This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tPo4W-BSv6QF36zSnyarbwAeYEc.cer File: tPo4W-BSv6QF36zSnyarbwAeYEc.cer (raw, json) Hash identifier: g9qOZtOtSrXS0pQ0OxF1tFEEQnz1KG/UcVsbuh6h0Gs= Subject key identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3C77584433B98B798F2B6CCDE716C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215316 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c7:75:84:43:3b:98:b7:98:f2:b6:cc:de:71:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4fa385be052bfa405dfacd29f26ab6f001e6047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:5b:75:ea:59:21:89:a3:ff:70:ad:ec:99: 81:d9:11:30:6d:22:bb:1f:48:3c:de:83:e2:1f:7e: 1a:db:b6:de:79:bc:1f:b3:69:f2:9f:4e:cc:6e:84: 00:03:b2:65:6c:c1:4a:e3:48:b5:b4:18:53:55:c1: 45:90:61:44:a3:bf:7d:0f:8b:57:88:ff:82:ee:43: 27:80:f0:a8:48:fd:9d:d1:d3:c7:62:e2:11:1e:e7: 73:fc:cc:2c:a0:1f:fa:9f:8c:28:2d:84:13:c8:72: 3e:bf:f9:fd:59:09:da:ee:d8:55:24:fc:1f:09:7a: e8:1b:97:9a:ed:ad:51:36:46:07:14:d1:f1:49:48: ce:24:61:40:68:e5:12:f1:0a:b2:a5:61:43:53:65: 80:66:1f:b9:b0:5b:84:ae:58:72:b1:17:b2:63:21: 9f:64:3b:d5:75:82:22:0a:a0:34:f2:5a:eb:f7:68: 93:ca:09:0d:08:51:0f:c5:be:5e:3f:4f:62:6e:ec: a2:f7:30:65:15:d1:bc:cc:4b:e5:ea:c0:bc:77:cf: 21:e9:7d:3e:3f:a3:f7:34:5d:c4:0b:dc:11:14:bc: 93:e4:78:33:b9:28:a8:ab:7f:97:f9:c5:68:7f:18: 91:71:d8:79:01:0f:af:74:82:21:23:46:84:a2:ba: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FA:38:5B:E0:52:BF:A4:05:DF:AC:D2:9F:26:AB:6F:00:1E:60:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/677106-4099-4aef-8cc6-e960a50cdc81/1/tPo4W-BSv6QF36zSnyarbwAeYEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215316 Signature Algorithm: sha256WithRSAEncryption 87:00:ca:0d:5c:bc:5e:b3:c8:79:58:f5:aa:a9:98:df:4e:07: 15:6e:cd:4f:e3:ed:b0:ee:33:ee:f9:63:2e:14:86:07:ae:1f: b8:81:35:11:cb:82:ee:89:c7:9d:34:e1:de:3c:94:f7:11:3e: 2e:48:33:c8:d0:4e:d2:05:95:76:07:18:28:e4:bc:3b:2c:84: 5c:97:e3:3c:95:66:f5:19:6b:7b:86:47:e0:52:33:cf:ec:8b: bb:26:8d:f0:97:01:51:ab:53:a5:19:4d:37:67:65:ed:9e:f5: 4a:00:9d:77:9e:0b:9a:bb:78:9b:1c:29:6d:1c:cb:46:ff:25: b6:3b:2a:33:5c:24:49:d2:7f:55:48:a8:50:29:36:2f:7f:07: 97:3b:a8:77:00:eb:7c:88:d9:32:8c:89:43:ae:5c:21:b7:c5: 8c:34:f4:30:90:48:a2:50:fe:07:d7:8b:46:f8:b9:1a:31:cb: 88:81:25:c4:e4:62:1c:ab:d5:08:dd:81:63:b9:9e:ef:4d:27: 3a:81:d9:dd:cc:1d:8e:99:32:02:df:ce:d0:97:ba:45:9b:9f: 0c:68:0d:ac:56:93:bb:c2:af:6f:89:38:bf:d1:28:c6:9a:ca: 0e:40:32:42:07:98:4c:40:61:8e:0e:ed:31:61:96:4b:24:35: d2:c8:9b:db -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7o8d1hEM7mLeY8rbM3nFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGZhMzg1YmUwNTJiZmE0MDVkZmFjZDI5ZjI2YWI2ZjAwMWU2MDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApupbdepZIYmj/3Ct7JmB2REwbSK7 H0g83oPiH34a27beebwfs2nyn07MboQAA7JlbMFK40i1tBhTVcFFkGFEo799D4tX iP+C7kMngPCoSP2d0dPHYuIRHudz/MwsoB/6n4woLYQTyHI+v/n9WQna7thVJPwf CXroG5ea7a1RNkYHFNHxSUjOJGFAaOUS8QqypWFDU2WAZh+5sFuErlhysReyYyGf ZDvVdYIiCqA08lrr92iTygkNCFEPxb5eP09ibuyi9zBlFdG8zEvl6sC8d88h6X0+ P6P3NF3EC9wRFLyT5HgzuSioq3+X+cVofxiRcdh5AQ+vdIIhI0aEorpGKwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLT6OFvgUr+kBd+s0p8mq28AHmBHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiLzY3NzEw Ni00MDk5LTRhZWYtOGNjNi1lOTYwYTUwY2RjODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvNjc3MTA2 LTQwOTktNGFlZi04Y2M2LWU5NjBhNTBjZGM4MS8xL3RQbzRXLUJTdjZRRjM2elNu eWFyYndBZVlFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJFDANBgkqhkiG9w0BAQsFAAOCAQEAhwDKDVy8XrPI eVj1qqmY304HFW7NT+PtsO4z7vljLhSGB64fuIE1EcuC7onHnTTh3jyU9xE+Lkgz yNBO0gWVdgcYKOS8OyyEXJfjPJVm9Rlre4ZH4FIzz+yLuyaN8JcBUatTpRlNN2dl 7Z71SgCdd54Lmrt4mxwpbRzLRv8ltjsqM1wkSdJ/VUioUCk2L38HlzuodwDrfIjZ MoyJQ65cIbfFjDT0MJBIolD+B9eLRvi5GjHLiIElxORiHKvVCN2BY7me700nOoHZ 3cwdjpkyAt/O0Je6RZufDGgNrFaTu8Kvb4k4v9EoxprKDkAyQgeYTEBhjg7tMWGW SyQ10sib2w== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:27 2026 by rpki-client