This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer File: tJ61DLi6yS3BduiofPJVUoIhlPo.cer (raw, json) Hash identifier: QXRUKzVsBplWCaPH6pK/bVpN+kgTElfbMorTqU/ygVw= Subject key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC6214D551D3A265C3788D7ED71695 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199464 IP: 185.117.196.0/22 IP: 2a06:8640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:62:14:d5:51:d3:a2:65:c3:78:8d:7e:d7:16:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5a:4b:b6:e0:f8:21:67:9f:74:4a:24:7f:98: 38:42:57:3f:0b:f3:73:e3:b4:dc:f1:49:c5:c7:31: 4a:0a:ca:93:5a:8a:9c:2c:c8:0b:22:39:58:6a:be: 52:83:e0:91:2e:e8:e8:3d:95:ee:50:0a:4e:6d:a5: 4f:f3:20:99:0b:10:1a:87:85:ea:77:f9:58:1c:46: aa:cd:1a:7a:ef:60:88:04:a5:1e:2b:24:e6:8d:31: a7:3b:9e:0c:52:09:56:d3:b9:ce:15:81:a6:ed:9c: 82:e2:d3:b3:b4:c9:f3:be:69:16:f7:5c:8c:99:ba: 63:69:a0:c4:14:4e:ec:1c:58:61:21:92:b5:1d:1d: c1:5b:f1:af:16:32:c3:79:7f:20:3d:18:1b:9b:1a: 8e:88:61:43:f2:ad:bc:a0:8a:53:6d:fb:93:96:f1: 7d:d7:41:08:42:a2:ee:9d:04:db:c2:e9:ae:25:fa: b9:6b:fb:8f:49:5a:33:15:66:34:dc:ce:60:c2:66: 0f:5a:d7:27:f0:f2:9e:32:21:7f:4b:d3:9f:20:15: 9e:e3:34:48:81:62:9a:d1:5e:d8:86:24:09:50:54: e5:f8:49:52:21:ef:cb:ea:93:15:1e:ed:78:65:89: d1:03:89:7e:20:6c:e0:a6:6b:0d:03:03:99:bb:a3: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.196.0/22 IPv6: 2a06:8640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199464 Signature Algorithm: sha256WithRSAEncryption 09:3f:67:78:68:6f:cb:f2:3d:f2:7f:76:f8:8b:fe:cc:ee:1c: b5:31:ec:16:84:81:5e:49:f1:b6:2f:51:e0:6b:e7:02:1e:5d: 4a:e2:f0:d6:c6:39:48:34:a6:f7:4f:89:48:de:46:ba:79:cc: 89:4a:8b:0b:2b:12:cb:80:62:c1:c1:3d:47:e2:99:56:2f:40: d6:4c:c0:68:60:b5:b7:e3:69:cd:8b:54:06:2a:d2:00:67:ba: 1a:df:ea:93:33:fe:6f:d1:96:bc:8e:e5:2e:2e:38:23:e1:77: d6:1a:53:28:fc:b6:85:83:2a:9e:48:c5:67:c9:f3:66:c2:99: 47:56:d5:c1:2b:63:6b:f1:4c:07:a4:07:f1:e6:a3:90:59:53: 70:c5:b3:f4:b6:81:70:09:0e:2f:8c:50:c2:1d:ae:c1:2c:04: 1f:e2:78:8c:b2:3d:63:fb:ed:f7:5f:a1:94:93:4a:2a:cc:29: d6:4e:8f:38:a2:34:17:6b:c5:eb:36:14:59:58:5e:ce:d1:6f: 55:cb:83:44:9b:e9:75:01:c5:40:f4:bf:59:44:b4:87:b3:e5: b0:9f:56:2e:cf:40:2f:b1:b4:82:e3:b5:9d:27:0d:1e:f0:f0: 06:ec:ca:41:b6:33:34:71:ef:31:07:15:2e:f8:ca:59:a1:a2: dd:76:18:6f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57GIU1VHTomXDeI1+1xaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDllYjUwY2I4YmFjOTJkYzE3NmU4YTg3Y2YyNTU1MjgyMjE5NGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01pLtuD4IWefdEokf5g4Qlc/C/Nz 47Tc8UnFxzFKCsqTWoqcLMgLIjlYar5Sg+CRLujoPZXuUApObaVP8yCZCxAah4Xq d/lYHEaqzRp672CIBKUeKyTmjTGnO54MUglW07nOFYGm7ZyC4tOztMnzvmkW91yM mbpjaaDEFE7sHFhhIZK1HR3BW/GvFjLDeX8gPRgbmxqOiGFD8q28oIpTbfuTlvF9 10EIQqLunQTbwumuJfq5a/uPSVozFWY03M5gwmYPWtcn8PKeMiF/S9OfIBWe4zRI gWKa0V7YhiQJUFTl+ElSIe/L6pMVHu14ZYnRA4l+IGzgpmsNAwOZu6Mo6QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLSetQy4usktwXboqHzyVVKCIZT6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzNlYWE3 MC0wNTIwLTQ1NTktODQxYS00Y2E5NTZiMDhhNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvM2VhYTcw LTA1MjAtNDU1OS04NDFhLTRjYTk1NmIwOGE0MS8xL3RKNjFETGk2eVMzQmR1aW9m UEpWVW9JaGxQby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXXEMA0EAgACMAcDBQMqBoZAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLKDANBgkqhkiG9w0BAQsFAAOCAQEACT9neGhvy/I9 8n92+Iv+zO4ctTHsFoSBXknxti9R4GvnAh5dSuLw1sY5SDSm90+JSN5GunnMiUqL CysSy4BiwcE9R+KZVi9A1kzAaGC1t+NpzYtUBirSAGe6Gt/qkzP+b9GWvI7lLi44 I+F31hpTKPy2hYMqnkjFZ8nzZsKZR1bVwStja/FMB6QH8eajkFlTcMWz9LaBcAkO L4xQwh2uwSwEH+J4jLI9Y/vt91+hlJNKKswp1k6POKI0F2vF6zYUWVheztFvVcuD RJvpdQHFQPS/WUS0h7PlsJ9WLs9AL7G0guO1nScNHvDwBuzKQbYzNHHvMQcVLvjK WaGi3XYYbw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:48 2026 by rpki-client