This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer File: tgdgRQHeNgl2jFunxMypxWth-dU.cer (raw, json) Hash identifier: /nRKMVgTm4OlGKnfu8CPGGos648vn32FEMxiyLYBZA8= Subject key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2ECAD76B59149CC7F005627B7872 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48165 AS: 198412 IP: 176.124.112.0/23 IP: 185.121.24.0/22 IP: 185.187.152.0/22 IP: 2a05:b0c0::/29 IP: 2a0b:a780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2e:ca:d7:6b:59:14:9c:c7:f0:05:62:7b:78:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:5b:46:76:78:eb:7b:34:45:7a:2a:b3:92: c5:69:71:ba:82:59:df:48:26:a5:24:e7:b7:16:a8: eb:83:84:25:6b:31:98:a2:b3:02:30:f1:ce:38:37: 69:f0:7d:57:66:e0:01:38:07:1d:51:68:60:96:21: ad:a8:2e:e3:e4:a4:1e:3d:69:29:69:8e:a7:18:9d: 15:ba:e1:ab:d0:2e:65:8b:34:3b:98:d0:3d:77:71: fa:10:39:88:3a:7d:21:5c:39:9b:ba:f4:64:26:5c: 90:26:81:54:48:58:9b:0c:13:4b:6e:c1:03:9f:31: 9a:5a:af:e6:cc:24:0c:96:b2:9a:8d:c9:cc:23:33: 11:8f:01:47:35:ae:f3:de:d3:48:ee:2e:69:ec:2d: 6a:fe:3f:2a:9f:e0:bc:60:f1:d1:1e:97:40:eb:bb: a0:d5:c2:06:07:4e:18:ee:02:10:91:5f:90:49:07: b4:a3:5e:03:56:73:d9:50:6b:e5:62:13:ac:0c:28: 06:34:e1:ae:8b:5d:2d:c6:25:dc:04:61:32:19:d7: 27:dc:16:8e:d8:fd:52:02:3f:2f:d2:63:55:78:30: 32:98:27:57:b6:f5:76:7b:21:48:0b:e8:d3:22:00: 5d:2a:79:a3:3f:68:c1:f0:38:e9:b3:8c:9d:75:d2: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.112.0/23 185.121.24.0/22 185.187.152.0/22 IPv6: 2a05:b0c0::/29 2a0b:a780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48165 198412 Signature Algorithm: sha256WithRSAEncryption ac:68:09:86:31:07:19:cb:5b:15:f5:61:95:ed:0a:1f:05:a6: f4:14:d0:e5:ba:f0:59:a1:a3:92:5e:4b:2a:e2:b4:2c:cb:c3: 13:e8:85:57:b1:64:0a:7a:4b:a5:56:87:0e:db:ae:b1:78:ec: c9:c0:22:ff:70:81:94:13:f0:fa:e3:93:7c:9c:cb:c9:b5:0d: f4:93:98:03:80:37:62:ee:31:41:8c:2d:72:4b:d3:98:86:d0: ef:a3:82:d5:90:e8:40:a3:e8:aa:21:55:ca:99:5d:97:99:70: f4:de:ec:96:85:0d:9c:33:07:72:7b:f9:eb:21:92:4f:c5:cb: 6f:96:84:4b:f5:f4:2a:c1:61:2d:80:6e:45:60:61:b8:b4:f6: 39:a5:c0:64:5f:a6:68:0b:1d:be:53:2a:52:64:55:55:a5:e1: 07:1d:7a:ae:6b:cf:59:52:3f:55:9d:8a:c1:b6:8c:b5:9c:3c: 05:bf:b7:79:0e:dd:9f:f3:cb:dd:90:4e:57:82:97:ed:f4:41: e9:6f:15:3d:43:42:0f:81:6d:04:40:cc:15:4c:f9:d9:4a:88: 6b:cd:b0:04:3f:c9:02:88:a2:9b:94:98:26:50:5b:46:d1:9e: ac:2e:90:bc:8e:3a:f7:1a:c4:50:f5:a1:03:aa:b0:61:06:13: f1:fa:6e:49 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt5fy7K12tZFJzH8AVie3hyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjA3NjA0NTAxZGUzNjA5NzY4YzViYTdjNGNjYTljNTZiNjFmOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNxbRnZ463s0RXoqs5LFaXG6glnf SCalJOe3Fqjrg4QlazGYorMCMPHOODdp8H1XZuABOAcdUWhgliGtqC7j5KQePWkp aY6nGJ0VuuGr0C5lizQ7mNA9d3H6EDmIOn0hXDmbuvRkJlyQJoFUSFibDBNLbsED nzGaWq/mzCQMlrKajcnMIzMRjwFHNa7z3tNI7i5p7C1q/j8qn+C8YPHRHpdA67ug 1cIGB04Y7gIQkV+QSQe0o14DVnPZUGvlYhOsDCgGNOGui10txiXcBGEyGdcn3BaO 2P1SAj8v0mNVeDAymCdXtvV2eyFIC+jTIgBdKnmjP2jB8Djps4ydddI3hwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFLYHYEUB3jYJdoxbp8TMqcVrYfnVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2QwZjYx OS1iMmQzLTQ0MjItYTYxOC1iOWRkNTEwODI2NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZDBmNjE5 LWIyZDMtNDQyMi1hNjE4LWI5ZGQ1MTA4MjY1NS8xL3RnZGdSUUhlTmdsMmpGdW54 TXlweFd0aC1kVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQBsHxwAwQCuXkYAwQCubuYMBQEAgACMA4DBQMq BbDAAwUDKgungDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAvCUCAwMHDDANBgkq hkiG9w0BAQsFAAOCAQEArGgJhjEHGctbFfVhle0KHwWm9BTQ5brwWaGjkl5LKuK0 LMvDE+iFV7FkCnpLpVaHDtuusXjsycAi/3CBlBPw+uOTfJzLybUN9JOYA4A3Yu4x QYwtckvTmIbQ76OC1ZDoQKPoqiFVypldl5lw9N7sloUNnDMHcnv56yGST8XLb5aE S/X0KsFhLYBuRWBhuLT2OaXAZF+maAsdvlMqUmRVVaXhBx16rmvPWVI/VZ2KwbaM tZw8Bb+3eQ7dn/PL3ZBOV4KX7fRB6W8VPUNCD4FtBEDMFUz52UqIa82wBD/JAoii m5SYJlBbRtGerC6QvI469xrEUPWhA6qwYQYT8fpuSQ== -----END CERTIFICATE-----Generated at Mon Jan 19 19:01:46 2026 by rpki-client