This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer File: tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer (raw, json) Hash identifier: BXRLsvhQ61dE+9hkpyPE2Exyla2TDrsEkMJYxUi+FNQ= Subject key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA3C3D8E5A58D1032F07ED3694075B11 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 12:16:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202118 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:3c:3d:8e:5a:58:d1:03:2f:07:ed:36:94:07:5b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 12:16:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:f8:2b:14:a7:70:01:ce:c2:67:66:e8:8d: c1:64:58:de:4c:a6:19:71:32:68:fc:2e:c0:e8:4f: f3:cd:b7:29:b6:bf:4e:41:48:32:f8:b4:b4:55:9d: e3:f2:6f:34:49:b8:96:48:bb:c8:4b:4c:34:7f:5a: c8:5f:22:ad:76:cc:8f:da:ca:7d:22:d4:68:2a:84: 95:f8:30:f0:fb:8b:10:ee:f1:3d:ab:4e:9c:e0:b3: 39:85:cb:61:ee:7f:bb:77:41:28:95:68:4d:8f:a0: 92:9f:a4:ed:b7:b5:d4:4a:b1:06:da:79:54:0a:93: fc:00:35:ab:8e:79:ff:91:c9:9e:d8:f6:2e:f6:7a: 50:bc:c0:47:ff:5b:d1:f0:0a:8a:73:fc:45:25:dd: b3:84:0c:3a:a6:2f:da:02:47:cd:71:db:cf:a5:52: 03:27:6e:1a:0e:5e:77:09:52:e8:e6:1f:a4:e6:c0: c8:d2:bb:81:9c:b6:a3:22:35:b2:de:49:aa:e4:50: d5:4e:bd:0c:26:0d:33:1b:27:db:25:2a:85:92:e6: a9:c5:fb:f2:14:cf:fd:9a:00:19:fd:95:73:42:05: b0:25:e6:16:6f:26:c7:e9:49:93:e5:2d:f8:25:93: d6:ba:d6:af:83:d5:21:a8:2d:2d:0c:4f:57:7b:cd: 60:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202118 Signature Algorithm: sha256WithRSAEncryption 9e:5b:61:6c:5c:bb:60:61:78:a9:3d:11:63:c1:de:e2:a1:50: f7:d9:25:5c:69:9e:b1:be:fe:59:6c:d7:f6:6c:7c:b1:ab:09: 5c:dd:e8:a8:7b:bc:01:15:c3:33:47:73:95:f3:df:c4:59:03: c6:6e:5c:11:e3:cf:b1:0b:ae:1e:1c:80:41:40:f3:05:af:fe: 7a:80:bd:fd:db:9a:02:69:2a:75:94:8e:69:33:1c:41:1a:f9: e4:be:dc:1b:0f:43:48:cb:49:11:c0:e6:3c:15:0c:59:81:83: 8d:af:68:23:da:9b:47:64:78:55:7d:dd:90:85:1e:ff:ae:0c: 5e:f5:dc:83:72:ab:c4:27:cd:17:8f:67:fd:58:51:54:e6:5d: ed:7c:6f:5f:3d:65:73:a3:64:e9:7d:8f:84:73:0c:3d:65:d4: 6e:93:6b:a0:55:29:34:a9:ac:f6:c6:74:2a:50:85:11:d0:f0: a3:94:78:e1:9d:67:f4:12:78:86:73:e6:08:85:fb:02:b1:7f: 67:8c:38:33:3a:df:b3:a2:e1:3d:85:56:0c:00:25:e7:89:0b: b3:59:1e:5e:0e:4e:0b:e8:44:df:e6:10:c4:5c:03:01:52:93: ad:95:9f:3a:99:b7:81:3a:59:26:37:9f:fe:e6:9d:6d:52:8e: ad:09:3d:a4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZv6PD2OWljRAy8H7TaUB1sRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTIxNjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGZjNDdjM2FiNzBmMzE1YjY2NDYxMWZmNTk4ZTRjMGVkMWIxYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumX4KxSncAHOwmdm6I3BZFjeTKYZ cTJo/C7A6E/zzbcptr9OQUgy+LS0VZ3j8m80SbiWSLvIS0w0f1rIXyKtdsyP2sp9 ItRoKoSV+DDw+4sQ7vE9q06c4LM5hcth7n+7d0EolWhNj6CSn6Ttt7XUSrEG2nlU CpP8ADWrjnn/kcme2PYu9npQvMBH/1vR8AqKc/xFJd2zhAw6pi/aAkfNcdvPpVID J24aDl53CVLo5h+k5sDI0ruBnLajIjWy3kmq5FDVTr0MJg0zGyfbJSqFkuapxfvy FM/9mgAZ/ZVzQgWwJeYWbybH6UmT5S34JZPWutavg9UhqC0tDE9Xe81gZwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLT8R8OrcPMVtmRhH/WY5MDtGxumMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzhlYTBl Mi04MWI4LTQ0MmQtODRmMi1jMmExMDAwOWI0OTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvOGVhMGUy LTgxYjgtNDQyZC04NGYyLWMyYTEwMDA5YjQ5Ni8xL3RQeEh3NnR3OHhXMlpHRWY5 Wmprd08wYkc2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMVhjANBgkqhkiG9w0BAQsFAAOCAQEAnlthbFy7YGF4 qT0RY8He4qFQ99klXGmesb7+WWzX9mx8sasJXN3oqHu8ARXDM0dzlfPfxFkDxm5c EePPsQuuHhyAQUDzBa/+eoC9/duaAmkqdZSOaTMcQRr55L7cGw9DSMtJEcDmPBUM WYGDja9oI9qbR2R4VX3dkIUe/64MXvXcg3KrxCfNF49n/VhRVOZd7XxvXz1lc6Nk 6X2PhHMMPWXUbpNroFUpNKms9sZ0KlCFEdDwo5R44Z1n9BJ4hnPmCIX7ArF/Z4w4 Mzrfs6LhPYVWDAAl54kLs1keXg5OC+hE3+YQxFwDAVKTrZWfOpm3gTpZJjef/uad bVKOrQk9pA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:37 2026 by rpki-client