This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer File: tmdL-ORX4pV-7k9R-Le0TFfbmio.cer (raw, json) Hash identifier: Dd1ReAUW05DGVavzL4pLLKDbzTsbLSFOeds5/9o1Z+Q= Subject key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA50DA7F4062E32C515EACF6E776C23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16104 IP: 193.41.89.0/24 IP: 2001:67c:1684::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0d:a7:f4:06:2e:32:c5:15:ea:cf:6e:77:6c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:57:5a:e8:f6:d0:2b:3d:61:44:d1:f0:9f:b8: 57:26:f6:ce:37:ac:6a:52:3c:1c:3f:b0:f1:7e:70: 1b:cb:84:77:35:58:87:7c:c9:36:54:ba:b6:4c:7d: c3:7e:de:d3:9b:f8:7e:31:00:4f:16:1a:02:da:fe: c9:06:b4:e1:b4:a9:38:87:db:e2:f4:d8:f1:df:db: 0b:0f:13:89:b3:b9:f9:aa:bb:88:dd:a2:2d:4b:66: 75:3c:42:ab:7e:71:2b:c3:71:ae:7d:a0:45:72:33: c5:fb:b9:a2:51:81:65:55:e0:50:72:11:c6:4d:d8: 3f:14:8e:46:37:de:33:ec:36:03:1c:bf:4e:2f:cc: 0d:92:7a:d7:e8:36:95:0d:28:b1:cd:a5:f3:d6:fd: ed:26:6a:a6:e2:ce:c9:a5:4d:fc:d4:59:1e:f7:32: d4:01:7b:cc:6d:53:85:13:26:74:c0:68:1a:7f:e6: d2:31:7f:0f:8a:6f:72:3d:8e:16:14:5b:cd:54:a6: f4:07:c7:52:be:de:b6:e0:55:46:b3:b9:91:93:fe: 21:f5:f6:34:42:67:42:67:76:d0:f7:9e:81:19:68: 76:3d:6e:a4:d5:90:99:b5:97:10:4d:82:3b:6c:79: 63:92:41:6d:4b:21:34:5d:99:01:26:79:4f:16:11: 5d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.89.0/24 IPv6: 2001:67c:1684::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16104 Signature Algorithm: sha256WithRSAEncryption 88:09:1a:17:60:11:a6:9b:52:50:d0:8b:c4:ec:37:e1:59:1c: bd:96:3f:f3:c5:aa:3f:9d:b6:4c:e7:a5:6c:8b:b3:b9:0a:e1: 5b:a6:ab:5c:9e:a5:87:dc:86:9d:04:a5:ac:93:5e:3b:3f:f7: a9:9a:d8:4e:fa:2b:6e:50:11:4e:3f:05:9b:b3:f8:77:6c:6b: 63:ad:6f:e9:39:e0:39:f2:07:0a:0b:91:d4:77:de:ae:b9:fc: 82:2f:7f:fa:bc:89:63:a5:eb:16:c7:dc:7a:fe:2d:f4:90:ff: b6:bb:f6:44:f4:ea:fd:d0:ec:cf:bf:66:8f:32:47:1e:5a:59: 3e:f1:74:1a:00:b6:c3:81:13:91:ab:5d:14:62:fe:7f:73:c7: 07:79:6c:40:f3:24:cf:e4:28:f9:9d:ee:fa:7d:f6:5a:3c:39: d0:5f:ed:a0:e9:68:28:3a:31:1e:d7:4b:84:6a:55:d9:a4:c0: c0:fa:06:fa:08:52:84:39:20:26:ff:c6:f6:46:8e:47:f2:07: 58:16:fd:cd:ec:a2:73:6f:a9:11:8d:11:b5:b2:10:1b:e4:21: b9:c6:af:7c:1a:49:f7:57:de:1a:58:f2:18:ee:51:39:e7:fd: cc:c4:43:d2:b4:56:85:45:95:f9:e5:11:39:7d:02:7e:12:c3: 62:14:d1:35 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt7pQ2n9AYuMsUV6s9ud2wjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjY3NGJmOGU0NTdlMjk1N2VlZTRmNTFmOGI3YjQ0YzU3ZGI5YTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lda6PbQKz1hRNHwn7hXJvbON6xq UjwcP7DxfnAby4R3NViHfMk2VLq2TH3Dft7Tm/h+MQBPFhoC2v7JBrThtKk4h9vi 9Njx39sLDxOJs7n5qruI3aItS2Z1PEKrfnErw3GufaBFcjPF+7miUYFlVeBQchHG Tdg/FI5GN94z7DYDHL9OL8wNknrX6DaVDSixzaXz1v3tJmqm4s7JpU381Fke9zLU AXvMbVOFEyZ0wGgaf+bSMX8Pim9yPY4WFFvNVKb0B8dSvt624FVGs7mRk/4h9fY0 QmdCZ3bQ956BGWh2PW6k1ZCZtZcQTYI7bHljkkFtSyE0XZkBJnlPFhFdfQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFLZnS/jkV+KVfu5PUfi3tExX25oqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzY5MzMx Yy1hZWEyLTQyMzctODQwMC02MjIxNDAzZGI1OGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvNjkzMzFj LWFlYTItNDIzNy04NDAwLTYyMjE0MDNkYjU4Yi8xL3RtZEwtT1JYNHBWLTdrOVIt TGUwVEZmYm1pby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwSlZMA8EAgACMAkDBwAgAQZ8FoQwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICPugwDQYJKoZIhvcNAQELBQADggEBAIgJGhdgEaab UlDQi8TsN+FZHL2WP/PFqj+dtkznpWyLs7kK4Vumq1yepYfchp0EpayTXjs/96ma 2E76K25QEU4/BZuz+Hdsa2Otb+k54DnyBwoLkdR33q65/IIvf/q8iWOl6xbH3Hr+ LfSQ/7a79kT06v3Q7M+/Zo8yRx5aWT7xdBoAtsOBE5GrXRRi/n9zxwd5bEDzJM/k KPmd7vp99lo8OdBf7aDpaCg6MR7XS4RqVdmkwMD6BvoIUoQ5ICb/xvZGjkfyB1gW /c3sonNvqRGNEbWyEBvkIbnGr3waSfdX3hpY8hjuUTnn/czEQ9K0VoVFlfnlETl9 An4Sw2IU0TU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:39 2026 by rpki-client