This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer File: tokpm8SVhKZFlAwd2H3wr8iqoP0.cer (raw, json) Hash identifier: vA2v/j5xty8VpBYQReWmPrkmDJF866PRhDTAmWRuXVU= Subject key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910AA1F3F767F4290D5949AF6EE8C46 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202149 AS: 212465 AS: 212475 IP: 185.28.92.0/22 IP: 193.57.148.0/22 IP: 2a00:9d60::/32 IP: 2a0c:93c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:aa:1f:3f:76:7f:42:90:d5:94:9a:f6:ee:8c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a4:f2:17:d4:b3:4d:5f:6c:cf:f9:f3:8e:39: 50:ef:6e:c8:f7:56:cb:77:93:c6:e5:99:eb:e9:95: 17:90:3a:9b:4b:01:78:9a:9b:5e:36:8a:65:52:3e: e7:bd:42:ab:cc:27:87:02:6d:5c:3b:92:64:94:84: 23:d8:ba:ad:41:16:e5:f3:28:6e:c5:b0:2f:d9:61: 1f:5f:fe:73:9b:eb:2f:3b:92:14:52:9e:fc:c7:21: 31:c4:39:d5:c0:6b:f1:dd:de:af:7c:23:bf:3b:06: 37:82:5d:47:6a:ba:c3:f4:87:54:bd:26:c0:c7:41: c2:f5:ea:18:1a:16:bc:30:4d:6c:86:a2:db:fb:98: 9e:71:ae:e9:ef:b1:7d:c1:67:2a:47:43:2a:d1:8c: 02:59:58:8c:20:95:68:9e:3f:e2:6f:d5:62:f9:f0: 25:29:1d:5c:bb:8d:d2:0a:e1:45:e6:9d:de:8a:e5: f0:42:80:c6:7e:4f:44:27:e9:d1:98:f6:57:42:27: 27:06:b0:82:ab:0f:7d:7f:5a:9b:77:c7:88:a1:c5: 64:56:e2:7d:cb:9b:b3:8d:fc:a5:b8:c7:bc:e8:29: 2b:6d:82:0c:8e:e8:7b:e1:01:e7:8c:c9:01:bf:eb: 7e:a2:b4:ff:26:07:09:dd:4e:b4:4c:6f:c3:37:7d: 4e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.92.0/22 193.57.148.0/22 IPv6: 2a00:9d60::/32 2a0c:93c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202149 212465 212475 Signature Algorithm: sha256WithRSAEncryption 6e:89:9e:d9:a8:98:11:74:ec:92:72:d5:25:cc:64:09:3c:8c: c8:83:60:88:4d:e0:27:72:bc:20:cd:18:22:9f:83:5e:85:d3: ab:e0:b4:b1:fc:b6:ca:dc:53:9a:8a:f2:fb:49:62:68:0b:4f: 72:36:9c:4c:13:fd:6b:eb:55:fd:82:bb:6d:37:23:ad:d1:de: 9e:73:d8:af:ef:72:25:76:78:04:b8:2b:6f:3a:c0:df:54:2d: 12:bd:17:f4:92:49:3f:83:7c:bd:b7:90:96:7e:25:13:e9:28: 17:51:db:09:9f:43:10:63:7d:04:4b:ae:96:38:5f:68:68:e7: a8:ff:7f:a0:91:c6:70:ea:65:aa:40:c9:0e:85:7a:e7:89:fd: 04:45:be:20:48:f2:f6:7d:02:17:ca:5c:04:86:6d:43:e8:6f: fa:8f:66:03:14:b5:02:6a:42:cf:59:c6:7e:84:8e:ea:49:89: 8a:4f:11:a9:8c:8a:4b:c0:68:b1:37:4d:68:1c:ba:10:15:0f: 3b:37:7e:52:44:fd:54:a8:5c:c8:ac:f8:9c:bb:9b:64:b6:98: db:6c:26:38:48:20:82:c9:35:d8:d8:f9:99:22:d2:ae:4f:60: 6e:de:1c:de:81:2f:22:cb:31:08:23:c6:81:d2:41:e1:79:a8: 1c:e7:f6:46 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt5EKofP3Z/QpDVlJr27oxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjg5Mjk5YmM0OTU4NGE2NDU5NDBjMWRkODdkZjBhZmM4YWFhMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qTyF9SzTV9sz/nzjjlQ727I91bL d5PG5Znr6ZUXkDqbSwF4mpteNoplUj7nvUKrzCeHAm1cO5JklIQj2LqtQRbl8yhu xbAv2WEfX/5zm+svO5IUUp78xyExxDnVwGvx3d6vfCO/OwY3gl1HarrD9IdUvSbA x0HC9eoYGha8ME1shqLb+5ieca7p77F9wWcqR0Mq0YwCWViMIJVonj/ib9Vi+fAl KR1cu43SCuFF5p3eiuXwQoDGfk9EJ+nRmPZXQicnBrCCqw99f1qbd8eIocVkVuJ9 y5uzjfyluMe86CkrbYIMjuh74QHnjMkBv+t+orT/JgcJ3U60TG/DN31OtQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFLaJKZvElYSmRZQMHdh98K/IqqD9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzdjYTYx YS1jZTNkLTRiYWMtOTExMC1jMGYzYmFkOTlhNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvN2NhNjFh LWNlM2QtNGJhYy05MTEwLWMwZjNiYWQ5OWE0MC8xL3Rva3BtOFNWaEtaRmxBd2Qy SDN3cjhpcW9QMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuRxcAwQCwTmUMBQEAgACMA4DBQAqAJ1gAwUD KgyTwDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMDFaUCAwM98QIDAz37MA0GCSqG SIb3DQEBCwUAA4IBAQBuiZ7ZqJgRdOySctUlzGQJPIzIg2CITeAncrwgzRgin4Ne hdOr4LSx/LbK3FOaivL7SWJoC09yNpxME/1r61X9grttNyOt0d6ec9iv73IldngE uCtvOsDfVC0SvRf0kkk/g3y9t5CWfiUT6SgXUdsJn0MQY30ES66WOF9oaOeo/3+g kcZw6mWqQMkOhXrnif0ERb4gSPL2fQIXylwEhm1D6G/6j2YDFLUCakLPWcZ+hI7q SYmKTxGpjIpLwGixN01oHLoQFQ87N35SRP1UqFzIrPicu5tktpjbbCY4SCCCyTXY 2PmZItKuT2Bu3hzegS8iyzEII8aB0kHheagc5/ZG -----END CERTIFICATE-----Generated at Sat Jan 10 01:53:14 2026 by rpki-client