This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer File: tRYDJr5-XNw1tcA2RBFjzSWkl00.cer (raw, json) Hash identifier: DMJlmkS3kHAt+2ALHgjWl6OKt0bh784UVdrxCpHp1wM= Subject key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C122007BD0222AC0CD225BB907D85D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206374 IP: 185.188.132.0/22 IP: 185.246.212.0/22 IP: 2a0b:c480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:20:07:bd:02:22:ac:0c:d2:25:bb:90:7d:85:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5160326be7e5cdc35b5c036441163cd25a4974d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:49:a1:66:7a:7d:24:c4:f9:b1:08:a9:42: fd:48:fc:80:d2:e2:43:6b:70:52:31:96:f1:8c:3b: 5c:fd:29:20:e4:29:98:8e:5a:71:a1:ba:9c:dc:32: c1:cd:d1:14:30:91:91:db:0b:cf:42:37:af:58:a9: b6:44:5b:7b:98:57:cc:1f:ce:b9:23:5f:09:87:59: 38:96:e8:5d:1a:0d:8c:f0:0a:79:cf:90:0a:4f:e0: 5b:9e:85:43:2c:ed:99:0e:2f:5c:88:78:8e:f0:77: c1:0f:06:07:0b:b1:b4:54:8c:e6:3a:71:b8:5d:1d: ff:d1:8d:e9:2e:71:4a:3e:57:f5:4b:01:fa:13:06: 04:38:8a:61:7b:67:f3:09:cd:8c:f9:d3:28:7e:58: c2:1d:6a:f5:50:b6:b2:e8:5e:1d:b7:5a:39:3d:9d: 57:f4:c8:99:9b:71:e5:53:bb:35:54:ed:4f:e3:66: 95:17:e9:c7:71:da:e6:b2:af:b9:7f:14:f9:97:fb: c2:4e:da:0b:8c:80:f7:9a:55:bd:80:27:f6:79:0b: d4:00:df:52:1e:46:ef:e8:84:3b:68:45:71:9b:e7: 90:bd:1b:ea:cd:d3:eb:cb:27:17:5b:7f:ea:4f:98: 24:fe:49:70:31:3d:0c:c5:c5:a4:15:fd:3d:79:31: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.132.0/22 185.246.212.0/22 IPv6: 2a0b:c480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206374 Signature Algorithm: sha256WithRSAEncryption 56:09:c5:f2:41:38:fe:6e:06:86:4b:d1:7d:51:ea:7f:53:92: bc:fd:0a:6b:1a:6a:17:28:a0:c7:aa:d4:e1:0a:4a:f0:9b:a7: d5:bf:05:ab:f4:26:79:24:31:da:3f:1a:42:21:f8:49:4c:35: a0:08:b5:85:82:c0:4e:b9:d8:4f:bf:77:13:09:df:8d:95:05: be:b8:2b:96:20:87:94:47:7e:45:57:e7:c9:f3:80:8c:3e:9c: 8a:90:d8:37:c4:50:4b:f0:2c:a9:44:43:9f:01:dc:bb:a5:72: 06:fd:73:ba:60:9d:d9:4c:b5:6e:be:49:c1:f3:b2:a7:36:b0: e0:f2:e8:95:35:44:92:70:14:91:17:a3:02:80:35:91:d9:61: 5e:34:e7:8f:8e:8d:dc:89:3f:7d:7b:8b:1f:31:f5:29:d5:56: f5:3e:ac:06:0b:56:a0:a5:03:33:a1:70:2a:0a:7d:3d:05:4c: e8:4f:c0:e8:98:66:c5:fc:f0:4a:a6:6a:4f:23:1d:80:fd:6f: f2:6c:7a:d5:a9:69:24:06:89:a5:d3:8b:4d:00:86:58:66:4e: da:ab:b0:0c:1a:71:e7:dd:5e:be:b6:a1:73:2f:75:9b:cb:c3: 48:9d:20:00:ca:af:7b:95:8b:69:2d:7d:b6:45:5b:94:c6:c2: 8f:a1:97:c8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8EiAHvQIirAzSJbuQfYXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTE2MDMyNmJlN2U1Y2RjMzViNWMwMzY0NDExNjNjZDI1YTQ5NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWRJoWZ6fSTE+bEIqUL9SPyA0uJD a3BSMZbxjDtc/Skg5CmYjlpxobqc3DLBzdEUMJGR2wvPQjevWKm2RFt7mFfMH865 I18Jh1k4luhdGg2M8Ap5z5AKT+BbnoVDLO2ZDi9ciHiO8HfBDwYHC7G0VIzmOnG4 XR3/0Y3pLnFKPlf1SwH6EwYEOIphe2fzCc2M+dMofljCHWr1ULay6F4dt1o5PZ1X 9MiZm3HlU7s1VO1P42aVF+nHcdrmsq+5fxT5l/vCTtoLjID3mlW9gCf2eQvUAN9S Hkbv6IQ7aEVxm+eQvRvqzdPryycXW3/qT5gk/klwMT0MxcWkFf09eTG90wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLUWAya+flzcNbXANkQRY80lpJdNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzBlNWFh Mi04NDA5LTQ3YTAtYjQ3OS1mNDhhYTJlNzU0ZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMGU1YWEy LTg0MDktNDdhMC1iNDc5LWY0OGFhMmU3NTRlNS8xL3RSWURKcjUtWE53MXRjQTJS QkZqelNXa2wwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCubyEAwQCufbUMA0EAgACMAcDBQMqC8SAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmJjANBgkqhkiG9w0BAQsFAAOCAQEAVgnF 8kE4/m4GhkvRfVHqf1OSvP0KaxpqFyigx6rU4QpK8Jun1b8Fq/QmeSQx2j8aQiH4 SUw1oAi1hYLATrnYT793EwnfjZUFvrgrliCHlEd+RVfnyfOAjD6cipDYN8RQS/As qURDnwHcu6VyBv1zumCd2Uy1br5JwfOypzaw4PLolTVEknAUkRejAoA1kdlhXjTn j46N3Ik/fXuLHzH1KdVW9T6sBgtWoKUDM6FwKgp9PQVM6E/A6JhmxfzwSqZqTyMd gP1v8mx61alpJAaJpdOLTQCGWGZO2quwDBpx591evrahcy91m8vDSJ0gAMqve5WL aS19tkVblMbCj6GXyA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:03 2026 by rpki-client