This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer File: tgdgRQHeNgl2jFunxMypxWth-dU.cer (raw, json) Hash identifier: 0gs61TGD/lD6m5K6VeX+4XDYuG8Hzm0xtlBmNx/9m/Q= Subject key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB69992C9CE1E733FDF13AFE81630941D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 24 Nov 2025 16:01:49 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 48165 AS: 198412 IP: 176.124.112.0/23 IP: 185.121.24.0/22 IP: 185.187.152.0/22 IP: 2a05:b0c0::/29 IP: 2a0b:a780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:99:92:c9:ce:1e:73:3f:df:13:af:e8:16:30:94:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 24 16:01:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:5b:46:76:78:eb:7b:34:45:7a:2a:b3:92: c5:69:71:ba:82:59:df:48:26:a5:24:e7:b7:16:a8: eb:83:84:25:6b:31:98:a2:b3:02:30:f1:ce:38:37: 69:f0:7d:57:66:e0:01:38:07:1d:51:68:60:96:21: ad:a8:2e:e3:e4:a4:1e:3d:69:29:69:8e:a7:18:9d: 15:ba:e1:ab:d0:2e:65:8b:34:3b:98:d0:3d:77:71: fa:10:39:88:3a:7d:21:5c:39:9b:ba:f4:64:26:5c: 90:26:81:54:48:58:9b:0c:13:4b:6e:c1:03:9f:31: 9a:5a:af:e6:cc:24:0c:96:b2:9a:8d:c9:cc:23:33: 11:8f:01:47:35:ae:f3:de:d3:48:ee:2e:69:ec:2d: 6a:fe:3f:2a:9f:e0:bc:60:f1:d1:1e:97:40:eb:bb: a0:d5:c2:06:07:4e:18:ee:02:10:91:5f:90:49:07: b4:a3:5e:03:56:73:d9:50:6b:e5:62:13:ac:0c:28: 06:34:e1:ae:8b:5d:2d:c6:25:dc:04:61:32:19:d7: 27:dc:16:8e:d8:fd:52:02:3f:2f:d2:63:55:78:30: 32:98:27:57:b6:f5:76:7b:21:48:0b:e8:d3:22:00: 5d:2a:79:a3:3f:68:c1:f0:38:e9:b3:8c:9d:75:d2: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.112.0/23 185.121.24.0/22 185.187.152.0/22 IPv6: 2a05:b0c0::/29 2a0b:a780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48165 198412 Signature Algorithm: sha256WithRSAEncryption 1f:c1:16:9e:c2:be:26:0f:bc:1f:c6:20:f9:8c:8b:56:63:3c: eb:9f:8a:e0:e9:21:75:9d:72:ac:bf:f4:df:85:c3:ff:e2:ef: 4b:ac:d2:99:4f:31:aa:56:7b:86:c4:a9:f6:c6:c4:04:9c:9f: 30:3a:7c:39:8d:96:c0:be:66:e2:60:fb:e8:34:78:71:ff:11: f4:a1:40:4e:52:5f:7e:c7:65:0d:73:fc:be:f5:7c:9e:92:df: 3e:c6:1b:1b:a1:e2:bb:92:8f:f4:5d:49:25:52:0e:92:85:07: bd:0b:f8:2e:44:37:2c:e1:43:5e:98:46:fe:8d:6c:26:d7:7c: 17:a9:e9:c2:0c:ef:a0:c5:b3:5b:9d:c8:cf:62:e1:7f:49:ff: d2:9a:fb:44:f8:fb:08:03:9f:fd:61:9f:40:d6:2b:b7:2f:74: 8e:e0:db:fc:35:ef:12:31:ee:ea:9f:f7:81:67:92:e8:d0:50: f5:39:f8:6e:eb:10:37:91:bb:b0:d2:de:42:67:fb:a3:79:13: 75:0b:7a:7d:d3:58:7e:ea:c1:a7:50:16:56:ec:c9:cf:ba:42: f1:95:a3:b7:44:a1:a4:28:10:1b:de:02:b9:8a:30:30:c7:d9: 01:5a:fb:67:fe:5f:2c:c4:b9:e8:60:b0:c6:bd:a8:9f:bf:21: 4f:0a:d0:6c -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZq2mZLJzh5zP98Tr+gWMJQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI0MTYwMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjA3NjA0NTAxZGUzNjA5NzY4YzViYTdjNGNjYTljNTZiNjFmOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNxbRnZ463s0RXoqs5LFaXG6glnf SCalJOe3Fqjrg4QlazGYorMCMPHOODdp8H1XZuABOAcdUWhgliGtqC7j5KQePWkp aY6nGJ0VuuGr0C5lizQ7mNA9d3H6EDmIOn0hXDmbuvRkJlyQJoFUSFibDBNLbsED nzGaWq/mzCQMlrKajcnMIzMRjwFHNa7z3tNI7i5p7C1q/j8qn+C8YPHRHpdA67ug 1cIGB04Y7gIQkV+QSQe0o14DVnPZUGvlYhOsDCgGNOGui10txiXcBGEyGdcn3BaO 2P1SAj8v0mNVeDAymCdXtvV2eyFIC+jTIgBdKnmjP2jB8Djps4ydddI3hwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFLYHYEUB3jYJdoxbp8TMqcVrYfnVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2QwZjYx OS1iMmQzLTQ0MjItYTYxOC1iOWRkNTEwODI2NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZDBmNjE5 LWIyZDMtNDQyMi1hNjE4LWI5ZGQ1MTA4MjY1NS8xL3RnZGdSUUhlTmdsMmpGdW54 TXlweFd0aC1kVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQBsHxwAwQCuXkYAwQCubuYMBQEAgACMA4DBQMq BbDAAwUDKgungDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAvCUCAwMHDDANBgkq hkiG9w0BAQsFAAOCAQEAH8EWnsK+Jg+8H8Yg+YyLVmM865+K4OkhdZ1yrL/034XD /+LvS6zSmU8xqlZ7hsSp9sbEBJyfMDp8OY2WwL5m4mD76DR4cf8R9KFATlJffsdl DXP8vvV8npLfPsYbG6Hiu5KP9F1JJVIOkoUHvQv4LkQ3LOFDXphG/o1sJtd8F6np wgzvoMWzW53Iz2Lhf0n/0pr7RPj7CAOf/WGfQNYrty90juDb/DXvEjHu6p/3gWeS 6NBQ9Tn4busQN5G7sNLeQmf7o3kTdQt6fdNYfurBp1AWVuzJz7pC8ZWjt0ShpCgQ G94CuYowMMfZAVr7Z/5fLMS56GCwxr2on78hTwrQbA== -----END CERTIFICATE-----Generated at Fri Nov 28 08:00:11 2025 by rpki-client