This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tkDbwv_PXWNFicBEAV1xdcuv8-0.cer File: tkDbwv_PXWNFicBEAV1xdcuv8-0.cer (raw, json) Hash identifier: HgAeY7WxJv0TMDBLtclB/xlzmo/bssDvA5oGa/FWldQ= Subject key identifier: B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B364A1D0D4A4D743DE5DE23428E2F13 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13247 AS: 48785 IP: 94.142.216.0/21 IP: 95.128.248.0/21 IP: 185.112.152.0/22 IP: 193.31.2.0/24 IP: 213.165.96.0/19 IP: 2a02:868::/29 IP: 2a02:2678::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4a:1d:0d:4a:4d:74:3d:e5:de:23:42:8e:2f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b640dbc2ffcf5d634589c044015d7175cbaff3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ce:ba:12:1b:d5:72:2f:bb:e6:f5:7e:e4:53: bd:b6:87:e8:98:2a:c7:02:9d:49:c6:f4:f3:49:5e: d1:30:54:69:9a:71:50:2f:b6:30:c5:c2:08:b9:8b: 22:cc:35:2c:69:46:95:6f:56:fd:8f:b2:b8:f6:59: 8b:02:42:f9:c5:06:6f:fc:f6:ef:0e:dd:23:f9:c6: a5:a2:16:fd:d3:ff:b9:4a:30:3b:ff:67:76:b5:cf: a7:af:ed:f9:86:86:a9:e2:f0:f8:32:8f:21:ff:87: 2f:48:ac:bf:6c:8b:12:62:2b:dc:5b:75:74:9f:e5: ca:d8:38:68:9b:5e:f8:e2:19:55:b9:c4:77:84:7b: dc:cd:da:73:c2:83:41:8b:05:81:e6:89:a7:ea:1e: 06:2b:c7:67:df:85:e1:8a:a4:aa:72:08:b7:6b:07: 92:cf:52:db:f6:ca:81:c2:56:7b:f7:e9:19:14:b5: 20:8d:c1:f8:3f:5b:6d:17:28:9c:e7:24:c4:bb:d8: c2:d8:40:3a:89:87:47:16:13:e6:44:84:ba:f5:c4: 80:03:03:72:73:1e:b4:64:15:43:79:eb:53:31:c7: 88:97:1f:7d:7f:8b:e5:3f:18:fd:ec:97:72:d8:ca: 7d:b0:f7:b4:d5:31:a7:27:e7:4a:89:e3:86:9a:ec: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:40:DB:C2:FF:CF:5D:63:45:89:C0:44:01:5D:71:75:CB:AF:F3:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/76768c-cd75-46a9-8d65-6cbb77baa02d/1/tkDbwv_PXWNFicBEAV1xdcuv8-0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.216.0/21 95.128.248.0/21 185.112.152.0/22 193.31.2.0/24 213.165.96.0/19 IPv6: 2a02:868::/29 2a02:2678::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13247 48785 Signature Algorithm: sha256WithRSAEncryption 55:07:b9:73:4c:94:06:b4:3d:a6:c9:85:41:91:e5:e3:5c:aa: 9e:01:fd:ab:55:db:2a:ee:3c:4b:64:cb:2c:f1:0f:f9:5d:b3: 3a:e5:0b:51:ef:6e:07:d1:f7:a9:e8:54:64:ee:7c:1a:59:41: fe:a3:52:fb:4f:56:73:47:d6:b0:46:2d:20:35:17:db:99:ed: b9:76:87:00:54:6e:b7:33:bf:93:36:48:59:86:eb:a5:76:ae: d0:5b:8d:0b:e3:de:ac:fc:8f:31:8c:59:97:14:b9:2a:89:c2: 8f:1b:64:7c:87:42:4b:5a:a6:4e:f8:93:8d:15:56:35:e8:d5: 93:31:83:85:ae:58:f5:05:74:08:af:f7:9c:d7:ec:bc:92:8c: 05:96:fb:f0:77:ea:e1:f4:60:83:c4:0c:f1:26:d2:b7:94:ea: 9d:d1:a1:5d:e7:d1:a1:6d:04:f5:c6:7f:1b:27:b9:93:f3:de: 17:0c:9c:39:da:d4:75:c7:da:69:b7:87:32:59:ba:4f:83:fe: 12:a7:f6:55:b1:c0:ed:a3:ff:69:e0:dd:8f:cc:eb:1a:50:62: d6:5d:50:cc:0f:0c:95:c2:4d:b7:ca:35:0b:cd:77:16:43:47: 65:7d:76:2c:55:68:7e:0d:b4:cb:26:c7:1a:af:e3:f0:17:f9: 5b:2a:47:0e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt7NkodDUpNdD3l3iNCji8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjQwZGJjMmZmY2Y1ZDYzNDU4OWMwNDQwMTVkNzE3NWNiYWZmM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM66EhvVci+75vV+5FO9tofomCrH Ap1JxvTzSV7RMFRpmnFQL7YwxcIIuYsizDUsaUaVb1b9j7K49lmLAkL5xQZv/Pbv Dt0j+calohb90/+5SjA7/2d2tc+nr+35hoap4vD4Mo8h/4cvSKy/bIsSYivcW3V0 n+XK2Dhom1744hlVucR3hHvczdpzwoNBiwWB5omn6h4GK8dn34XhiqSqcgi3aweS z1Lb9sqBwlZ79+kZFLUgjcH4P1ttFyic5yTEu9jC2EA6iYdHFhPmRIS69cSAAwNy cx60ZBVDeetTMceIlx99f4vlPxj97Jdy2Mp9sPe01TGnJ+dKieOGmuwShwIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFLZA28L/z11jRYnARAFdcXXLr/PtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFmLzc2NzY4 Yy1jZDc1LTQ2YTktOGQ2NS02Y2JiNzdiYWEwMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvNzY3Njhj LWNkNzUtNDZhOS04ZDY1LTZjYmI3N2JhYTAyZC8xL3RrRGJ3dl9QWFdORmljQkVB VjF4ZGN1djgtMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDAkBAIAATAeAwQDXo7YAwQDX4D4AwQCuXCYAwQAwR8CAwQF1aVg MBQEAgACMA4DBQMqAghoAwUDKgImeDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIz vwIDAL6RMA0GCSqGSIb3DQEBCwUAA4IBAQBVB7lzTJQGtD2myYVBkeXjXKqeAf2r Vdsq7jxLZMss8Q/5XbM65QtR724H0fep6FRk7nwaWUH+o1L7T1ZzR9awRi0gNRfb me25docAVG63M7+TNkhZhuuldq7QW40L496s/I8xjFmXFLkqicKPG2R8h0JLWqZO +JONFVY16NWTMYOFrlj1BXQIr/ec1+y8kowFlvvwd+rh9GCDxAzxJtK3lOqd0aFd 59GhbQT1xn8bJ7mT894XDJw52tR1x9ppt4cyWbpPg/4Sp/ZVscDto/9p4N2PzOsa UGLWXVDMDwyVwk23yjULzXcWQ0dlfXYsVWh+DbTLJscar+PwF/lbKkcO -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:55 2026 by rpki-client