This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer File: tmlTqin4JZqgLBImpGzgnt1Fzp0.cer (raw, json) Hash identifier: vxst7sTYvwlBb9ZjhQDA2EqFrzlu1DAmpP66yyvdqd4= Subject key identifier: B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6C7AC11F6CAB966875A6D1A4F6D29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29223 IP: 195.85.243.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c7:ac:11:f6:ca:b9:66:87:5a:6d:1a:4f:6d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:4e:73:32:b8:83:8a:c5:e3:cb:0c:e3:21: b9:72:fd:5a:6f:33:f8:99:11:c9:34:38:96:39:23: 11:45:24:cb:57:62:2b:73:60:8e:63:a2:09:90:12: 71:35:d1:e8:0a:2d:01:07:4c:f6:f7:62:62:57:1b: db:a2:b4:76:c5:69:47:a6:ae:34:6b:f5:a8:8c:c6: fb:1c:56:17:dd:10:38:df:99:32:0b:6a:f2:cf:e4: d9:ef:1e:63:8b:10:4c:6f:22:c7:1a:5d:50:30:96: b8:39:e5:35:13:f2:d6:f4:fc:fb:2f:1b:47:fa:f9: 62:ff:39:42:e9:22:7e:ff:7c:eb:a2:7c:8a:1b:a7: 85:02:6f:9e:a0:5e:29:41:83:9a:1d:5c:82:b6:fd: ce:07:98:b8:6f:cb:ef:83:bd:5b:62:3a:ae:cf:95: e7:64:59:2e:b0:35:a5:60:31:85:04:1e:7b:12:13: da:69:b9:a0:e9:1c:50:14:2a:11:53:80:dd:4e:ba: c9:80:08:2e:95:3e:2d:1f:5c:e0:c3:00:c3:41:3e: f5:c3:df:0d:1e:83:ae:58:72:aa:67:fe:da:f3:10: 8c:5a:af:67:d1:f8:d3:26:71:f8:56:a7:f2:03:ca: 65:66:86:df:3a:8a:58:54:a9:57:cf:50:a5:7a:e9: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.85.243.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29223 Signature Algorithm: sha256WithRSAEncryption 2b:e5:59:70:d1:6f:42:f6:6f:73:bc:be:d7:e6:df:49:d9:34: 14:7f:b5:74:e0:d0:6a:56:d7:47:9b:eb:eb:e0:b0:b7:50:85: 33:73:ee:e7:36:d1:02:87:19:a4:6a:cd:b2:82:f9:1e:47:53: 90:f8:40:c5:6f:e6:63:ab:c2:45:3e:d0:3c:2e:95:85:31:c5: f0:c6:ac:f4:5b:46:35:d7:41:27:da:0e:cf:89:8a:0f:d5:13: 0d:cb:d9:ea:6f:57:3c:6d:07:27:86:e1:84:85:2f:b3:e1:56: cc:d0:c4:ee:f5:7a:8d:05:c4:7a:1c:e2:68:9a:4f:ee:92:20: d1:a0:5f:1d:35:11:11:f1:b5:e5:a6:d4:08:20:61:b8:ce:76: 56:df:1b:30:2c:45:60:3d:a0:f4:6e:74:bc:d0:b0:63:31:56: 3c:d1:ba:05:da:bf:7f:4c:0c:21:80:c1:60:77:11:4f:91:4a: 24:1e:b1:60:71:12:28:dc:2d:20:e8:1f:27:0e:4c:30:19:2d: a9:a7:dc:ab:9b:bc:bb:1d:8a:44:fd:15:16:ba:a2:09:68:f5: 59:3a:e4:e0:39:da:75:3c:d4:d1:91:f1:93:04:8d:de:65:40: 31:e8:da:70:3f:f7:e7:65:3a:ce:f9:e7:20:00:4d:2d:61:c1: ee:43:b5:3a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3xsesEfbKuWaHWm0aT20pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjY5NTNhYTI5ZjgyNTlhYTAyYzEyMjZhNDZjZTA5ZWRkNDVjZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2lOczK4g4rF48sM4yG5cv1abzP4 mRHJNDiWOSMRRSTLV2Irc2COY6IJkBJxNdHoCi0BB0z292JiVxvborR2xWlHpq40 a/WojMb7HFYX3RA435kyC2ryz+TZ7x5jixBMbyLHGl1QMJa4OeU1E/LW9Pz7LxtH +vli/zlC6SJ+/3zronyKG6eFAm+eoF4pQYOaHVyCtv3OB5i4b8vvg71bYjquz5Xn ZFkusDWlYDGFBB57EhPaabmg6RxQFCoRU4DdTrrJgAgulT4tH1zgwwDDQT71w98N HoOuWHKqZ/7a8xCMWq9n0fjTJnH4VqfyA8plZobfOopYVKlXz1Cleun7IwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLZpU6op+CWaoCwSJqRs4J7dRc6dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzI1OTQx OC01ZTc0LTRkZjAtODJhMC1mOWU3NTMwODc1NGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvMjU5NDE4 LTVlNzQtNGRmMC04MmEwLWY5ZTc1MzA4NzU0Zi8xL3RtbFRxaW40SlpxZ0xCSW1w R3pnbnQxRnpwMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw1XzMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnInMA0GCSqGSIb3DQEBCwUAA4IBAQAr5Vlw0W9C9m9zvL7X5t9J2TQUf7V04NBq VtdHm+vr4LC3UIUzc+7nNtEChxmkas2ygvkeR1OQ+EDFb+Zjq8JFPtA8LpWFMcXw xqz0W0Y110En2g7PiYoP1RMNy9nqb1c8bQcnhuGEhS+z4VbM0MTu9XqNBcR6HOJo mk/ukiDRoF8dNRER8bXlptQIIGG4znZW3xswLEVgPaD0bnS80LBjMVY80boF2r9/ TAwhgMFgdxFPkUokHrFgcRIo3C0g6B8nDkwwGS2pp9yrm7y7HYpE/RUWuqIJaPVZ OuTgOdp1PNTRkfGTBI3eZUAx6NpwP/fnZTrO+ecgAE0tYcHuQ7U6 -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:19 2026 by rpki-client