This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer (raw, json) Hash identifier: VNsJB/WlaDxNirStXNudKW+EIw3My+uPBumjqZW8/SE= Subject key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B361940B65A05542EA640D1E92EE0AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51094 IP: 91.216.144.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:19:40:b6:5a:05:54:2e:a6:40:d1:e9:2e:e0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:24:89:4e:8c:c6:59:5f:94:9b:43:6d:e8: a5:ca:40:4c:d8:9e:8f:8c:de:9e:50:f3:82:19:e1: ef:fe:da:0f:53:c6:e3:94:6a:27:42:96:3a:31:1e: 0e:06:a2:8d:f8:25:35:96:f7:f4:dd:60:47:dc:8d: cb:e5:f8:3a:03:c7:ad:a7:11:45:9c:bf:03:be:68: 02:cb:25:d3:cc:6d:e5:f2:57:67:3b:51:5b:77:a1: 1d:30:c0:da:d8:21:f9:f3:bc:e0:34:be:d3:41:f3: d2:8e:42:72:cd:46:d5:33:21:31:42:f1:b0:03:6d: 01:57:bb:e3:cd:a2:dd:35:a4:43:b2:30:26:5a:b9: 38:8b:95:b2:e5:27:31:17:c3:be:e2:e0:5f:43:a0: fd:eb:1d:74:70:5d:04:70:8a:6d:5b:e5:79:3a:71: 88:91:be:33:ae:5a:2a:f0:7a:35:95:eb:fb:fe:ea: b7:42:cc:61:e2:af:82:07:f6:0d:40:c9:fe:f7:4f: 4c:5e:37:ad:dd:59:0d:0b:8d:9e:ac:81:1c:65:0b: d2:30:64:54:fe:b2:cb:4c:a8:f1:61:71:ba:80:07: f3:9c:fc:d8:64:7b:a1:7e:a8:f4:1e:55:43:39:25: 95:d6:03:6a:18:6e:a5:07:09:27:b1:db:50:79:76: a6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.144.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51094 Signature Algorithm: sha256WithRSAEncryption 77:d7:ba:21:ea:2e:af:d2:ea:c9:e5:46:dc:0e:ac:d6:cd:f3: 5c:1f:59:18:0f:d4:ab:49:a3:62:d4:27:24:fb:0a:ff:41:73: f0:4c:2e:5b:5c:3f:34:14:8c:c5:d4:47:22:5c:9c:79:e7:6b: 3d:8d:fe:8b:b5:cf:12:31:f6:ba:7c:8a:ed:e8:0c:4e:77:47: 2f:21:36:1d:0b:b5:ed:2d:3b:58:a9:9e:ec:8a:ab:d4:e1:3e: 5d:2e:f7:c7:4c:3e:bd:71:50:d8:02:82:4b:c2:3e:a6:6b:85: 86:19:bc:54:b9:0b:11:12:a7:cb:ff:8f:b3:59:cb:c9:03:6d: 3f:82:eb:68:9e:bf:fa:78:41:a6:1f:13:aa:d5:17:ec:0b:b0: d4:36:47:c9:8a:76:46:94:ba:23:fa:ac:f9:9a:9d:b7:da:d7: 7b:41:b1:31:b5:c7:bd:96:64:63:b9:d6:a3:6d:95:fb:a3:ba: 13:16:cf:ad:e7:30:f9:64:a0:64:ec:8f:2f:0c:d7:a4:d3:60: 6b:b1:59:71:50:f3:4b:04:a4:3d:ee:72:a2:13:66:39:22:41: e1:2b:e0:f2:c4:09:31:a8:c2:7a:8e:9d:bd:fd:f8:15:cd:0a: a3:74:f1:10:6a:42:e9:8a:c7:ac:b0:ed:65:da:5b:af:da:3a: 79:6d:6f:3f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NhlAtloFVC6mQNHpLuCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGZhNGQwODFiMzY4ODdmM2U1Y2E2NTM3Zjc0NjllZWUyMWQ3MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4YkiU6MxllflJtDbeilykBM2J6P jN6eUPOCGeHv/toPU8bjlGonQpY6MR4OBqKN+CU1lvf03WBH3I3L5fg6A8etpxFF nL8DvmgCyyXTzG3l8ldnO1Fbd6EdMMDa2CH587zgNL7TQfPSjkJyzUbVMyExQvGw A20BV7vjzaLdNaRDsjAmWrk4i5Wy5ScxF8O+4uBfQ6D96x10cF0EcIptW+V5OnGI kb4zrloq8Ho1lev7/uq3Qsxh4q+CB/YNQMn+909MXjet3VkNC42erIEcZQvSMGRU /rLLTKjxYXG6gAfznPzYZHuhfqj0HlVDOSWV1gNqGG6lBwknsdtQeXamZQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLT6TQgbNoh/PlymU390ae7iHXGuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzBjZmUz ZS03MjlmLTQ0MTgtOWNmNC04NjNkYWVjZmMyZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvMGNmZTNl LTcyOWYtNDQxOC05Y2Y0LTg2M2RhZWNmYzJlOC8xL3RQcE5DQnMyaUg4LVhLWlRm M1JwN3VJZGNhNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9iQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDHljANBgkqhkiG9w0BAQsFAAOCAQEAd9e6Ieour9LqyeVG3A6s1s3zXB9ZGA/U q0mjYtQnJPsK/0Fz8EwuW1w/NBSMxdRHIlyceedrPY3+i7XPEjH2unyK7egMTndH LyE2HQu17S07WKme7Iqr1OE+XS73x0w+vXFQ2AKCS8I+pmuFhhm8VLkLERKny/+P s1nLyQNtP4LraJ6/+nhBph8TqtUX7Auw1DZHyYp2RpS6I/qs+Zqdt9rXe0GxMbXH vZZkY7nWo22V+6O6ExbPrecw+WSgZOyPLwzXpNNga7FZcVDzSwSkPe5yohNmOSJB 4Svg8sQJMajCeo6dvf34Fc0Ko3TxEGpC6YrHrLDtZdpbr9o6eW1vPw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:38:14 2026 by rpki-client