This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer File: thpyv6TKq8uk7ASEE3pRb580Q0Y.cer (raw, json) Hash identifier: 9r2ygaCeV5O7WhUnhm1ZdZKCPRbD/R9k6BqOtQI1NGM= Subject key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECFDB82B94D41D3D95AD9321A083C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56652 IP: 31.41.48.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fd:b8:2b:94:d4:1d:3d:95:ad:93:21:a0:83:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b61a72bfa4caabcba4ec0484137a516f9f344346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:ae:6d:df:e6:ad:ef:85:c9:92:78:d6:b8: 35:f2:80:bd:1a:19:de:e9:c2:15:95:08:c3:dc:98: c0:a2:41:d2:22:04:6d:af:17:cc:a7:65:7a:09:8b: a4:fe:27:40:2b:55:af:af:ff:bf:3a:5d:47:ea:8f: b5:3e:34:06:a1:10:84:dd:ee:98:c9:f6:25:9d:07: 66:ec:75:3f:64:5a:a9:9e:01:77:2a:21:90:3f:07: 26:73:59:43:6c:77:39:db:0c:6f:75:9e:7f:3e:af: b9:5a:b1:c3:5f:da:19:06:96:82:62:8b:a3:db:a6: 1c:e3:96:8e:73:d7:c5:73:16:fb:ff:12:6f:61:64: f9:a6:c4:c2:88:8f:a8:06:a4:c3:b8:f1:43:42:18: 5a:48:76:02:9a:44:fa:4b:cf:3e:53:fd:c0:01:75: f9:d3:a7:be:48:cf:43:1b:96:b3:8c:fd:dd:75:fc: 74:6c:06:ca:03:0b:00:dd:87:9b:14:7f:f9:51:d2: 5c:01:a2:a9:4f:b8:1d:db:14:a3:09:59:24:a6:ea: 29:4a:bc:ad:16:70:9a:49:82:7e:9b:a2:73:c8:2d: 2f:58:5a:e8:69:f8:26:6a:0c:52:4a:e1:95:f7:e7: 39:c0:23:a1:dc:f1:77:d5:2f:fa:dd:31:89:bf:5b: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.48.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56652 Signature Algorithm: sha256WithRSAEncryption a3:19:06:b5:23:23:e8:a5:90:5b:91:ab:11:49:e9:f3:8b:d4: fb:37:8b:5e:ce:df:14:9a:9e:4c:ab:4c:81:d5:95:21:00:ce: 82:28:11:7c:cf:78:57:07:e1:60:80:db:8b:ef:00:03:81:29: 4a:a3:13:08:2b:4f:7e:82:ee:05:c8:2b:a1:ef:5d:48:ac:28: c8:aa:a3:5f:08:5a:76:88:be:8c:86:48:46:9a:79:35:c4:a7: 49:e5:7f:86:83:46:4e:9d:02:7c:1d:a1:f1:7c:cb:26:f0:24: 25:47:17:b2:a8:cc:4f:29:bc:9e:47:5b:a2:37:f0:f7:df:47: 7a:86:91:8c:eb:1b:21:40:4f:78:aa:94:6d:9a:71:4b:ff:13: a9:52:a2:fb:5b:17:76:d6:fb:93:ff:f0:38:0b:7e:18:76:55: 10:af:9f:c7:c6:aa:86:00:a2:29:de:a9:f4:6e:6c:d2:67:d1: 54:aa:75:ce:75:a3:d5:3f:ad:80:fc:96:54:89:d7:a9:29:6e: 53:ad:04:0a:78:c6:b6:c0:8f:f3:9d:0d:7f:44:f9:dd:f9:ae: c8:23:86:54:e5:1d:3d:15:c6:57:25:2f:67:3c:ab:b0:ce:57: b2:b8:22:f2:73:45:e0:03:da:61:0a:05:ba:a5:49:e2:26:0f: 69:20:93:e3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57P24K5TUHT2VrZMhoIPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjFhNzJiZmE0Y2FhYmNiYTRlYzA0ODQxMzdhNTE2ZjlmMzQ0MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyGubd/mre+FyZJ41rg18oC9Ghne 6cIVlQjD3JjAokHSIgRtrxfMp2V6CYuk/idAK1Wvr/+/Ol1H6o+1PjQGoRCE3e6Y yfYlnQdm7HU/ZFqpngF3KiGQPwcmc1lDbHc52wxvdZ5/Pq+5WrHDX9oZBpaCYouj 26Yc45aOc9fFcxb7/xJvYWT5psTCiI+oBqTDuPFDQhhaSHYCmkT6S88+U/3AAXX5 06e+SM9DG5azjP3ddfx0bAbKAwsA3YebFH/5UdJcAaKpT7gd2xSjCVkkpuopSryt FnCaSYJ+m6JzyC0vWFroafgmagxSSuGV9+c5wCOh3PF31S/63TGJv1sbTQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLYacr+kyqvLpOwEhBN6UW+fNENGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2EyNDg3 NC05OGQzLTQ3MzQtOGVmYS04YzI1M2M0NTkyNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvYTI0ODc0 LTk4ZDMtNDczNC04ZWZhLThjMjUzYzQ1OTI3MS8xL3RocHl2NlRLcTh1azdBU0VF M3BSYjU4MFEwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDHykwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdTDANBgkqhkiG9w0BAQsFAAOCAQEAoxkGtSMj6KWQW5GrEUnp84vU+zeLXs7f FJqeTKtMgdWVIQDOgigRfM94VwfhYIDbi+8AA4EpSqMTCCtPfoLuBcgroe9dSKwo yKqjXwhadoi+jIZIRpp5NcSnSeV/hoNGTp0CfB2h8XzLJvAkJUcXsqjMTym8nkdb ojfw999HeoaRjOsbIUBPeKqUbZpxS/8TqVKi+1sXdtb7k//wOAt+GHZVEK+fx8aq hgCiKd6p9G5s0mfRVKp1znWj1T+tgPyWVInXqSluU60ECnjGtsCP850Nf0T53fmu yCOGVOUdPRXGVyUvZzyrsM5Xsrgi8nNF4APaYQoFuqVJ4iYPaSCT4w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:55 2026 by rpki-client