJiZWM2Ni8xL3RJRU5mSnY4V0xuZ29lV1Jh Y1BkTWkzcDl6Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBSvoAwQDLraYAwQCuQ5MAwQG1fPAMA0EAgAC MAcDBQAqAbCAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnF6MA0GCSqGSIb3DQEB CwUAA4IBAQBc6t0b0iSGnO1PJS7+fB1C8jNNL7qVtIa/2jZUUF3/Rrd9Jutxpvqe YcAPrBg2MVXSHINRFSdrvVr7m+H+aEJVFKGqMXevOKzWGwEwRDE9aYpmP7+Q+jGJ dyvOPss/6w6rNwuDIhTnhCKeyr0eLU8rrwyK31yf8j3cZCSMQEc4kE5Hye++ID5A YmtaKKvJEseTbogrz5l250YxAfyP0VPttcyHRISYSJ1GLuxwzdgsVbWO5OlecwVB vuy6Gh4k2Lb+7widsRjkY7ZVC0XvjmfjOzZbNz6Q+WwGCspH5YcLl2S/OuBVMDxb GBZG8uQUJu/LsCCXZxD1itbCWnLN2zL5 -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:58 2026 by rpki-client