This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer File: temngBMLfFKwEP1xOL8LcjviB8M.cer (raw, json) Hash identifier: vPt2Cao2tb9ZwkT5M77YEapf49lxMzDckRmgXCnLB+Q= Subject key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF29A74391BB16E41F4E0784BEB6942 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215249 IP: 185.108.124.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:9a:74:39:1b:b1:6e:41:f4:e0:78:4b:eb:69:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:e5:8b:79:b2:e5:3c:fa:3c:e6:64:cc:8a: 37:7a:99:9b:81:8c:8d:d4:a0:eb:b2:59:be:89:e8: a6:06:a5:e7:a1:ee:7c:5f:bc:e0:bd:7a:c5:be:f7: 96:a2:02:ac:e1:44:03:e4:ce:2d:39:22:b8:8e:a4: a4:01:f9:b1:5c:83:bd:3d:73:f5:e4:7a:08:ee:25: 90:ec:07:2f:44:80:b9:71:dc:5a:b9:6a:81:56:98: ac:21:92:01:1d:1d:a0:3c:4c:e0:10:09:57:aa:29: 99:f6:2a:7e:8b:ee:42:37:8c:b6:08:6d:cf:52:49: 00:48:cf:52:bc:92:98:f8:22:be:1a:7d:cd:27:49: 8f:a1:10:aa:9a:8f:d5:6c:2d:c9:c1:55:39:a2:f6: 25:f7:10:4b:d0:4b:10:d8:9c:e9:21:8c:28:de:5a: fa:60:55:09:fa:84:a8:5f:e9:57:07:9f:78:79:4f: fc:95:87:b2:ae:ef:d4:3b:31:a6:45:f6:b3:88:65: a6:75:5b:dc:3f:ca:41:e2:11:ee:48:9b:87:6d:b2: a4:30:a1:5c:d4:21:a5:80:8e:ad:94:f8:77:30:9e: 21:03:41:b5:d9:0f:2a:15:37:d1:13:0f:1e:b8:e5: 07:35:48:9a:72:27:2a:96:5d:ed:71:df:ff:11:3b: 63:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.124.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215249 Signature Algorithm: sha256WithRSAEncryption 96:9b:48:80:36:01:7b:7c:fd:b6:39:81:f6:23:23:84:d5:f2: 8f:4c:2d:68:4e:47:2f:5d:ac:51:90:9f:56:e1:e9:fe:7e:28: c4:8c:17:15:11:96:cf:9b:8f:67:14:a6:2d:dc:68:a7:a7:80: 8f:99:1e:58:47:a6:0f:08:64:63:02:24:19:0f:fe:72:16:6a: 09:99:bb:fa:dc:3b:18:e5:61:c1:c5:ab:e6:b1:32:84:c0:70: 33:13:5b:a4:e7:7f:aa:2a:08:07:52:da:ff:10:f6:1c:c4:cc: aa:f1:66:d9:a3:b8:d4:7e:13:d3:e2:3f:bf:fe:9b:9c:66:0a: 70:08:95:c5:cf:9d:a9:a2:8e:b2:23:50:f5:2e:ea:a9:b0:dd: 4f:0f:f5:09:2c:08:91:59:f2:89:1d:19:24:2c:c9:83:1b:c8: 8c:c5:2a:39:97:b5:60:94:88:43:8f:ba:f3:c9:90:37:27:15: f7:a4:77:f9:de:4c:9a:30:51:d8:29:e7:ff:32:66:4c:4b:78: 9c:1d:c4:91:53:ca:d5:9c:1b:95:5c:c4:93:7b:6f:fc:cf:31: 89:f8:4d:c2:d8:92:c8:3a:e4:97:59:d5:31:8c:2a:47:d3:ff: 59:bc:37:5b:b0:68:8e:71:d7:24:ad:de:64:aa:b4:d1:81:e0: 50:44:b2:67 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8pp0ORuxbkH04HhL62lCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWU5YTc4MDEzMGI3YzUyYjAxMGZkNzEzOGJmMGI3MjNiZTIwN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuDli3my5Tz6POZkzIo3epmbgYyN 1KDrslm+ieimBqXnoe58X7zgvXrFvveWogKs4UQD5M4tOSK4jqSkAfmxXIO9PXP1 5HoI7iWQ7AcvRIC5cdxauWqBVpisIZIBHR2gPEzgEAlXqimZ9ip+i+5CN4y2CG3P UkkASM9SvJKY+CK+Gn3NJ0mPoRCqmo/VbC3JwVU5ovYl9xBL0EsQ2JzpIYwo3lr6 YFUJ+oSoX+lXB594eU/8lYeyru/UOzGmRfaziGWmdVvcP8pB4hHuSJuHbbKkMKFc 1CGlgI6tlPh3MJ4hA0G12Q8qFTfREw8euOUHNUiacicqll3tcd//ETtjWQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLXpp4ATC3xSsBD9cTi/C3I74gfDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzNiMDAw OS1mMTUyLTRkOWMtYWY5Ni1hNWU1ZDAwODQ3MDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvM2IwMDA5 LWYxNTItNGQ5Yy1hZjk2LWE1ZTVkMDA4NDcwMS8xL3RlbW5nQk1MZkZLd0VQMXhP TDhMY2p2aUI4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAuWx8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNI0TANBgkqhkiG9w0BAQsFAAOCAQEAlptIgDYBe3z9tjmB9iMjhNXyj0wtaE5H L12sUZCfVuHp/n4oxIwXFRGWz5uPZxSmLdxop6eAj5keWEemDwhkYwIkGQ/+chZq CZm7+tw7GOVhwcWr5rEyhMBwMxNbpOd/qioIB1La/xD2HMTMqvFm2aO41H4T0+I/ v/6bnGYKcAiVxc+dqaKOsiNQ9S7qqbDdTw/1CSwIkVnyiR0ZJCzJgxvIjMUqOZe1 YJSIQ4+688mQNycV96R3+d5MmjBR2Cnn/zJmTEt4nB3EkVPK1ZwblVzEk3tv/M8x ifhNwtiSyDrkl1nVMYwqR9P/Wbw3W7BojnHXJK3eZKq00YHgUESyZw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:21 2026 by rpki-client