This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer File: tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer (raw, json) Hash identifier: cA8mDlffmSM1UEPTr2JzSQyElcX1RN+Zuc2FRJyKEck= Subject key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4C353B4FAEA89F75AF6B42146C814 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.14.28.0/22 IP: 91.200.8.0/22 IP: 185.175.244.0/22 IP: 195.22.140.0/23 IP: 2a0e:880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c3:53:b4:fa:ea:89:f7:5a:f6:b4:21:46:c8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5745bb8ef0088cb519a4095d651719ef51ee354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:8b:dd:a2:cb:a3:58:4d:ea:ce:79:aa:9e: 76:d6:93:bb:26:32:2a:b4:1d:08:f3:70:52:c5:4b: e4:42:97:3e:1f:03:3d:e2:ff:b7:3b:3c:3a:0e:60: 82:9f:b2:83:ce:98:19:ef:49:9d:df:8c:cc:b9:48: ad:53:02:5d:a4:18:e7:b1:a0:37:81:da:cf:9c:46: a8:58:7f:91:c2:55:8d:fe:91:df:af:d2:f8:7d:60: e2:48:0d:5c:62:c6:04:58:84:ff:f3:c9:c9:73:70: af:b0:b3:cd:ea:fd:39:e9:f1:28:5b:8b:04:0a:f3: df:a3:10:ae:99:21:05:03:c1:54:15:d1:5c:44:1e: 12:ba:b0:17:13:a9:9d:5a:e9:ec:14:6b:68:f7:9a: 18:c0:8a:4a:d6:0f:e9:a9:2d:26:51:e4:4c:cc:5c: b5:e2:7d:62:c5:10:c9:4d:c7:0f:a1:6d:54:e3:2d: d0:94:ac:39:a6:72:32:41:cb:d5:3c:0b:85:9a:19: 6e:42:d3:e6:32:16:01:fc:0e:de:1b:b1:61:4e:80: 76:7c:2d:d5:de:de:52:04:32:76:46:07:2b:80:ac: 27:1b:e5:8b:c8:b1:c8:cb:0a:a2:6e:fa:d4:bb:62: c5:3c:ce:cd:95:01:c3:48:21:d8:38:28:e5:1a:0a: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.28.0/22 91.200.8.0/22 185.175.244.0/22 195.22.140.0/23 IPv6: 2a0e:880::/29 Signature Algorithm: sha256WithRSAEncryption 4f:e6:c9:7f:32:d1:28:7b:7c:f9:de:62:fc:6a:cc:ce:ec:c3: 35:62:13:4d:64:29:67:aa:7d:b4:5c:b9:04:db:f6:51:75:51: 62:a2:43:93:a2:e9:ff:32:8f:bb:b9:7a:55:c7:21:1e:5e:ee: dd:75:01:f7:38:1e:8d:0a:3f:10:5a:f8:cd:68:c3:46:da:26: 16:83:a2:ac:0c:9f:d6:e7:72:f3:e8:5a:7c:e1:a6:00:fe:54: 0a:93:95:d1:cc:b2:92:b8:7e:6a:7d:2e:9b:15:e1:bc:be:48: e7:ea:32:6c:ae:d0:83:80:b1:4a:08:55:25:c4:f5:2b:3f:77: 36:d5:11:33:8c:af:1b:47:f5:ff:10:bf:e3:ba:36:d8:06:6f: 74:d0:56:1c:57:db:f3:a7:79:6a:40:9f:07:8f:79:5f:78:1d: 59:5e:42:82:4b:9b:6e:0b:13:e0:fa:a3:ea:f1:8f:1b:d5:a4: 54:c4:e7:44:70:38:18:29:0d:36:03:5d:38:59:17:51:54:bd: a5:3f:0b:6a:00:23:67:75:53:33:ae:b1:80:24:da:0a:ec:a6: 14:b9:75:bb:4b:7a:26:f4:a7:4a:c0:0c:e2:a4:23:fd:18:f3: 0c:4a:8d:b3:17:1e:f4:a0:be:a1:75:ac:fc:a7:eb:6b:ce:47: 93:4b:be:47 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt7pMNTtPrqifda9rQhRsgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc0NWJiOGVmMDA4OGNiNTE5YTQwOTVkNjUxNzE5ZWY1MWVlMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYiL3aLLo1hN6s55qp521pO7JjIq tB0I83BSxUvkQpc+HwM94v+3Ozw6DmCCn7KDzpgZ70md34zMuUitUwJdpBjnsaA3 gdrPnEaoWH+RwlWN/pHfr9L4fWDiSA1cYsYEWIT/88nJc3CvsLPN6v056fEoW4sE CvPfoxCumSEFA8FUFdFcRB4SurAXE6mdWunsFGto95oYwIpK1g/pqS0mUeRMzFy1 4n1ixRDJTccPoW1U4y3QlKw5pnIyQcvVPAuFmhluQtPmMhYB/A7eG7FhToB2fC3V 3t5SBDJ2RgcrgKwnG+WLyLHIywqibvrUu2LFPM7NlQHDSCHYOCjlGgordwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFLV0W7jvAIjLUZpAldZRcZ71HuNUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzE1YWZl NS00MmIzLTRjZTYtOWQ5ZC04N2MzMzY4Y2IzZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvMTVhZmU1 LTQyYjMtNGNlNi05ZDlkLTg3YzMzNjhjYjNmYS8xL3RYUmJ1TzhBaU10Um1rQ1Yx bEZ4bnZVZTQxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLQ4cAwQCW8gIAwQCua/0AwQBwxaMMA0EAgAC MAcDBQMqDgiAMA0GCSqGSIb3DQEBCwUAA4IBAQBP5sl/MtEoe3z53mL8aszO7MM1 YhNNZClnqn20XLkE2/ZRdVFiokOToun/Mo+7uXpVxyEeXu7ddQH3OB6NCj8QWvjN aMNG2iYWg6KsDJ/W53Lz6Fp84aYA/lQKk5XRzLKSuH5qfS6bFeG8vkjn6jJsrtCD gLFKCFUlxPUrP3c21REzjK8bR/X/EL/jujbYBm900FYcV9vzp3lqQJ8Hj3lfeB1Z XkKCS5tuCxPg+qPq8Y8b1aRUxOdEcDgYKQ02A104WRdRVL2lPwtqACNndVMzrrGA JNoK7KYUuXW7S3om9KdKwAzipCP9GPMMSo2zFx70oL6hdaz8p+trzkeTS75H -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:43 2026 by rpki-client