This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer (raw, json) Hash identifier: Iq3Mo3mxlHd3+BFtSyJmmib4X79eC0kdSz9zfITHbC0= Subject key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED29C1102D2827411B43197DC5836A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50767 AS: 197840 IP: 46.253.142.0/24 IP: 91.206.154.0/23 IP: 91.224.128.0/23 IP: 91.227.0.0/22 IP: 91.227.216.0/22 IP: 185.233.24.0/22 IP: 193.106.228.0/22 IP: 193.107.248.0/22 IP: 2a0c:d300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:29:c1:10:2d:28:27:41:1b:43:19:7d:c5:83:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b522787599f1798e245f993f8cb8182f99cfd104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:94:2e:0a:ce:4e:a5:1a:0a:10:d6:86:c6: b6:81:cf:8b:31:5e:c8:21:2d:bb:c1:6b:c1:5c:19: 4c:cf:25:d7:ac:b3:25:07:e3:8e:b0:7e:bf:0e:d5: db:bf:17:ae:12:3a:72:70:8a:95:7e:32:cf:24:28: da:99:e6:a2:d1:8c:0f:a7:93:89:a0:27:e5:ff:71: 34:cb:62:98:6c:10:c1:36:46:53:25:d5:01:9f:ba: 5f:2c:4e:28:1a:0a:a9:e9:ca:7b:50:05:73:0e:1e: 64:75:19:63:6b:14:19:b2:0b:79:01:5b:08:9c:dd: 07:8b:3f:8a:bc:0a:8f:5e:28:0d:41:2b:56:be:93: 01:72:af:01:37:96:1e:63:c9:e0:d3:78:fc:97:ad: 0a:a9:02:d4:4b:88:74:b9:57:28:fd:09:df:58:bf: fa:e7:64:10:f0:dd:b0:08:2d:72:e6:c7:22:d3:16: 80:eb:7a:2f:77:2e:c9:8e:10:ef:5a:2c:90:26:a9: b1:df:02:b9:ef:21:f6:3e:ec:6d:72:e0:ad:d7:a2: 11:bb:b8:3d:50:93:ba:63:55:80:37:11:72:3a:41: 5c:fd:4d:ff:1a:86:f7:f0:c7:ea:c2:f7:ec:3e:42: 6a:89:db:bc:4e:90:38:12:36:c8:95:f3:21:22:4e: 52:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.142.0/24 91.206.154.0/23 91.224.128.0/23 91.227.0.0/22 91.227.216.0/22 185.233.24.0/22 193.106.228.0/22 193.107.248.0/22 IPv6: 2a0c:d300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50767 197840 Signature Algorithm: sha256WithRSAEncryption 3b:9e:7b:55:97:a0:40:34:f9:1c:a2:22:66:8a:72:b5:ab:7d: 55:31:03:98:3a:0c:ee:50:69:79:e0:1f:9c:bd:c1:c9:95:b1: 92:bf:e3:b2:f5:67:ff:38:4f:ca:d6:9e:a1:53:d4:0f:45:a1: ef:f5:22:21:77:64:b0:b0:57:81:f4:de:b5:29:25:df:99:41: dc:de:4f:4e:02:91:15:4b:80:ff:a6:9f:aa:8e:c9:bf:76:52: f6:0a:4b:e2:04:c7:9d:09:fb:19:4f:b3:f1:13:f8:d7:3f:3e: 9f:f7:96:68:82:0d:79:0e:e5:ab:37:fa:56:f5:ee:ba:ff:b6: d2:da:99:5e:cd:c2:57:7d:2a:20:ee:5f:38:f5:f1:66:ed:16: 59:65:b4:64:74:6e:b3:d0:e0:f3:95:d1:14:a5:0b:54:92:43: 02:2c:e9:db:30:42:37:1d:7c:88:0b:e7:02:e0:ba:31:c7:e2: 43:6f:19:d1:5f:14:63:ee:72:6f:2a:6c:7b:23:4f:b1:71:0f: c6:1f:28:84:cb:01:06:9d:e8:33:1e:88:9d:a8:10:2c:c0:9e: df:d5:eb:57:4a:0d:51:5f:d1:52:f0:c2:b8:97:29:c5:ee:01: 3d:c2:fa:a7:65:9c:20:e7:b2:e4:6a:f3:48:3b:58:8c:23:e6: 4f:98:92:22 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt57SnBEC0oJ0EbQxl9xYNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTIyNzg3NTk5ZjE3OThlMjQ1Zjk5M2Y4Y2I4MTgyZjk5Y2ZkMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4GULgrOTqUaChDWhsa2gc+LMV7I IS27wWvBXBlMzyXXrLMlB+OOsH6/DtXbvxeuEjpycIqVfjLPJCjameai0YwPp5OJ oCfl/3E0y2KYbBDBNkZTJdUBn7pfLE4oGgqp6cp7UAVzDh5kdRljaxQZsgt5AVsI nN0Hiz+KvAqPXigNQStWvpMBcq8BN5YeY8ng03j8l60KqQLUS4h0uVco/QnfWL/6 52QQ8N2wCC1y5sci0xaA63ovdy7JjhDvWiyQJqmx3wK57yH2PuxtcuCt16IRu7g9 UJO6Y1WANxFyOkFc/U3/Gob38MfqwvfsPkJqidu8TpA4EjbIlfMhIk5SdwIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFLUieHWZ8XmOJF+ZP4y4GC+Zz9EEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzlhNGNj ZS1mZDEyLTQ3MDctYmU5NS0wYTI0NmFiMDU5NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvOWE0Y2Nl LWZkMTItNDcwNy1iZTk1LTBhMjQ2YWIwNTk0Ni8xL3RTSjRkWm54ZVk0a1g1a19q TGdZTDVuUDBRUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQALv2OAwQBW86aAwQBW+CAAwQCW+MAAwQCW+PY AwQCuekYAwQCwWrkAwQCwWv4MA0EAgACMAcDBQMqDNMAMB8GCCsGAQUFBwEIAQH/ BBAwDqAMMAoCAwDGTwIDAwTQMA0GCSqGSIb3DQEBCwUAA4IBAQA7nntVl6BANPkc oiJminK1q31VMQOYOgzuUGl54B+cvcHJlbGSv+Oy9Wf/OE/K1p6hU9QPRaHv9SIh d2SwsFeB9N61KSXfmUHc3k9OApEVS4D/pp+qjsm/dlL2CkviBMedCfsZT7PxE/jX Pz6f95Zogg15DuWrN/pW9e66/7bS2plezcJXfSog7l849fFm7RZZZbRkdG6z0ODz ldEUpQtUkkMCLOnbMEI3HXyIC+cC4Loxx+JDbxnRXxRj7nJvKmx7I0+xcQ/GHyiE ywEGnegzHoidqBAswJ7f1etXSg1RX9FS8MK4lynF7gE9wvqnZZwg57LkavNIO1iM I+ZPmJIi -----END CERTIFICATE-----Generated at Tue Feb 10 00:30:34 2026 by rpki-client