This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer File: tfGesN1I4bJJJJCLtbaEjMFnhUY.cer (raw, json) Hash identifier: X6rtwjdIGMsBdkRUyhDyEKqaaQO2TD7hCgYnehJlyGA= Subject key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36B0E4A387F6D116524A995E7F56C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34919 IP: 45.136.240.0/22 IP: 2a0e:9dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b0:e4:a3:87:f6:d1:16:52:4a:99:5e:7f:56:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:a3:a4:a8:dc:d6:1f:0d:37:02:04:db:d9: 2b:45:2c:81:05:8c:64:e4:d6:93:f3:4f:41:ac:a5: 05:0d:c9:83:92:c8:a6:37:cd:90:24:0d:8e:1e:3a: 9c:04:e6:d9:40:6f:f2:81:3d:70:40:3b:14:78:59: 36:66:59:f5:fd:db:d8:4a:fb:c9:7f:2a:a8:bd:fd: 71:a8:1d:1f:48:28:77:58:20:91:c2:10:35:01:41: a4:f3:90:1f:1b:8b:50:84:88:6c:68:26:13:76:36: 7f:88:4f:76:00:03:ae:4a:e9:05:36:f7:9b:32:02: 3e:a4:68:a6:69:05:3f:21:b0:0c:7f:b2:5f:49:8d: 48:24:9d:74:1e:10:3b:1a:4d:52:a4:50:2f:e7:80: f3:77:fe:27:ca:fb:ca:47:9c:2c:4d:98:95:44:f7: ac:b1:32:c6:99:36:42:ea:c6:c4:93:ce:db:d5:fa: 41:60:0a:a1:5a:ed:92:f9:25:61:88:27:a8:11:ea: 48:86:25:52:86:1d:9a:6c:f8:db:99:59:3a:53:85: a8:4a:47:31:cc:5e:d7:47:55:03:0a:32:dd:93:b8: 6e:a8:6b:47:da:aa:f5:57:d1:81:43:73:64:27:ae: fb:75:21:a6:88:5d:fb:d7:e2:ba:f4:4b:a7:a3:c7: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.240.0/22 IPv6: 2a0e:9dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34919 Signature Algorithm: sha256WithRSAEncryption 6e:66:62:97:07:c4:27:3e:1f:c8:17:cd:d4:9d:a7:ad:47:18: 77:a0:09:1e:0d:2a:a5:98:f5:83:90:25:78:fd:85:1a:65:82: 07:e1:b0:78:f5:36:42:21:dd:da:61:53:c5:7d:db:a9:45:e4: 5a:66:9c:e0:c7:61:8b:8d:37:99:ad:10:1d:20:bc:3c:23:5f: f8:31:19:d0:4e:64:a7:b4:41:5a:80:66:8c:c3:81:04:a9:7b: 91:20:d6:50:74:a1:58:0c:e2:7c:4b:57:8d:7b:95:d9:af:b4: 05:84:3c:48:7d:58:79:2a:2b:47:0a:90:c4:b7:32:03:d7:3d: 6a:4b:8b:a0:4b:63:0e:3f:8f:32:e0:d4:88:5c:48:9e:a6:ef: 84:7d:b0:00:1c:19:dd:37:2d:af:4f:75:33:69:15:90:61:23: 41:7c:96:96:8e:bd:f7:8f:7d:80:22:0d:4d:5c:e2:61:7b:98: 14:df:fa:8b:d3:67:17:b8:31:09:8e:32:c1:3d:4f:3b:33:db: 7e:e5:a0:15:fa:a1:fb:ea:cd:47:25:0b:ad:df:65:a3:46:a9: e7:b7:9a:3b:7e:3f:06:ba:80:55:c8:91:a7:bd:be:cd:35:ac: 32:65:71:32:d3:97:cf:bf:2d:27:3a:f7:18:f9:13:57:ec:f4: 50:e0:5c:2f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NrDko4f20RZSSplef1bEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWYxOWViMGRkNDhlMWIyNDkyNDkwOGJiNWI2ODQ4Y2MxNjc4NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzmjpKjc1h8NNwIE29krRSyBBYxk 5NaT809BrKUFDcmDksimN82QJA2OHjqcBObZQG/ygT1wQDsUeFk2Zln1/dvYSvvJ fyqovf1xqB0fSCh3WCCRwhA1AUGk85AfG4tQhIhsaCYTdjZ/iE92AAOuSukFNveb MgI+pGimaQU/IbAMf7JfSY1IJJ10HhA7Gk1SpFAv54Dzd/4nyvvKR5wsTZiVRPes sTLGmTZC6sbEk87b1fpBYAqhWu2S+SVhiCeoEepIhiVShh2abPjbmVk6U4WoSkcx zF7XR1UDCjLdk7huqGtH2qr1V9GBQ3NkJ677dSGmiF371+K69Euno8e57wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLXxnrDdSOGySSSQi7W2hIzBZ4VGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2NlMDAx Yi1hNGQ4LTRmMGUtODMxZC0zNWM2NmQ3YzUyNjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvY2UwMDFi LWE0ZDgtNGYwZS04MzFkLTM1YzY2ZDdjNTI2MC8xL3RmR2VzTjFJNGJKSkpKQ0x0 YmFFak1GbmhVWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYjwMA0EAgACMAcDBQMqDp3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCIZzANBgkqhkiG9w0BAQsFAAOCAQEAbmZilwfEJz4f yBfN1J2nrUcYd6AJHg0qpZj1g5AleP2FGmWCB+GwePU2QiHd2mFTxX3bqUXkWmac 4Mdhi403ma0QHSC8PCNf+DEZ0E5kp7RBWoBmjMOBBKl7kSDWUHShWAzifEtXjXuV 2a+0BYQ8SH1YeSorRwqQxLcyA9c9akuLoEtjDj+PMuDUiFxInqbvhH2wABwZ3Tct r091M2kVkGEjQXyWlo699499gCINTVziYXuYFN/6i9NnF7gxCY4ywT1POzPbfuWg Ffqh++rNRyULrd9lo0ap57eaO34/BrqAVciRp72+zTWsMmVxMtOXz78tJzr3GPkT V+z0UOBcLw== -----END CERTIFICATE-----Generated at Fri Jan 9 01:10:33 2026 by rpki-client