This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer File: tm6nNZIhwbd9bMAG97ZwapqQgpk.cer (raw, json) Hash identifier: kehGwI0tKQdQUojzSVmO60qn4QG7fmKQgylO5ygkyEc= Subject key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78348A0FC227E69342610D9ED3C7CA15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61272 IP: 85.206.160.0/20 IP: 85.206.240.0/22 IP: 88.119.160.0/20 IP: 91.216.163.0/24 IP: 185.25.48.0/22 IP: 185.64.104.0/22 IP: 213.252.228.0 -- 213.252.233.255 IP: 213.252.238.0/23 IP: 2a04:2180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8a:0f:c2:27:e6:93:42:61:0d:9e:d3:c7:ca:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:52:64:9c:69:70:35:a5:e7:74:31:bf:95:e6: 19:db:be:21:89:a8:4f:80:2c:e9:75:97:13:94:10: c8:57:10:48:e6:b7:24:06:80:5c:e2:73:a4:9a:c4: 08:f7:fd:72:3a:a7:46:cb:24:f5:19:8b:38:75:ba: 9f:ba:4a:3c:0c:a0:93:a0:2d:37:07:74:49:c6:47: 28:df:8c:d3:dd:2d:e9:91:15:44:29:ed:a5:76:8e: 25:79:db:e4:d8:64:89:89:9d:02:de:ac:17:2f:fb: a3:05:d2:f8:b5:29:10:dd:3b:5e:a9:fd:8e:c0:a4: 06:bb:09:94:f8:69:d5:33:1e:06:b3:40:2c:db:c7: 22:1c:26:66:fb:1f:3a:4b:9e:d2:c6:38:9f:23:fa: 58:e1:27:94:6b:bb:d3:4e:b0:34:09:6e:a3:c8:24: 49:8a:43:66:d2:f9:16:0a:7e:dd:2f:f8:2d:24:6e: a3:da:1c:ce:2f:6e:0a:8e:9b:51:af:79:3f:db:2a: df:15:44:ac:05:ed:81:1d:35:67:6d:b0:e2:e3:df: 3b:a1:ec:24:71:33:14:65:62:42:33:02:8a:ef:ee: ef:8d:b5:45:19:a9:e0:69:c4:c6:c2:81:bb:db:79: 7d:23:04:37:e8:5f:26:a3:b6:46:cc:88:79:ca:04: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.206.160.0/20 85.206.240.0/22 88.119.160.0/20 91.216.163.0/24 185.25.48.0/22 185.64.104.0/22 213.252.228.0-213.252.233.255 213.252.238.0/23 IPv6: 2a04:2180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61272 Signature Algorithm: sha256WithRSAEncryption 69:ee:1e:b6:1e:aa:2b:9b:51:c8:e5:d3:53:0f:85:44:01:89: 46:31:3a:18:22:24:60:f5:df:51:eb:88:cb:94:24:84:4c:09: 9a:40:c5:18:e3:ab:c8:9d:24:cc:c2:9d:f7:32:66:aa:68:5a: 87:17:1d:ef:34:5a:10:6a:6c:5b:29:92:93:5b:0b:30:78:86: 52:9a:12:48:d1:98:8b:7d:3c:5b:8d:c9:23:d9:76:38:27:88: 60:79:1a:3a:35:d7:ff:75:76:0b:c5:45:bc:e0:79:6a:4a:22: 63:ec:c4:35:b3:db:1f:ae:5d:17:38:4b:bc:64:e7:b6:bb:d1: 49:95:30:cb:03:2e:8e:60:8d:58:dd:b2:ee:dd:d8:53:61:61: 7e:f5:d7:7d:51:b4:be:bb:91:e5:40:51:54:f2:08:12:50:6c: 89:99:57:fe:7e:7d:f4:50:25:34:5b:e7:68:54:12:b2:62:c5: 2d:92:d2:b1:73:1e:76:aa:71:d3:74:3f:61:63:25:14:1e:53: 33:28:94:3a:2b:9b:75:98:f5:fc:bc:e6:5d:cd:38:03:2e:3c: 09:d0:37:64:88:0b:1c:50:70:22:de:3f:bd:87:ce:4e:dd:c6: 37:a2:e4:93:10:02:62:d4:b1:a7:0a:54:78:33:51:3b:2d:f3: d1:d7:2b:28 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgISAZt4NIoPwifmk0JhDZ7Tx8oVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjZlYTczNTkyMjFjMWI3N2Q2Y2MwMDZmN2I2NzA2YTlhOTA4Mjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VJknGlwNaXndDG/leYZ274hiahP gCzpdZcTlBDIVxBI5rckBoBc4nOkmsQI9/1yOqdGyyT1GYs4dbqfuko8DKCToC03 B3RJxkco34zT3S3pkRVEKe2ldo4ledvk2GSJiZ0C3qwXL/ujBdL4tSkQ3Tteqf2O wKQGuwmU+GnVMx4Gs0As28ciHCZm+x86S57SxjifI/pY4SeUa7vTTrA0CW6jyCRJ ikNm0vkWCn7dL/gtJG6j2hzOL24KjptRr3k/2yrfFUSsBe2BHTVnbbDi4987oewk cTMUZWJCMwKK7+7vjbVFGangacTGwoG723l9IwQ36F8mo7ZGzIh5ygQuGQIDAQAB o4IC4TCCAt0wHQYDVR0OBBYEFLZupzWSIcG3fWzABve2cGqakIKZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0L2Y4N2Ey ZS00NmIxLTRhNjYtYTkwYy02OTk4MzVjOTJiZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZjg3YTJl LTQ2YjEtNGE2Ni1hOTBjLTY5OTgzNWM5MmJmZS8xL3RtNm5OWklod2JkOWJNQUc5 N1p3YXBxUWdway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzA+BAIAATA4AwQEVc6gAwQCVc7wAwQEWHegAwQAW9ijAwQCuRkw AwQCuUBoMAwDBALV/OQDBAHV/OgDBAHV/O4wDQQCAAIwBwMFAyoEIYAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAO9YMA0GCSqGSIb3DQEBCwUAA4IBAQBp7h62Hqor m1HI5dNTD4VEAYlGMToYIiRg9d9R64jLlCSETAmaQMUY46vInSTMwp33MmaqaFqH Fx3vNFoQamxbKZKTWwsweIZSmhJI0ZiLfTxbjckj2XY4J4hgeRo6Ndf/dXYLxUW8 4HlqSiJj7MQ1s9sfrl0XOEu8ZOe2u9FJlTDLAy6OYI1Y3bLu3dhTYWF+9dd9UbS+ u5HlQFFU8ggSUGyJmVf+fn30UCU0W+doVBKyYsUtktKxcx52qnHTdD9hYyUUHlMz KJQ6K5t1mPX8vOZdzTgDLjwJ0DdkiAscUHAi3j+9h85O3cY3ouSTEAJi1LGnClR4 M1E7LfPR1yso -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:50 2026 by rpki-client