This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer (raw, json) Hash identifier: p4BivHnjNG5CX0+8+p/99bA7yPkbklK81r0JSaHz8NA= Subject key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9B51057596E3AFD758770C05D3554 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.109.135.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:b5:10:57:59:6e:3a:fd:75:87:70:c0:5d:35:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:df:7b:86:f4:0a:61:06:1e:e6:2e:86:2a: 46:61:1e:b4:5f:bf:71:2e:1d:ab:74:66:27:22:a7: 2b:58:74:00:a3:60:f9:a8:07:59:0d:d1:cf:1f:b3: e8:5e:db:c2:fb:0b:78:d3:e8:d6:8f:d5:7e:64:94: 79:07:64:8b:bf:6b:08:f9:6e:bf:87:cc:6b:a9:67: 89:1b:27:18:25:82:00:ba:24:52:fc:4b:49:73:22: e0:65:f5:11:a6:3b:73:34:42:ca:92:68:28:4d:09: 91:77:9d:13:b9:a7:47:6c:e4:cc:2c:3b:bf:e4:63: 5b:1f:65:d0:b2:9a:81:c7:60:fd:8d:fe:27:75:84: 0c:26:ec:55:a7:ab:e9:30:6f:23:42:e2:e1:6e:ba: 09:ba:51:81:9f:67:63:b7:83:b4:81:23:2b:1a:4f: f9:ca:78:18:0c:3d:9b:da:38:60:e8:9d:89:34:77: f9:71:8a:c8:88:de:d2:8c:c0:bf:43:ba:5b:2e:96: cb:ed:7e:a3:d8:a8:a7:12:93:a8:00:23:bf:3b:1d: 1d:a7:23:17:5c:7c:11:b5:9d:f7:e5:fb:31:d4:09: 5a:df:e0:97:e9:c6:a3:84:a8:ee:a9:2a:78:92:89: 96:90:bb:4a:73:e7:02:26:ba:be:ef:d9:dc:9b:7b: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.135.0/24 Signature Algorithm: sha256WithRSAEncryption 05:62:b5:40:10:31:93:1d:10:d8:99:4b:2a:ec:0e:42:0e:6c: 44:16:2c:f5:0c:10:85:66:54:ea:07:2e:77:d5:7e:f2:05:28: 26:81:bb:c1:24:c9:b1:74:23:16:8d:5d:9f:1d:4d:97:68:bc: 52:1e:62:b1:b7:38:1a:c6:19:e4:12:6e:7a:1e:f9:ee:35:3b: db:28:47:88:9d:cd:35:22:a7:e5:ef:0d:3c:ac:af:34:f7:07: 29:fd:c4:73:fd:75:31:bb:1d:8b:52:bf:3d:ec:cb:7e:d6:03: c3:ef:c8:fa:83:d6:58:96:06:dc:27:00:ef:01:30:81:1e:21: ae:47:30:2b:11:22:7b:4c:36:76:88:db:bb:4c:7d:6d:a4:a4: d1:33:c7:6f:d7:20:e0:35:19:26:d0:2f:3a:2a:5e:4d:b6:f7: 8a:b7:2b:c1:92:56:8d:30:e9:72:b5:07:21:2d:4c:c6:c1:58: db:6e:a7:4a:f8:14:9b:f6:32:49:b4:9f:73:fd:1b:a3:98:3d: 23:63:8d:c3:7f:bd:01:0f:99:9c:56:3a:e0:d7:f9:bd:e9:f5: 19:78:c9:14:60:97:da:b7:a9:68:09:b2:36:4b:7e:1c:1a:71: fa:0e:be:e0:76:2f:42:1a:b8:d0:6b:04:49:de:bc:62:da:40: 82:b7:b7:05 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9ybUQV1luOv11h3DAXTVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTFlYzRlNThiZDQ0ZWJhYzc4OTU0OGYzMTllNjljYzlhNTMyMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqLfe4b0CmEGHuYuhipGYR60X79x Lh2rdGYnIqcrWHQAo2D5qAdZDdHPH7PoXtvC+wt40+jWj9V+ZJR5B2SLv2sI+W6/ h8xrqWeJGycYJYIAuiRS/EtJcyLgZfURpjtzNELKkmgoTQmRd50TuadHbOTMLDu/ 5GNbH2XQspqBx2D9jf4ndYQMJuxVp6vpMG8jQuLhbroJulGBn2djt4O0gSMrGk/5 yngYDD2b2jhg6J2JNHf5cYrIiN7SjMC/Q7pbLpbL7X6j2KinEpOoACO/Ox0dpyMX XHwRtZ335fsx1Ala3+CX6cajhKjuqSp4komWkLtKc+cCJrq+79ncm3uBZwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLUexOWL1E66x4lUjzGeacyaUyEfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2NiODkz MC1jMDYzLTQxZTItODA1ZC1hN2U0YmI0MTVjZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvY2I4OTMw LWMwNjMtNDFlMi04MDVkLWE3ZTRiYjQxNWNmZS8xL3RSN0U1WXZVVHJySGlWU1BN WjVwekpwVElSOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwG2HMA0GCSqGSIb3DQEBCwUAA4IBAQAFYrVA EDGTHRDYmUsq7A5CDmxEFiz1DBCFZlTqBy531X7yBSgmgbvBJMmxdCMWjV2fHU2X aLxSHmKxtzgaxhnkEm56HvnuNTvbKEeInc01Iqfl7w08rK809wcp/cRz/XUxux2L Ur897Mt+1gPD78j6g9ZYlgbcJwDvATCBHiGuRzArESJ7TDZ2iNu7TH1tpKTRM8dv 1yDgNRkm0C86Kl5NtveKtyvBklaNMOlytQchLUzGwVjbbqdK+BSb9jJJtJ9z/Ruj mD0jY43Df70BD5mcVjrg1/m96fUZeMkUYJfat6loCbI2S34cGnH6Dr7gdi9CGrjQ awRJ3rxi2kCCt7cF -----END CERTIFICATE-----Generated at Tue Jan 27 12:47:41 2026 by rpki-client