This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer File: taJj0Y61xUD3R4glu3LvrG8o-Cs.cer (raw, json) Hash identifier: 2VQ2cW11dokLOEnZuXmkqX/LvjPvIppoXbwvPtrcPvQ= Subject key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5ACE14B0104BAE8017061E13A99B37 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41277 IP: 195.74.81.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ce:14:b0:10:4b:ae:80:17:06:1e:13:a9:9b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:35:bf:ee:c3:f3:02:c2:a3:76:90:a2:1f: 1c:98:2e:70:5f:55:1b:5b:fb:b6:ce:53:07:a9:77: c8:1b:0a:dc:ca:e9:f2:da:a4:02:ce:0d:ae:4d:3f: 7d:61:a1:be:1c:7f:cf:1b:42:c0:50:1c:ad:7a:62: da:a3:35:3f:2e:aa:3a:d7:2b:7c:44:87:c8:63:8d: 8e:ea:45:96:94:92:f5:62:ee:24:ee:39:2b:f9:8d: 3d:2a:11:c2:4a:91:5e:8e:39:c4:73:5f:41:24:f5: 71:16:e4:37:63:34:22:3f:84:ba:9d:f6:0a:ec:8b: 8d:4f:47:1c:e6:9c:27:d6:62:33:d4:49:be:2a:51: 55:40:a5:b2:56:bb:c5:96:66:84:51:49:e5:cc:3d: 07:75:cf:61:43:b5:dd:56:ef:b5:1d:6d:14:de:78: ff:e6:01:2c:44:6e:7a:e1:25:b0:fa:94:1a:ac:3f: 54:f0:4f:04:7c:b7:dd:82:e7:04:c8:d0:22:19:66: 56:d4:f4:57:2c:4f:05:b8:a0:f7:10:5e:f1:dc:ab: 52:3a:b8:ad:ac:70:ee:16:d4:70:de:c0:87:6c:b2: 4c:41:f8:91:74:71:12:11:eb:66:64:61:f9:12:e5: 9c:88:91:f9:53:27:db:7e:5b:58:4c:40:fd:90:0b: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.74.81.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41277 Signature Algorithm: sha256WithRSAEncryption 29:26:b6:45:b0:87:0a:27:41:20:d7:ed:ee:b5:93:a5:94:5a: 83:13:13:d4:6a:b5:68:9d:ac:a4:ee:8f:20:62:97:7b:7d:e1: f6:2a:68:7d:f2:21:b9:ec:86:4f:03:3e:98:b2:44:e5:85:d6: d3:67:7a:06:59:cf:74:2d:ec:34:eb:37:5e:8e:19:6a:aa:4b: a4:7a:89:51:7e:60:e0:46:ca:28:5c:7e:b7:48:17:f5:e4:4d: b7:00:84:2c:ab:87:59:36:c1:1b:16:d6:51:9a:7f:17:1f:b3: ae:46:b8:00:ab:97:d1:25:94:1c:ed:75:e6:c1:55:5e:b1:86: 78:99:96:ef:a9:6f:60:d5:d2:ae:71:df:10:da:3f:91:5d:c0: 27:99:f6:0d:4b:9e:2c:8a:76:07:db:24:4c:d2:9d:0b:0a:74: 93:ce:e7:bf:bb:12:eb:5a:86:7f:bd:00:44:2f:34:d0:30:ad: 97:f7:dc:de:a1:ff:be:04:2d:0a:76:12:67:21:13:1f:ce:9f: fe:44:2a:1f:c6:86:64:be:50:fd:df:ac:f1:18:9e:b6:bd:50: 11:be:2a:1c:99:d2:16:d7:46:c9:07:df:2c:ba:c4:da:90:9a: 35:2f:68:18:0d:59:93:fc:d0:67:4a:14:bc:fb:1b:5e:62:72: 40:65:8a:16 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6Ws4UsBBLroAXBh4TqZs3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWEyNjNkMThlYjVjNTQwZjc0Nzg4MjViYjcyZWZhYzZmMjhmODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LI1v+7D8wLCo3aQoh8cmC5wX1Ub W/u2zlMHqXfIGwrcyuny2qQCzg2uTT99YaG+HH/PG0LAUBytemLaozU/Lqo61yt8 RIfIY42O6kWWlJL1Yu4k7jkr+Y09KhHCSpFejjnEc19BJPVxFuQ3YzQiP4S6nfYK 7IuNT0cc5pwn1mIz1Em+KlFVQKWyVrvFlmaEUUnlzD0Hdc9hQ7XdVu+1HW0U3nj/ 5gEsRG564SWw+pQarD9U8E8EfLfdgucEyNAiGWZW1PRXLE8FuKD3EF7x3KtSOrit rHDuFtRw3sCHbLJMQfiRdHESEetmZGH5EuWciJH5UyfbfltYTED9kAvPnQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLWiY9GOtcVA90eIJbty76xvKPgrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzFkMDE3 MS0zMzA3LTQ1MzEtYTczYS0xNDZhNjliNmQ4ZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvMWQwMTcx LTMzMDctNDUzMS1hNzNhLTE0NmE2OWI2ZDhlNC8xL3RhSmowWTYxeFVEM1I0Z2x1 M0x2ckc4by1Dcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw0pRMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwChPTANBgkqhkiG9w0BAQsFAAOCAQEAKSa2RbCHCidBINft7rWTpZRagxMT1Gq1 aJ2spO6PIGKXe33h9ipoffIhueyGTwM+mLJE5YXW02d6BlnPdC3sNOs3Xo4ZaqpL pHqJUX5g4EbKKFx+t0gX9eRNtwCELKuHWTbBGxbWUZp/Fx+zrka4AKuX0SWUHO11 5sFVXrGGeJmW76lvYNXSrnHfENo/kV3AJ5n2DUueLIp2B9skTNKdCwp0k87nv7sS 61qGf70ARC800DCtl/fc3qH/vgQtCnYSZyETH86f/kQqH8aGZL5Q/d+s8Rietr1Q Eb4qHJnSFtdGyQffLLrE2pCaNS9oGA1Zk/zQZ0oUvPsbXmJyQGWKFg== -----END CERTIFICATE-----Generated at Mon Feb 2 12:45:36 2026 by rpki-client