This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer File: tRFbXBJF3DDhIwQHnslKNe1SfGY.cer (raw, json) Hash identifier: xftJbaatbIj0yDpkxJ5p6wp/KKUs0ksLOH9QwkY8zXY= Subject key identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED2BF1B0EA4DAD60329BAC630B129C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59806 IP: 185.70.160.0/23 IP: 2a03:36e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2b:f1:b0:ea:4d:ad:60:32:9b:ac:63:0b:12:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5115b5c1245dc30e12304079ec94a35ed527c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:78:e4:96:63:d0:51:f3:9a:9e:ea:74:1a:dd: d6:59:5b:bd:39:bd:f5:6e:90:63:41:3a:22:d1:30: 15:e7:bc:70:49:50:11:51:3d:8f:75:a8:73:1e:e2: 24:f5:cc:ba:b6:3a:f5:ee:d1:70:f7:e8:ce:90:24: 81:48:20:ac:16:dc:96:a0:33:ac:f5:eb:47:e9:68: bd:b5:b4:ed:8c:73:ab:80:c5:7f:d2:f2:04:fd:3d: 15:5a:6b:87:85:ea:ee:7e:77:ad:f2:74:66:75:46: 84:c0:ca:4b:3a:3f:0c:ba:fc:95:85:7c:5c:55:d7: 8a:c2:7d:17:9a:e7:1e:5e:47:6a:8b:d4:a4:53:44: 53:c8:0b:81:ad:42:fe:f7:66:e9:0c:95:89:23:45: 4c:32:93:f2:88:80:9a:21:c0:c7:e5:87:21:0b:d2: 2e:bd:4f:f0:17:c2:4c:08:82:cd:67:04:de:d7:16: e9:53:73:3f:86:46:2d:15:93:66:ec:03:4f:41:7e: 88:2d:b9:7d:5a:12:c9:13:38:93:e7:bf:c9:e1:bb: da:ab:c9:f0:35:1c:51:f3:7c:27:8e:90:df:87:c5: 03:0c:23:18:2b:aa:27:a5:22:5e:1c:70:92:36:48: 5c:1b:3b:d5:97:ba:fc:de:b6:e1:d3:d9:40:2d:c8: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.160.0/23 IPv6: 2a03:36e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59806 Signature Algorithm: sha256WithRSAEncryption 11:61:cc:0b:3d:86:66:07:95:b0:9e:3d:8c:e4:93:7f:ed:48: 5e:9a:1e:0d:b8:e7:a4:d7:48:45:01:e3:b6:2a:59:ef:b8:1e: c3:01:a3:78:21:4c:54:43:f7:23:16:df:17:fa:eb:c3:b1:6c: 87:fe:6d:8c:68:f3:e7:51:6c:60:66:3d:7a:75:c9:60:9b:b0: 74:fa:6f:33:f8:43:82:5f:2e:05:c9:a3:32:71:08:25:90:28: f8:ad:1b:7d:f0:3d:7b:0f:03:e7:fd:7c:52:a1:42:e6:93:86: 60:ff:38:58:01:e2:66:ca:39:91:52:8d:cf:bc:74:51:8f:f8: 11:06:94:d4:36:50:59:98:c9:ac:ae:f8:c5:19:a6:9b:f3:80: a1:0c:20:6a:76:41:c1:15:5c:53:99:0d:fa:87:37:77:b0:f7: 13:a1:40:30:a7:00:e7:9f:b5:0c:95:7c:15:92:f3:bf:3e:d3: ed:53:b2:2c:6c:bb:c9:d2:c6:86:21:26:2c:22:40:73:6e:3c: fb:49:a8:f9:af:78:66:c6:dd:ad:76:d8:51:1e:7c:b3:56:16: 09:29:b2:1e:65:03:3c:b8:82:d9:d7:59:c9:42:03:c7:9f:74: ea:91:e8:17:45:ff:65:e0:93:14:92:4d:d2:0d:a7:db:47:10: 24:74:e7:77 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57SvxsOpNrWAym6xjCxKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTExNWI1YzEyNDVkYzMwZTEyMzA0MDc5ZWM5NGEzNWVkNTI3YzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HjklmPQUfOanup0Gt3WWVu9Ob31 bpBjQToi0TAV57xwSVARUT2PdahzHuIk9cy6tjr17tFw9+jOkCSBSCCsFtyWoDOs 9etH6Wi9tbTtjHOrgMV/0vIE/T0VWmuHherufnet8nRmdUaEwMpLOj8MuvyVhXxc VdeKwn0XmuceXkdqi9SkU0RTyAuBrUL+92bpDJWJI0VMMpPyiICaIcDH5YchC9Iu vU/wF8JMCILNZwTe1xbpU3M/hkYtFZNm7ANPQX6ILbl9WhLJEziT57/J4bvaq8nw NRxR83wnjpDfh8UDDCMYK6onpSJeHHCSNkhcGzvVl7r83rbh09lALcggZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLURW1wSRdww4SMEB57JSjXtUnxmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjL2EzNmE2 Ny01NDJiLTRmOGUtODFmMC02ZTJkYTYwZTI4MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvYTM2YTY3 LTU0MmItNGY4ZS04MWYwLTZlMmRhNjBlMjgzNC8xL3RSRmJYQkpGM0REaEl3UUhu c2xLTmUxU2ZHWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBuUagMA0EAgACMAcDBQAqAzbgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDpnjANBgkqhkiG9w0BAQsFAAOCAQEAEWHMCz2GZgeV sJ49jOSTf+1IXpoeDbjnpNdIRQHjtipZ77gewwGjeCFMVEP3IxbfF/rrw7Fsh/5t jGjz51FsYGY9enXJYJuwdPpvM/hDgl8uBcmjMnEIJZAo+K0bffA9ew8D5/18UqFC 5pOGYP84WAHiZso5kVKNz7x0UY/4EQaU1DZQWZjJrK74xRmmm/OAoQwganZBwRVc U5kN+oc3d7D3E6FAMKcA55+1DJV8FZLzvz7T7VOyLGy7ydLGhiEmLCJAc248+0mo +a94ZsbdrXbYUR58s1YWCSmyHmUDPLiC2ddZyUIDx5906pHoF0X/ZeCTFJJN0g2n 20cQJHTndw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:38 2026 by rpki-client