This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer (raw, json) Hash identifier: 17TrEjsGZHTwd/HnVtBgIi7ZJanv9y/crFG15v6h4iw= Subject key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2B9DBB516C6D851E99F7778CB5960 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 159.255.149.0/24 IP: 2a13:7a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:b9:db:b5:16:c6:d8:51:e9:9f:77:78:cb:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:a2:ff:f8:34:1b:4a:41:db:96:00:f7:38: f1:29:d2:c3:34:55:a5:8b:4c:1e:f8:60:1f:cd:b3: f7:19:3d:bf:e3:8f:9f:f8:0f:c5:99:55:ab:8f:95: 46:a1:f6:94:9b:5f:90:a7:a9:0e:4f:a9:9e:59:a4: ac:4c:dc:7b:6a:05:5a:c3:e0:17:92:0a:ad:2b:c4: c9:23:9e:da:7a:48:07:42:eb:20:92:54:cb:de:63: 4f:a8:66:59:f0:d5:9f:16:5c:9b:95:2e:eb:54:29: 7e:78:54:6b:9b:01:e0:89:6e:da:5d:2a:e3:ec:19: 73:c6:4d:43:ab:6b:e4:0f:cd:30:09:21:e1:34:b4: 71:51:d3:cb:84:a1:73:93:82:c0:53:82:ae:1a:b6: 4c:89:7b:c6:1c:41:77:19:39:eb:b8:5b:3c:9e:43: b0:6a:94:5b:5a:fe:f6:77:c1:19:04:aa:98:d4:67: 39:12:a8:30:f3:56:2c:d3:c3:97:d2:0b:94:99:48: b1:d4:dd:61:c4:17:3e:8e:b1:da:92:a1:eb:e1:7c: 33:e0:45:7f:4c:e2:66:b3:23:d3:fb:0f:b6:16:20: 22:41:d8:97:98:68:f9:7a:15:04:e5:e7:75:53:5b: 52:ea:e0:ec:c5:5b:ea:18:09:65:38:06:92:b7:97: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.149.0/24 IPv6: 2a13:7a00::/29 Signature Algorithm: sha256WithRSAEncryption 2d:a8:3d:cc:78:14:d5:e6:86:83:45:65:e6:0f:df:45:88:0b: ed:96:a7:cd:90:d0:a9:74:40:73:5e:94:8d:8c:56:5d:0c:f4: b1:66:f4:b1:0e:8d:40:7e:8d:72:1c:b1:13:14:fa:f9:c8:8e: f3:bc:8d:41:e7:c9:f5:a7:10:5c:45:ce:54:89:f6:32:f1:e4: 3a:06:c7:b8:0f:4b:25:41:df:6b:b6:8f:4e:6e:df:bc:c8:7b: ed:e2:28:5a:6f:de:30:e1:32:fc:18:2a:51:2e:ff:cb:24:11: ae:d3:d7:8e:68:2c:36:97:39:49:44:61:95:7e:58:67:b2:70: d3:7c:85:88:23:8b:d2:e4:2e:28:66:0d:54:09:39:db:e4:8a: 93:c1:3a:36:fd:00:89:b4:b3:ca:41:69:9e:fa:42:8c:61:c0: 28:b8:e6:07:ba:f5:f1:74:29:92:69:a4:92:16:9b:c7:2f:35: 3d:f1:0e:fc:a8:82:8a:6e:5f:ae:1a:64:9b:df:14:45:16:c0: 1d:6b:70:04:af:44:b9:19:c1:e2:93:37:3d:c4:b6:c9:96:03: b6:77:d3:3f:ad:d1:ae:4a:db:f0:b8:10:0a:4c:8c:63:86:0a: 11:21:83:3e:12:ef:57:e5:0a:1e:eb:ba:83:6b:53:e2:1e:24: 43:be:61:9c -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/8rnbtRbG2FHpn3d4y1lgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjcwNzE5N2U4MzY3NjBjNTkyZTFlZjExZjFiNGNiZTViZmQ0ZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU6i//g0G0pB25YA9zjxKdLDNFWl i0we+GAfzbP3GT2/44+f+A/FmVWrj5VGofaUm1+Qp6kOT6meWaSsTNx7agVaw+AX kgqtK8TJI57aekgHQusgklTL3mNPqGZZ8NWfFlyblS7rVCl+eFRrmwHgiW7aXSrj 7Blzxk1Dq2vkD80wCSHhNLRxUdPLhKFzk4LAU4KuGrZMiXvGHEF3GTnruFs8nkOw apRbWv72d8EZBKqY1Gc5Eqgw81Ys08OX0guUmUix1N1hxBc+jrHakqHr4Xwz4EV/ TOJmsyPT+w+2FiAiQdiXmGj5ehUE5ed1U1tS6uDsxVvqGAllOAaSt5e1iwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLZwcZfoNnYMWS4e8R8bTL5b/U0uMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzgwYWM3 OC1iYmUxLTQxMjQtYjg3OC02NjY3ZmE1MWM0NjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvODBhYzc4 LWJiZTEtNDEyNC1iODc4LTY2NjdmYTUxYzQ2MC8xL3RuQnhsLWcyZGd4WkxoN3hI eHRNdmx2OVRTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAn/+VMA0EAgACMAcDBQMqE3oAMA0GCSqGSIb3 DQEBCwUAA4IBAQAtqD3MeBTV5oaDRWXmD99FiAvtlqfNkNCpdEBzXpSNjFZdDPSx ZvSxDo1Afo1yHLETFPr5yI7zvI1B58n1pxBcRc5UifYy8eQ6Bse4D0slQd9rto9O bt+8yHvt4ihab94w4TL8GCpRLv/LJBGu09eOaCw2lzlJRGGVflhnsnDTfIWII4vS 5C4oZg1UCTnb5IqTwTo2/QCJtLPKQWme+kKMYcAouOYHuvXxdCmSaaSSFpvHLzU9 8Q78qIKKbl+uGmSb3xRFFsAda3AEr0S5GcHikzc9xLbJlgO2d9M/rdGuStvwuBAK TIxjhgoRIYM+Eu9X5Qoe67qDa1PiHiRDvmGc -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:56 2026 by rpki-client