This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tlMWam8fM-RyDmfSTdMuRFgDUvA.cer File: tlMWam8fM-RyDmfSTdMuRFgDUvA.cer (raw, json) Hash identifier: XmE4Rcn/pPkDPJq6mD/GFFhOVqAO9jUkTpgBp9BVgwI= Subject key identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F3976590492CEEBFD148DB568A66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39702 AS: 52012 IP: 85.190.192.0/19 IP: 89.106.216.0/21 IP: 178.251.88.0/21 IP: 185.5.100.0/22 IP: 192.109.195.0/24 IP: 2a01:4d80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f3:97:65:90:49:2c:ee:bf:d1:48:db:56:8a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b653166a6f1f33e4720e67d24dd32e44580352f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:55:78:a6:87:1d:54:3c:e5:56:91:11:f0: 25:c6:2b:31:63:96:16:34:56:a2:ba:f2:fe:dc:c0: 83:0a:84:22:ac:e6:62:29:99:52:47:6d:23:e2:e9: 4c:8f:5e:c3:62:9f:f9:e6:9b:46:65:f9:de:12:a9: 95:a3:f9:45:82:ad:80:cd:4e:78:75:08:59:de:59: 1c:a4:e9:a7:92:70:49:8b:8b:b3:0f:1b:25:7c:8a: 0d:f8:76:a6:08:f5:01:9a:a7:65:f9:27:e9:ea:74: 68:6f:41:82:55:61:97:7f:5e:63:9b:56:a4:6a:96: bd:55:cf:1b:13:03:78:e6:34:ef:05:1e:77:7d:a4: 40:59:3a:87:a2:f4:53:3f:6e:f6:9c:5d:16:0f:bb: 58:63:e8:ea:db:f8:94:d0:86:13:8f:01:3a:a6:2e: 78:1c:eb:7a:75:cb:9f:e8:fe:b5:f1:56:8b:06:a0: c9:f2:1d:6f:8d:32:94:ee:3c:6f:08:3d:e8:b0:ce: d2:65:24:9c:2f:84:91:21:cf:0d:59:5c:e2:c9:0d: 37:c6:b2:b5:2a:af:d6:7a:ec:ba:3b:5a:ba:d5:54: 83:ae:d9:5b:dd:c5:78:d9:b4:02:ff:82:88:bc:8e: bb:64:13:7c:dd:87:5c:e4:94:42:7f:80:e3:ba:2d: 52:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:53:16:6A:6F:1F:33:E4:72:0E:67:D2:4D:D3:2E:44:58:03:52:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/aeb8bc-884c-404f-bcb2-fcd37f26047f/1/tlMWam8fM-RyDmfSTdMuRFgDUvA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.190.192.0/19 89.106.216.0/21 178.251.88.0/21 185.5.100.0/22 192.109.195.0/24 IPv6: 2a01:4d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39702 52012 Signature Algorithm: sha256WithRSAEncryption b1:4d:5e:96:37:46:db:78:b6:08:40:52:45:30:54:84:53:3a: 2f:92:95:0a:01:89:1a:14:11:76:d0:c2:b0:4c:d1:de:83:67: bb:e1:a4:60:73:75:6f:43:03:28:d2:e3:ea:19:15:d5:98:37: ee:1d:62:f5:1c:8e:7f:c5:fd:ec:57:74:1d:e0:78:15:8f:cc: 09:66:1d:2a:cf:f4:6c:5d:bb:b0:ac:88:a6:f9:0a:f7:4a:a6: e9:ef:9a:53:13:ba:17:75:9a:af:05:9c:4a:66:52:ff:56:8b: bc:c8:29:0f:4a:20:64:1c:a6:c9:9f:4d:5c:d7:bf:d9:f2:ef: 94:ec:43:64:58:81:56:96:0f:19:13:69:76:aa:eb:5f:f3:16: fa:2b:86:d6:e6:06:1d:9e:73:af:81:bb:e0:20:36:58:05:74: 61:ba:2d:38:a7:c3:d5:e0:d8:0d:7b:b2:02:34:7a:dc:13:46: b8:be:a2:06:d4:a3:cb:07:a7:34:8e:f9:c9:b3:b7:6d:b3:9c: c3:58:b7:f5:06:81:3a:2b:40:5a:18:6b:08:96:93:3c:c4:04: a6:1a:2d:ab:3d:66:74:1e:e7:1b:3e:0b:74:43:fc:cd:79:2d: be:b1:1f:a0:ce:ce:39:e5:03:15:a1:31:7b:96:35:c2:59:df: ff:5f:60:11 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt4ovOXZZBJLO6/0UjbVopmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjUzMTY2YTZmMWYzM2U0NzIwZTY3ZDI0ZGQzMmU0NDU4MDM1MmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzldVeKaHHVQ85VaREfAlxisxY5YW NFaiuvL+3MCDCoQirOZiKZlSR20j4ulMj17DYp/55ptGZfneEqmVo/lFgq2AzU54 dQhZ3lkcpOmnknBJi4uzDxslfIoN+HamCPUBmqdl+Sfp6nRob0GCVWGXf15jm1ak apa9Vc8bEwN45jTvBR53faRAWTqHovRTP272nF0WD7tYY+jq2/iU0IYTjwE6pi54 HOt6dcuf6P618VaLBqDJ8h1vjTKU7jxvCD3osM7SZSScL4SRIc8NWVziyQ03xrK1 Kq/Weuy6O1q61VSDrtlb3cV42bQC/4KIvI67ZBN83Ydc5JRCf4Djui1SXwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFLZTFmpvHzPkcg5n0k3TLkRYA1LwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2FlYjhi Yy04ODRjLTQwNGYtYmNiMi1mY2QzN2YyNjA0N2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvYWViOGJj LTg4NGMtNDA0Zi1iY2IyLWZjZDM3ZjI2MDQ3Zi8xL3RsTVdhbThmTS1SeURtZlNU ZE11UkZnRFV2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQFVb7AAwQDWWrYAwQDsvtYAwQCuQVkAwQAwG3D MA0EAgACMAcDBQAqAU2AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCbFgIDAMss MA0GCSqGSIb3DQEBCwUAA4IBAQCxTV6WN0bbeLYIQFJFMFSEUzovkpUKAYkaFBF2 0MKwTNHeg2e74aRgc3VvQwMo0uPqGRXVmDfuHWL1HI5/xf3sV3Qd4HgVj8wJZh0q z/RsXbuwrIim+Qr3Sqbp75pTE7oXdZqvBZxKZlL/Vou8yCkPSiBkHKbJn01c17/Z 8u+U7ENkWIFWlg8ZE2l2qutf8xb6K4bW5gYdnnOvgbvgIDZYBXRhui04p8PV4NgN e7ICNHrcE0a4vqIG1KPLB6c0jvnJs7dts5zDWLf1BoE6K0BaGGsIlpM8xASmGi2r PWZ0HucbPgt0Q/zNeS2+sR+gzs455QMVoTF7ljXCWd//X2AR -----END CERTIFICATE-----Generated at Tue Jan 27 14:26:59 2026 by rpki-client