This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer File: tlkY8l1WAA-IHamN4yPZGgZOAIc.cer (raw, json) Hash identifier: qgg6EM7AKLjtoRpeGZswG1z1Xx89qPd9ubMlerXosiQ= Subject key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F830E60FCC16C7BE00F465CF003C74B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207125 IP: 185.165.116.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:0e:60:fc:c1:6c:7b:e0:0f:46:5c:f0:03:c7:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b65918f25d56000f881da98de323d91a064e0087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:5d:9f:28:ef:30:78:42:80:35:0c:4f:4e: 41:9f:6a:3d:1b:43:fd:61:06:f0:a2:b6:9b:f7:d8: 4d:16:f4:1c:63:f5:e5:4d:79:54:e7:4b:62:24:43: 89:9a:5c:d8:2c:df:4d:45:01:11:89:98:51:f4:e7: 3a:8d:aa:10:1a:5c:fb:ad:83:87:a9:b6:1c:79:80: 05:45:45:d3:f3:b0:51:b8:ea:19:36:7c:8f:71:df: 40:46:4a:4d:b9:14:8d:52:48:38:c9:f0:3f:97:af: fd:88:5c:7c:c2:e2:3b:ac:89:da:6e:1c:68:9a:d8: 7c:36:2e:41:10:a6:d3:97:33:b4:ff:05:cd:8f:43: 0c:79:89:24:c5:70:ff:3e:68:a9:2f:6d:be:77:7a: 55:ed:57:76:1e:5e:7d:14:e8:d9:75:6c:b7:4c:9a: 27:f3:d0:d7:59:e9:c5:a0:02:86:97:c8:eb:ff:c3: 2a:eb:46:a6:30:0f:3f:95:d1:e8:e9:e8:4a:fd:c7: 6f:71:66:8b:9e:30:06:3d:e6:97:d2:b9:a6:23:b9: 26:23:bf:89:de:e8:9f:09:83:cc:b1:3b:55:4b:68: 08:14:5d:f7:ec:36:d9:03:1b:2e:17:71:43:47:3e: fb:d1:a0:3b:62:cb:94:3c:c7:5c:f9:0a:b6:ba:9e: b6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.116.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207125 Signature Algorithm: sha256WithRSAEncryption 57:01:80:a9:8b:c5:80:46:df:d9:3f:ec:7e:76:98:93:75:43: 5e:42:af:b3:71:18:14:da:6d:31:b0:c9:74:e7:81:06:b2:4e: f7:7f:bc:0b:05:35:bc:a9:2c:8a:66:5c:e1:bb:15:dd:75:25: ff:a9:d2:12:69:e8:06:4d:b9:b0:6f:8d:78:ba:b3:d2:5a:18: 3c:70:92:07:a2:ec:12:74:e2:f3:57:93:fc:3b:7c:44:8c:62: 91:25:83:29:12:53:d4:a2:4c:80:58:23:fb:32:ee:fb:3a:7f: b0:63:6e:bd:be:70:e1:af:e4:c1:97:36:e9:ed:5d:dc:10:72: a4:d6:c3:ac:37:14:b6:c1:e1:a1:7b:fe:c0:4b:04:29:c2:8c: 64:8d:3d:9e:99:07:71:ab:f4:44:12:ef:5e:4c:41:2b:95:b4: bf:24:b0:a2:a2:36:0d:77:2d:c2:e9:72:05:ad:b2:c8:bb:68: 8f:e5:e5:7c:28:08:ef:28:fc:c4:c5:8a:c2:11:a8:4c:95:20: 27:13:03:04:40:d6:9f:f8:a5:df:b2:7c:88:31:a2:f3:d1:e9: e6:74:9d:e7:dc:5e:0c:e2:64:8a:e2:ff:06:ed:46:1b:b2:53: 29:e5:ba:5e:f8:26:b3:6d:57:6f:3b:47:ff:25:25:b8:57:70: a4:75:3c:8f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gw5g/MFse+APRlzwA8dLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjU5MThmMjVkNTYwMDBmODgxZGE5OGRlMzIzZDkxYTA2NGUwMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyNdnyjvMHhCgDUMT05Bn2o9G0P9 YQbworab99hNFvQcY/XlTXlU50tiJEOJmlzYLN9NRQERiZhR9Oc6jaoQGlz7rYOH qbYceYAFRUXT87BRuOoZNnyPcd9ARkpNuRSNUkg4yfA/l6/9iFx8wuI7rInabhxo mth8Ni5BEKbTlzO0/wXNj0MMeYkkxXD/PmipL22+d3pV7Vd2Hl59FOjZdWy3TJon 89DXWenFoAKGl8jr/8Mq60amMA8/ldHo6ehK/cdvcWaLnjAGPeaX0rmmI7kmI7+J 3uifCYPMsTtVS2gIFF337DbZAxsuF3FDRz770aA7YsuUPMdc+Qq2up62GwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLZZGPJdVgAPiB2pjeMj2RoGTgCHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkLzU1MDZk ZS0wYjFhLTQ3ZWUtOTlkMS1hNTIwZDQzNDY1NGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNTUwNmRl LTBiMWEtNDdlZS05OWQxLWE1MjBkNDM0NjU0YS8xL3Rsa1k4bDFXQUEtSUhhbU40 eVBaR2daT0FJYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuaV0MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMpFTANBgkqhkiG9w0BAQsFAAOCAQEAVwGAqYvFgEbf2T/sfnaYk3VDXkKvs3EY FNptMbDJdOeBBrJO93+8CwU1vKksimZc4bsV3XUl/6nSEmnoBk25sG+NeLqz0loY PHCSB6LsEnTi81eT/Dt8RIxikSWDKRJT1KJMgFgj+zLu+zp/sGNuvb5w4a/kwZc2 6e1d3BBypNbDrDcUtsHhoXv+wEsEKcKMZI09npkHcav0RBLvXkxBK5W0vySwoqI2 DXctwulyBa2yyLtoj+XlfCgI7yj8xMWKwhGoTJUgJxMDBEDWn/il37J8iDGi89Hp 5nSd59xeDOJkiuL/Bu1GG7JTKeW6Xvgms21XbztH/yUluFdwpHU8jw== -----END CERTIFICATE-----Generated at Tue Jan 27 03:16:48 2026 by rpki-client