This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer (raw, json) Hash identifier: 0XDOZFMm2mskxxVkQSzW6lWdY2wB5SE5HTJnv0saPk0= Subject key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355989D89ACEA5B06B236A3B07C0A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207852 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:59:89:d8:9a:ce:a5:b0:6b:23:6a:3b:07:c0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b539831835c87c7501f6c37cb48e60a795a394bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:8c:e2:10:a5:b3:4b:36:d1:8f:22:d5:9d: 62:11:b6:7f:70:8e:a5:14:b0:3b:aa:1b:21:61:4f: d0:17:e4:d2:f6:90:93:04:3a:4e:e1:3f:87:17:c7: fb:6e:43:89:39:c7:13:4c:16:47:d9:a3:93:fb:49: bd:07:b4:33:73:6a:c6:4f:1f:71:c9:1e:3e:32:10: 2e:08:5f:2e:b8:91:2b:72:9a:26:00:16:b4:7a:b8: ce:37:e5:e8:cd:3e:d5:31:b4:41:4f:91:41:f0:f2: 54:f1:67:64:11:5c:ad:7b:36:3f:ac:fd:75:ba:10: db:83:eb:64:4f:65:34:62:dd:3b:f4:8e:94:1f:0e: 6a:68:66:cc:c9:2d:e2:ab:32:d5:e6:48:30:16:09: 73:96:48:b4:a6:67:b0:cf:5c:03:46:4e:4f:2c:6c: 13:a9:61:88:82:8b:41:bc:33:31:57:a5:41:da:9d: 65:bb:86:26:9a:b9:72:71:0a:ee:d1:a2:ac:b1:ab: 4d:51:1b:c2:62:bc:97:9a:1b:7e:c2:20:7b:32:e6: 2b:2b:77:82:85:49:2d:7e:45:aa:f5:93:cc:c5:40: ac:d7:0f:55:85:85:bb:5b:08:97:09:a7:06:78:dd: 43:b0:c0:b5:61:68:25:97:2d:29:6d:c7:ae:e0:14: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207852 Signature Algorithm: sha256WithRSAEncryption 57:ac:9a:d5:17:fe:ec:f5:12:8b:b6:a2:32:74:2a:6e:e2:d1: 62:eb:41:03:d9:e3:16:92:c4:27:a7:b1:b3:90:c9:bb:84:24: 96:fd:37:5d:ea:da:03:c5:6b:b7:f3:78:58:83:19:1e:21:4d: 3a:ef:2e:5f:f3:54:7e:0a:16:b8:a3:58:a4:15:5e:4a:d6:41: 5a:b1:91:de:64:fe:45:a1:fa:59:80:55:73:b6:ee:81:31:ff: 52:9c:40:1c:b1:f5:db:32:bd:ff:b2:25:38:92:98:2a:66:41: 37:6d:10:07:c1:1a:10:e5:f2:14:4f:67:c4:41:4a:6f:18:8e: ff:ae:2c:a7:50:75:20:63:47:b0:bf:32:b9:4a:1f:32:d7:5c: 8e:57:00:01:88:a6:1e:18:32:5f:43:99:8a:42:f0:c7:ee:a4: cb:bb:3a:5c:ba:f3:95:d5:a6:35:c6:8b:a1:ac:92:28:1f:25: 91:0b:29:94:c5:6a:88:ec:36:96:66:7a:fa:77:54:9e:95:19: 69:8f:cd:62:c2:b7:da:52:84:09:66:c5:af:fa:3f:b9:e5:27: fb:ee:12:5d:3a:c5:31:15:cc:e4:a1:f7:62:72:e9:48:28:62: b4:d3:2c:9b:3d:e9:7e:32:6b:45:e6:d0:a4:5e:1c:55:a2:2b: 34:2d:88:b4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NVmJ2JrOpbBrI2o7B8CpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTM5ODMxODM1Yzg3Yzc1MDFmNmMzN2NiNDhlNjBhNzk1YTM5NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzyM4hCls0s20Y8i1Z1iEbZ/cI6l FLA7qhshYU/QF+TS9pCTBDpO4T+HF8f7bkOJOccTTBZH2aOT+0m9B7Qzc2rGTx9x yR4+MhAuCF8uuJErcpomABa0erjON+XozT7VMbRBT5FB8PJU8WdkEVytezY/rP11 uhDbg+tkT2U0Yt079I6UHw5qaGbMyS3iqzLV5kgwFglzlki0pmewz1wDRk5PLGwT qWGIgotBvDMxV6VB2p1lu4YmmrlycQru0aKssatNURvCYryXmht+wiB7MuYrK3eC hUktfkWq9ZPMxUCs1w9VhYW7WwiXCacGeN1DsMC1YWglly0pbceu4BTOkwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLU5gxg1yHx1AfbDfLSOYKeVo5S7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4L2U3MDNj OC00NjVmLTQ3YTUtOTUyYy00OTVlMTg4NzAxYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvZTcwM2M4 LTQ2NWYtNDdhNS05NTJjLTQ5NWUxODg3MDFiNi8xL3RUbURHRFhJZkhVQjlzTjh0 STVncDVXamxMcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMr7DANBgkqhkiG9w0BAQsFAAOCAQEAV6ya1Rf+7PUS i7aiMnQqbuLRYutBA9njFpLEJ6exs5DJu4Qklv03XeraA8Vrt/N4WIMZHiFNOu8u X/NUfgoWuKNYpBVeStZBWrGR3mT+RaH6WYBVc7bugTH/UpxAHLH12zK9/7IlOJKY KmZBN20QB8EaEOXyFE9nxEFKbxiO/64sp1B1IGNHsL8yuUofMtdcjlcAAYimHhgy X0OZikLwx+6ky7s6XLrzldWmNcaLoaySKB8lkQsplMVqiOw2lmZ6+ndUnpUZaY/N YsK32lKECWbFr/o/ueUn++4SXTrFMRXM5KH3YnLpSChitNMsmz3pfjJrRebQpF4c VaIrNC2ItA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:59 2026 by rpki-client