This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer File: tjowlEOcrA9VVwEobNVDc7zmy1A.cer (raw, json) Hash identifier: Kk+DQ9p4q3JyZ2WSJ2dSkdkEfFp+238UcCHQf+1RP5M= Subject key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BE553C89CC4D4E17CF998AB1AF77D3F86 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 22 Jan 2026 10:50:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214489 IP: 91.191.194.0 -- 91.191.205.255 IP: 130.0.11.0 -- 130.0.15.255 IP: 185.127.40.0/24 IP: 2a01:f000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:53:c8:9c:c4:d4:e1:7c:f9:98:ab:1a:f7:7d:3f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 22 10:50:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b63a3094439cac0f555701286cd54373bce6cb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:ef:bb:78:18:87:d8:be:c5:75:f6:0d:2c: a1:22:ed:fd:57:65:57:06:3a:71:f2:16:fd:b1:f7: f8:f7:51:2a:26:54:55:34:fc:6a:b6:c8:08:b4:a2: c3:68:4f:84:97:62:62:3a:02:8b:5d:17:35:4e:88: 99:82:04:e2:83:30:41:73:00:c2:c9:28:d7:1d:92: 4e:e7:6c:79:32:1b:5b:64:8e:af:6d:00:09:5a:4a: 13:6c:a8:49:ce:93:c0:fd:4a:56:a9:1e:95:01:3c: ca:3b:99:f6:f1:59:a5:27:0d:41:26:f8:f5:89:f2: e3:bb:65:c1:1e:72:1f:31:06:fa:a7:4e:49:90:7b: fc:bd:41:8e:4c:e8:9a:cd:26:a9:f2:40:ce:cd:b5: 48:d4:a7:ea:4e:94:9a:3d:71:15:2c:67:84:21:05: 66:a6:05:0b:8f:70:aa:83:7d:b6:98:86:08:2f:fd: d9:8d:57:cc:73:e5:cc:e1:c1:0e:6e:d1:c7:9a:5e: 54:6a:ce:c2:3d:8e:4b:af:7c:60:24:2c:0c:f8:a9: 6e:14:9f:30:a7:4a:10:bc:ea:56:b2:5b:c5:7d:1e: fd:18:ff:f1:b9:78:a9:92:c1:c0:66:09:a3:a0:8d: fd:f8:61:c1:68:c5:b4:c0:bc:0f:b7:b4:8b:ff:f5: ef:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.191.194.0-91.191.205.255 130.0.11.0-130.0.15.255 185.127.40.0/24 IPv6: 2a01:f000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214489 Signature Algorithm: sha256WithRSAEncryption aa:e0:04:64:0a:ae:aa:03:6d:24:63:2a:b1:38:f4:ab:ef:a5: 00:04:43:60:2c:58:a0:51:08:e5:6c:e5:f0:85:dd:5d:9a:5a: 7e:f0:e4:45:6a:66:6f:41:fc:22:36:e6:8d:4e:54:ab:78:2b: d8:ba:ae:ab:11:cf:1a:9b:92:b4:e1:0c:0b:10:6c:bc:65:6a: f4:3b:51:9f:60:93:dd:81:46:74:1c:f3:08:cd:62:b5:f0:ce: 6c:8d:ce:b7:ff:e7:86:07:40:d0:ba:73:ab:15:0f:99:e0:7d: c5:84:34:d4:6e:6f:ad:20:98:7e:a0:60:1c:e6:2b:af:69:71: 09:fb:10:63:63:31:cd:5d:68:81:53:39:51:95:ed:8b:28:c2: b0:ab:c2:5f:ca:75:5f:d5:03:58:cd:23:a5:f4:93:e0:02:14: 30:93:ca:5e:65:78:e2:f9:ab:49:f6:c5:eb:10:9c:12:de:7a: 2b:0f:74:6d:fe:9a:68:0a:8a:74:5d:76:69:67:86:a8:7a:b6: 72:8d:d7:e4:c8:ff:ce:da:25:61:f7:32:a4:22:bb:d0:6b:fe: 46:be:4b:1e:53:37:22:80:9c:3a:11:4f:9a:f2:4f:d3:0c:b6: a6:59:0c:58:d0:ae:16:01:ae:e8:d6:55:66:b5:cf:14:f6:44: 08:db:44:cd -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZvlU8icxNThfPmYqxr3fT+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIyMTA1MDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjNhMzA5NDQzOWNhYzBmNTU1NzAxMjg2Y2Q1NDM3M2JjZTZjYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJLvu3gYh9i+xXX2DSyhIu39V2VX Bjpx8hb9sff491EqJlRVNPxqtsgItKLDaE+El2JiOgKLXRc1ToiZggTigzBBcwDC ySjXHZJO52x5MhtbZI6vbQAJWkoTbKhJzpPA/UpWqR6VATzKO5n28VmlJw1BJvj1 ifLju2XBHnIfMQb6p05JkHv8vUGOTOiazSap8kDOzbVI1KfqTpSaPXEVLGeEIQVm pgULj3Cqg322mIYIL/3ZjVfMc+XM4cEObtHHml5Uas7CPY5Lr3xgJCwM+KluFJ8w p0oQvOpWslvFfR79GP/xuXipksHAZgmjoI39+GHBaMW0wLwPt7SL//Xv/wIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFLY6MJRDnKwPVVcBKGzVQ3O85stQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwL2U0ZDIw Zi02ZGM4LTQ5N2QtYThkNi05ZGRkZDY4MDIwODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvZTRkMjBm LTZkYzgtNDk3ZC1hOGQ2LTlkZGRkNjgwMjA4OC8xL3Rqb3dsRU9jckE5VlZ3RW9i TlZEYzd6bXkxQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEoGCCsGAQUF BwEHAQH/BDswOTAoBAIAATAiMAwDBAFbv8IDBAFbv8wwDAMEAIIACwMEBIIAAAME ALl/KDANBAIAAjAHAwUDKgHwADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRdkw DQYJKoZIhvcNAQELBQADggEBAKrgBGQKrqoDbSRjKrE49KvvpQAEQ2AsWKBRCOVs 5fCF3V2aWn7w5EVqZm9B/CI25o1OVKt4K9i6rqsRzxqbkrThDAsQbLxlavQ7UZ9g k92BRnQc8wjNYrXwzmyNzrf/54YHQNC6c6sVD5ngfcWENNRub60gmH6gYBzmK69p cQn7EGNjMc1daIFTOVGV7YsowrCrwl/KdV/VA1jNI6X0k+ACFDCTyl5leOL5q0n2 xesQnBLeeisPdG3+mmgKinRddmlnhqh6tnKN1+TI/87aJWH3MqQiu9Br/ka+Sx5T NyKAnDoRT5ryT9MMtqZZDFjQrhYBrujWVWa1zxT2RAjbRM0= -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:56 2026 by rpki-client