This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer File: tNc6atd6j4WbQD2yznFegtHPMv4.cer (raw, json) Hash identifier: 61FpaaF1G1inz+37sdnlQ8t1dgOwrXKi85Npf7hpQDs= Subject key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B16C38814EA1F4CCAEA2D4F695EB6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.146.136.0/22 IP: 2a0f:3000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:16:c3:88:14:ea:1f:4c:ca:ea:2d:4f:69:5e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:55:82:d1:07:a6:ee:42:4d:12:b7:f6:c5: 7d:a0:a0:3e:08:8f:d1:c4:26:a7:81:56:97:f8:dc: 02:7e:99:e7:a9:fe:fb:4f:fd:75:b1:eb:97:15:a5: 76:3d:8e:6f:23:ba:1c:4d:b4:ef:04:9d:81:31:19: 84:f4:57:a0:80:2c:dc:18:f8:2e:44:7a:37:2b:ba: 0f:06:d5:a0:82:b2:a2:dc:12:2e:04:7c:27:b9:0d: 5f:a7:97:5c:1b:48:86:da:ab:96:7e:ab:f3:c2:6f: 9e:33:ef:05:16:c2:8d:a5:52:ff:c7:e0:c6:11:a6: 56:00:cb:c6:9c:79:32:19:e9:a1:e8:e5:e6:db:51: 54:af:93:91:6f:75:23:ff:bb:63:3c:d7:2e:c1:0e: 5d:c8:86:a3:6c:c4:82:3b:eb:cf:63:bd:05:77:38: 5c:fd:e4:59:55:5f:9f:bb:15:04:66:19:7e:44:b8: 9c:6b:5e:79:4e:0d:6c:31:c9:13:ec:8a:b7:ba:5c: d0:e8:8c:cf:e3:9d:27:9e:20:c4:38:f2:69:3f:67: c9:c5:7b:8d:dc:c2:fd:f9:0a:b4:10:d1:41:08:09: 10:6e:df:3a:6a:2f:83:b2:bc:6a:0e:a4:9c:dd:95: d5:8c:4f:68:32:82:dc:9a:79:af:2f:0d:fc:54:f9: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.136.0/22 IPv6: 2a0f:3000::/29 Signature Algorithm: sha256WithRSAEncryption 49:cf:d3:a8:9d:2f:49:86:f9:bb:b5:ed:15:4c:61:61:a1:73: d9:ed:ee:8d:ec:11:c2:4c:83:eb:3e:1b:f6:78:7a:79:4f:e6: c3:53:05:42:e4:24:d2:92:c0:c9:08:59:cf:fe:6f:0a:b3:19: a9:7b:5b:63:55:8c:ac:34:bf:d9:f7:d8:c9:16:e0:46:85:6a: ba:60:6a:09:41:e3:eb:8f:94:63:cb:dc:c5:a2:33:c6:db:18: 78:e4:6d:a1:df:b7:b2:d3:01:5e:e9:3f:93:02:ae:05:b6:40: d4:28:82:66:ab:47:b9:de:f8:62:bc:b2:c2:58:95:a9:60:d2: b3:30:10:8d:8d:fd:f8:7c:92:ea:9b:a4:8e:65:99:ef:fb:07: b1:ef:68:4f:ed:b8:84:7b:0a:c0:a1:7b:e2:2f:5f:4d:63:dd: 47:78:e2:cc:95:6e:59:92:92:4b:a9:37:56:fb:eb:6b:c9:ce: 74:f3:4f:ee:fc:b6:63:95:63:7a:85:78:2b:14:a0:ad:b6:fd: dc:72:2d:12:a3:8c:80:a4:fd:e3:e9:0a:85:aa:d9:05:53:41: bb:97:74:97:73:5d:27:8a:41:4c:34:84:4a:67:a2:f1:25:58: ad:03:0e:ce:ef:ec:fc:0c:71:51:45:b5:10:ee:8b:9f:41:8e: c2:bf:69:17 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WxbDiBTqH0zK6i1PaV62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGQ3M2E2YWQ3N2E4Zjg1OWI0MDNkYjJjZTcxNWU4MmQxY2YzMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCdVgtEHpu5CTRK39sV9oKA+CI/R xCangVaX+NwCfpnnqf77T/11seuXFaV2PY5vI7ocTbTvBJ2BMRmE9FeggCzcGPgu RHo3K7oPBtWggrKi3BIuBHwnuQ1fp5dcG0iG2quWfqvzwm+eM+8FFsKNpVL/x+DG EaZWAMvGnHkyGemh6OXm21FUr5ORb3Uj/7tjPNcuwQ5dyIajbMSCO+vPY70Fdzhc /eRZVV+fuxUEZhl+RLica155Tg1sMckT7Iq3ulzQ6IzP450nniDEOPJpP2fJxXuN 3ML9+Qq0ENFBCAkQbt86ai+DsrxqDqSc3ZXVjE9oMoLcmnmvLw38VPkwoQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlLzdlN2Vl Ny0xYmQ0LTQ0MzUtODcxZi02Y2Y4ZTU2N2ZmMWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvN2U3ZWU3 LTFiZDQtNDQzNS04NzFmLTZjZjhlNTY3ZmYxYy8xL3ROYzZhdGQ2ajRXYlFEMnl6 bkZlZ3RIUE12NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZKIMA0EAgACMAcDBQMqDzAAMA0GCSqGSIb3 DQEBCwUAA4IBAQBJz9OonS9Jhvm7te0VTGFhoXPZ7e6N7BHCTIPrPhv2eHp5T+bD UwVC5CTSksDJCFnP/m8Ksxmpe1tjVYysNL/Z99jJFuBGhWq6YGoJQePrj5Rjy9zF ojPG2xh45G2h37ey0wFe6T+TAq4FtkDUKIJmq0e53vhivLLCWJWpYNKzMBCNjf34 fJLqm6SOZZnv+wex72hP7biEewrAoXviL19NY91HeOLMlW5ZkpJLqTdW++tryc50 80/u/LZjlWN6hXgrFKCttv3cci0So4yApP3j6QqFqtkFU0G7l3SXc10nikFMNIRK Z6LxJVitAw7O7+z8DHFRRbUQ7oufQY7Cv2kX -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:20 2026 by rpki-client