This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer (raw, json) Hash identifier: bIuCDHzl1mV2OZT8OyjjIObR20ijMaWDhjQP5dAvKHc= Subject key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B18CCE1F1ABA8E9AC0935C151D75D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212552 IP: 185.202.113.0/24 IP: 195.248.240.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:18:cc:e1:f1:ab:a8:e9:ac:09:35:c1:51:d7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4f115424c181c67966ccc2467ede69d060ccf53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:27:98:51:1b:b3:96:e5:5e:cd:14:6b:5f: e1:db:ba:76:30:f1:22:a9:fe:28:df:6f:f2:c8:83: 6b:ff:c9:2a:a1:40:fd:55:46:b7:1c:33:48:a0:71: d8:d5:1e:98:55:ca:9f:b2:25:bf:05:d6:ac:f3:3a: 5d:f4:e0:d8:79:41:d1:2f:c2:6b:6c:44:7b:80:06: da:d9:51:73:40:62:ae:40:14:a0:00:02:5d:79:60: f5:bd:dd:b5:81:bf:30:69:b9:db:25:f7:2a:42:da: c0:1a:98:f4:14:a3:69:28:29:5f:75:ed:35:40:9d: 84:e6:ba:eb:32:b8:ba:f8:8c:aa:c4:d7:9f:e1:e5: 91:d0:1a:9d:8a:b8:8a:4f:d5:70:34:94:cf:e5:83: 56:a3:6c:f8:71:96:3d:fd:c8:35:7b:14:69:79:d1: 6a:a7:42:08:cb:25:3c:c3:1f:bb:47:20:ad:56:24: 9a:cc:8b:66:81:6e:69:80:93:1f:3f:22:f1:5f:cf: a1:17:f4:d8:1b:ec:dc:81:8d:3e:0a:64:b7:c9:ab: d4:03:2f:93:c8:ca:2f:c1:a8:cf:25:e0:bf:18:bd: 99:84:8d:94:71:31:1b:05:21:c7:6e:43:41:de:b5: bb:ad:40:8d:0f:2e:6c:a6:8b:11:4b:41:4d:f1:7a: 57:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.113.0/24 195.248.240.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212552 Signature Algorithm: sha256WithRSAEncryption 54:02:a9:57:e3:08:35:11:5c:33:0f:41:6a:2a:88:b8:9c:24: a8:85:5b:76:32:2b:26:12:15:a6:a0:31:dc:f5:b1:87:09:0f: 54:05:b0:d2:4b:b9:b6:9c:31:0e:96:69:55:df:9a:d3:17:56: 58:ef:79:4a:ab:fe:68:59:6d:ac:00:9b:ca:72:71:a7:37:4f: fc:bd:bc:ae:c2:51:6d:1d:b7:53:98:5d:3d:2e:ae:e6:a9:e4: c9:a9:24:a2:1c:38:42:0d:38:ed:98:6f:85:d9:3d:35:98:89: 66:7e:06:95:eb:de:db:38:98:cb:56:49:fc:b3:38:ff:2c:0f: bb:31:a9:21:1b:65:b5:cf:d8:10:6d:af:a1:1b:23:89:d4:f8: 31:b2:b1:8b:4a:04:82:f9:a8:52:06:2a:24:81:c1:d0:15:b4: 2a:c1:bb:6a:a7:f5:d4:54:f4:d5:2c:47:8c:91:1b:7b:ae:ca: 20:f7:3b:69:30:c6:a3:9f:50:1f:a3:44:5a:e9:c9:66:12:a1: fb:aa:85:d0:1c:13:3d:fb:d1:5b:c1:d3:fc:f2:9c:e6:9c:01: e0:3a:c7:21:c5:9d:f5:19:cb:3f:1f:32:1a:0d:38:80:c9:4c: 96:0a:0f:7d:e9:09:41:e5:22:50:cc:31:05:ae:df:db:99:d1: 8d:3d:85:a0 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6WxjM4fGrqOmsCTXBUdddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGYxMTU0MjRjMTgxYzY3OTY2Y2NjMjQ2N2VkZTY5ZDA2MGNjZjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+snmFEbs5blXs0Ua1/h27p2MPEi qf4o32/yyINr/8kqoUD9VUa3HDNIoHHY1R6YVcqfsiW/Bdas8zpd9ODYeUHRL8Jr bER7gAba2VFzQGKuQBSgAAJdeWD1vd21gb8wabnbJfcqQtrAGpj0FKNpKClfde01 QJ2E5rrrMri6+IyqxNef4eWR0BqdiriKT9VwNJTP5YNWo2z4cZY9/cg1exRpedFq p0IIyyU8wx+7RyCtViSazItmgW5pgJMfPyLxX8+hF/TYG+zcgY0+CmS3yavUAy+T yMovwajPJeC/GL2ZhI2UcTEbBSHHbkNB3rW7rUCNDy5sposRS0FN8XpXpwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFLTxFUJMGBxnlmzMJGft5p0GDM9TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1Lzg2OTIx NC0xNmQ0LTQ1ZTAtYjg3ZS0zMmU5MzJkNmZkMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvODY5MjE0 LTE2ZDQtNDVlMC1iODdlLTMyZTkzMmQ2ZmQwZS8xL3RQRVZRa3dZSEdlV2JNd2ta LTNtblFZTXoxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAucpxAwQCw/jwMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwM+SDANBgkqhkiG9w0BAQsFAAOCAQEAVAKpV+MINRFcMw9BaiqIuJwk qIVbdjIrJhIVpqAx3PWxhwkPVAWw0ku5tpwxDpZpVd+a0xdWWO95Sqv+aFltrACb ynJxpzdP/L28rsJRbR23U5hdPS6u5qnkyakkohw4Qg047Zhvhdk9NZiJZn4Gleve 2ziYy1ZJ/LM4/ywPuzGpIRtltc/YEG2voRsjidT4MbKxi0oEgvmoUgYqJIHB0BW0 KsG7aqf11FT01SxHjJEbe67KIPc7aTDGo59QH6NEWunJZhKh+6qF0BwTPfvRW8HT /PKc5pwB4DrHIcWd9RnLPx8yGg04gMlMlgoPfekJQeUiUMwxBa7f25nRjT2FoA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:48 2026 by rpki-client