This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer File: ta-je9Ddret_6iub5ksRCOIN6bQ.cer (raw, json) Hash identifier: Pfq2WMF4SR4ZD3rxVST7F1yeLqad2/klwTcSWDIQ58Q= Subject key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EADD7649697DBDEC40ED300AE82726 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209030 IP: 82.202.186.0 -- 82.202.191.255 IP: 2a13:c80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:dd:76:49:69:7d:bd:ec:40:ed:30:0a:e8:27:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:4f:af:fc:b6:7e:3a:e7:91:6f:76:66:34: fe:76:e9:60:a8:a5:2d:4f:4a:a6:be:8e:84:bb:64: 9f:48:56:6f:de:a1:63:10:fd:48:32:6e:f9:0f:b2: b9:92:00:a9:79:ac:32:f7:22:e7:72:6c:e9:5c:f3: 63:0c:86:3f:6e:51:04:5c:d5:9e:33:14:38:39:ae: be:5e:88:7c:eb:85:93:8f:bc:3e:32:7a:57:4e:1f: d8:87:4a:12:92:d7:17:7c:25:cc:60:68:0a:8e:bd: ff:41:9a:cc:8f:16:ca:ed:01:ca:e8:c1:a4:4a:8f: 85:ec:a4:dc:d7:92:5a:b5:2f:b0:d5:7e:77:bf:57: ac:ab:17:0f:e9:ad:45:92:2f:5a:03:39:84:48:5f: d0:58:1f:05:b6:72:46:07:2e:64:4d:aa:4e:2a:61: 58:80:45:32:47:e4:d2:2a:c3:aa:25:9b:ad:3f:3b: 25:77:27:87:25:2f:d4:dd:4b:4f:a0:7a:6d:2e:2d: ac:6f:56:2f:ea:07:cf:98:f5:92:8c:c3:1a:3c:c8: 85:99:14:75:96:6c:21:95:01:6b:48:a4:f2:07:88: 8b:94:c3:b1:2c:7c:6f:f4:98:f5:fc:b0:c2:0a:ec: 98:9f:7a:45:4b:ed:8f:d4:1a:86:99:26:0c:6a:e0: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.202.186.0-82.202.191.255 IPv6: 2a13:c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209030 Signature Algorithm: sha256WithRSAEncryption 96:2b:a9:53:51:c6:6a:da:12:f6:3b:27:1c:cf:c5:8f:34:ac: 43:c3:c1:34:28:bb:64:f9:95:96:0e:00:55:ea:d5:ba:29:90: 94:68:68:52:66:0b:8a:85:65:e0:20:f1:37:de:fb:8c:f3:db: 2a:d6:2c:8e:a2:17:83:da:e0:b9:d0:3e:8a:66:6c:6f:68:ba: 45:75:4b:85:e3:9d:b8:54:fc:83:7d:3b:3b:7a:c9:7b:0c:d0: 72:e5:05:96:9e:f1:70:64:7f:7e:ec:45:16:41:49:39:e3:51: 19:06:c8:6a:ba:37:3c:3b:23:ae:eb:41:98:a6:b7:ea:f4:2e: 1c:8c:fc:a2:af:22:99:27:df:ea:58:29:ab:72:99:c8:c2:58: a8:7c:32:af:10:a3:7e:c1:01:bd:3b:bb:b4:9b:c4:b3:ba:d5: 6b:a0:d7:cd:68:65:7f:5a:bd:b0:75:4c:4a:73:65:54:67:58: c5:c6:c5:61:a4:ff:26:4c:ed:69:e0:53:27:5f:d3:18:fa:96: b2:17:76:48:19:4a:14:37:19:d3:46:62:ad:fd:13:5d:e0:30: e9:08:cf:7e:28:80:3e:91:80:98:15:be:63:6c:52:81:0c:f5: dc:6f:45:03:21:8d:e0:8c:76:3b:73:1f:40:33:ca:03:9e:7a: 39:b0:e6:e9 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt26t12SWl9vexA7TAK6CcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWFmYTM3YmQwZGRhZGViN2ZlYTJiOWJlNjRiMTEwOGUyMGRlOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQxPr/y2fjrnkW92ZjT+dulgqKUt T0qmvo6Eu2SfSFZv3qFjEP1IMm75D7K5kgCpeawy9yLncmzpXPNjDIY/blEEXNWe MxQ4Oa6+Xoh864WTj7w+MnpXTh/Yh0oSktcXfCXMYGgKjr3/QZrMjxbK7QHK6MGk So+F7KTc15JatS+w1X53v1esqxcP6a1Fki9aAzmESF/QWB8FtnJGBy5kTapOKmFY gEUyR+TSKsOqJZutPzsldyeHJS/U3UtPoHptLi2sb1Yv6gfPmPWSjMMaPMiFmRR1 lmwhlQFrSKTyB4iLlMOxLHxv9Jj1/LDCCuyYn3pFS+2P1BqGmSYMauB0QQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFLWvo3vQ3a3rf+orm+ZLEQjiDem0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzhiYWE5 Yy0wZWYyLTQyZmItYjNkNi01YTk1Y2M4MGNkMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvOGJhYTlj LTBlZjItNDJmYi1iM2Q2LTVhOTVjYzgwY2QxYi8xL3RhLWplOURkcmV0XzZpdWI1 a3NSQ09JTjZiUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTAUBAIAATAOMAwDBAFSyroDBAZSyoAwDQQCAAIwBwMFACoTDIAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzCGMA0GCSqGSIb3DQEBCwUAA4IBAQCW K6lTUcZq2hL2Oyccz8WPNKxDw8E0KLtk+ZWWDgBV6tW6KZCUaGhSZguKhWXgIPE3 3vuM89sq1iyOoheD2uC50D6KZmxvaLpFdUuF4524VPyDfTs7esl7DNBy5QWWnvFw ZH9+7EUWQUk541EZBshqujc8OyOu60GYprfq9C4cjPyiryKZJ9/qWCmrcpnIwlio fDKvEKN+wQG9O7u0m8SzutVroNfNaGV/Wr2wdUxKc2VUZ1jFxsVhpP8mTO1p4FMn X9MY+payF3ZIGUoUNxnTRmKt/RNd4DDpCM9+KIA+kYCYFb5jbFKBDPXcb0UDIY3g jHY7cx9AM8oDnno5sObp -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:29 2026 by rpki-client