This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer File: tPtrTEeRZokREVxp4mlk89XsovQ.cer (raw, json) Hash identifier: zFgs5djjUcC8uphmdwHqWHKzpeUiR3g7geiFb4yaOo0= Subject key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED63F5670FF630F0AFEC637C52A228 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214263 IP: 2a01:fd80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:63:f5:67:0f:f6:30:f0:af:ec:63:7c:52:a2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:09:c9:b9:df:8e:ff:dd:7a:65:b4:99:94:2b: 2f:f1:ff:09:7c:c9:81:51:bb:91:b9:24:60:94:38: 20:02:3e:02:f5:ab:bd:01:c3:64:a8:fc:79:d2:fd: f2:39:cc:21:2c:fd:97:d5:e6:d8:24:47:3f:4f:3f: dd:25:01:a6:cd:4b:9c:25:e8:69:ef:e1:2b:44:67: 0d:33:f1:99:f6:34:83:41:b2:7e:69:6a:27:2d:62: 2d:20:93:aa:4d:72:25:9a:5c:c8:59:51:97:c4:a9: 03:dc:bb:45:ae:b9:3e:d5:78:62:e6:29:03:5d:54: 99:62:0f:49:c0:26:6b:e6:4b:8e:97:ba:e0:bf:4c: 64:e5:b4:52:ff:10:47:80:37:1a:1e:a1:67:6a:06: ee:52:f2:45:eb:6a:f2:ef:2e:70:a3:5f:12:bd:da: df:7d:99:fc:f2:c3:a4:2a:b3:13:03:25:b8:90:30: 3f:1c:39:7a:e5:ba:75:91:a2:65:bf:5a:8f:f7:6b: ae:c9:1f:41:ec:45:cf:36:3b:3e:41:2c:c6:29:ce: e8:41:1d:76:0c:9c:8b:0a:06:8d:99:5c:1b:70:9a: 85:0b:66:db:56:e1:15:a6:9d:79:2a:f6:12:d1:e9: 94:db:30:b7:36:74:f0:c9:c8:0f:df:c4:21:89:16: 72:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:fd80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214263 Signature Algorithm: sha256WithRSAEncryption 5c:a1:83:8c:f5:bb:c2:a6:23:ce:ff:26:13:79:a6:bd:08:ff: cf:5f:a3:00:0c:20:9b:cd:84:2d:a3:5f:f3:1e:c9:c1:22:3f: 41:f7:b3:6f:0a:3c:6b:8d:33:86:68:74:a5:c3:b0:e3:d6:68: 9a:e6:37:36:87:53:2f:d0:d2:41:4f:5e:78:bd:a1:d8:24:6e: e7:d0:da:34:06:d9:b5:b2:50:fa:7b:72:1a:b8:ca:88:9e:6b: 5f:1c:a6:ed:3c:ef:35:1b:2b:7e:c5:af:07:67:45:18:20:c5: fa:da:cf:f6:a6:f7:be:dc:8e:62:6f:94:01:e4:51:15:d3:9f: c9:f3:51:50:78:4d:87:bf:54:5d:bf:7d:46:ec:17:56:32:33: c7:91:24:be:d5:eb:3d:50:cb:61:ba:90:c8:fb:7f:92:42:06: 20:ef:0a:b6:f2:bb:b0:4f:ec:79:06:0c:4b:51:55:f8:1b:58: e5:b0:c6:79:d9:9e:69:39:a5:cb:f8:08:07:84:8a:d6:ee:0d: ef:7f:c4:03:6b:fd:3a:a5:6b:5a:2e:ba:fa:97:e6:cc:5b:1c: c5:6d:ae:d1:5d:53:62:17:1c:27:76:7c:f9:42:4c:c4:a4:d6: 51:7e:a1:ae:84:99:b7:d0:af:8a:0f:ad:ee:4e:ea:f3:0a:93: 27:04:b7:f0 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZt57WP1Zw/2MPCv7GN8UqIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGZiNmI0YzQ3OTE2Njg5MTExMTVjNjllMjY5NjRmM2Q1ZWNhMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AnJud+O/916ZbSZlCsv8f8JfMmB UbuRuSRglDggAj4C9au9AcNkqPx50v3yOcwhLP2X1ebYJEc/Tz/dJQGmzUucJehp 7+ErRGcNM/GZ9jSDQbJ+aWonLWItIJOqTXIlmlzIWVGXxKkD3LtFrrk+1Xhi5ikD XVSZYg9JwCZr5kuOl7rgv0xk5bRS/xBHgDcaHqFnagbuUvJF62ry7y5wo18Svdrf fZn88sOkKrMTAyW4kDA/HDl65bp1kaJlv1qP92uuyR9B7EXPNjs+QSzGKc7oQR12 DJyLCgaNmVwbcJqFC2bbVuEVpp15KvYS0emU2zC3NnTwycgP38QhiRZyRwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFLT7a0xHkWaJERFcaeJpZPPV7KL0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzkwMTYw Ny1iMWVlLTQ5ZjAtYmRlMi03Y2JhMzVjYjZiODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvOTAxNjA3 LWIxZWUtNDlmMC1iZGUyLTdjYmEzNWNiNmI4MS8xL3RQdHJURWVSWm9rUkVWeHA0 bWxrODlYc292US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgH9gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDRPcwDQYJKoZIhvcNAQELBQADggEBAFyhg4z1u8KmI87/JhN5pr0I/89fowAM IJvNhC2jX/MeycEiP0H3s28KPGuNM4ZodKXDsOPWaJrmNzaHUy/Q0kFPXni9odgk bufQ2jQG2bWyUPp7chq4yoiea18cpu087zUbK37FrwdnRRggxfraz/am977cjmJv lAHkURXTn8nzUVB4TYe/VF2/fUbsF1YyM8eRJL7V6z1Qy2G6kMj7f5JCBiDvCrby u7BP7HkGDEtRVfgbWOWwxnnZnmk5pcv4CAeEitbuDe9/xANr/Tqla1ouuvqX5sxb HMVtrtFdU2IXHCd2fPlCTMSk1lF+oa6EmbfQr4oPre5O6vMKkycEt/A= -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:19 2026 by rpki-client