This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer File: tpGf6MvvmrMgrH4ONGh51J0YV9Y.cer (raw, json) Hash identifier: +PLyeOUBklkYrPIq6nHuwoOAGXKDD9jsBGWi9ELDpb0= Subject key identifier: B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECF22651A3BBD894BFEFE566B3A889 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216113 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f2:26:51:a3:bb:d8:94:bf:ef:e5:66:b3:a8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6919fe8cbef9ab320ac7e0e346879d49d1857d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:09:37:19:a7:d9:49:05:5f:f5:cc:a2:ca: 18:56:2c:47:c2:e3:d5:dd:66:18:41:ce:34:ef:8e: f4:14:42:5e:2b:81:9b:8b:b8:4b:f6:94:d4:08:42: ad:c9:4d:59:67:2d:1c:23:f9:fb:d0:8b:de:93:0b: 51:46:41:ae:cd:09:b6:4e:12:65:59:54:a7:25:c2: e1:17:98:84:c9:d5:8b:da:20:f4:f4:af:f1:16:f3: db:08:c5:25:59:fe:92:72:0a:34:c1:28:61:ad:1e: 1e:cf:f8:77:be:92:4a:e3:12:7e:ed:34:b0:0a:99: 90:44:b7:35:37:1b:d6:2a:f0:c8:1d:e5:48:80:60: bc:75:11:62:bd:0a:9e:be:6b:43:2a:26:e5:b3:24: 6d:4d:a1:ce:2e:21:da:d2:f4:e4:8b:05:95:72:1c: 0f:95:7d:50:fb:68:6b:51:05:57:23:07:bc:73:e1: f2:ec:62:6a:a7:73:eb:b8:56:9d:d0:4d:d1:e8:e2: 09:a2:1d:17:01:a2:4f:83:0c:6b:9a:a7:96:ee:b2: 96:a7:69:a9:f7:fe:81:2b:31:79:1b:af:ee:ed:57: 17:22:ef:17:0a:7e:56:64:e2:e6:4f:2e:fc:0f:e5: 17:2c:13:d2:24:d9:28:87:90:ef:57:e3:d9:f6:e7: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:91:9F:E8:CB:EF:9A:B3:20:AC:7E:0E:34:68:79:D4:9D:18:57:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c6994c-a8c0-47e0-a006-b086666e2ada/1/tpGf6MvvmrMgrH4ONGh51J0YV9Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216113 Signature Algorithm: sha256WithRSAEncryption 33:1d:6c:e8:f9:64:7e:67:69:60:d5:1f:63:ad:35:f1:61:4b: 15:a1:6c:70:e0:2e:2d:60:83:6b:7a:e5:61:f0:d6:39:99:43: 9f:a3:ba:f9:fb:0d:6f:cd:f1:05:5f:e8:08:e1:29:4d:53:d8: f9:92:c2:e1:fb:4a:92:47:38:73:26:e0:94:de:b3:d0:e0:db: 64:94:ed:39:74:32:55:0a:b5:2b:4a:7c:2d:58:d5:28:f1:c0: 8c:17:58:d8:18:83:4a:67:ae:ba:3c:41:b2:b5:fa:95:22:95: 7c:4c:cb:4d:90:c4:7c:7b:59:a0:c3:a9:6a:32:c2:f6:e3:16: 07:a7:10:fb:2b:39:91:34:c1:99:f8:06:93:d2:80:6d:63:11: 6b:0a:f2:88:44:d3:8a:b4:4f:2b:1d:86:0a:d6:12:f4:33:8d: 71:01:9e:95:7c:7c:8e:43:28:4d:74:13:16:40:83:47:6c:bd: 98:c9:b8:5c:03:98:33:3e:74:de:fd:ce:5e:77:c9:fb:26:e2: d7:bf:ce:07:48:7a:05:74:a3:f4:59:9d:56:fd:31:61:02:0c: 6e:46:e2:e1:ff:f1:cb:05:3a:3c:9f:93:b6:71:21:e5:d9:d7: 0b:0f:a6:ed:5b:f1:1f:87:78:17:15:1f:ba:d1:89:ed:13:f9: a6:a8:78:69 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57PImUaO72JS/7+Vms6iJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjkxOWZlOGNiZWY5YWIzMjBhYzdlMGUzNDY4NzlkNDlkMTg1N2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOYJNxmn2UkFX/XMosoYVixHwuPV 3WYYQc407470FEJeK4Gbi7hL9pTUCEKtyU1ZZy0cI/n70IvekwtRRkGuzQm2ThJl WVSnJcLhF5iEydWL2iD09K/xFvPbCMUlWf6Scgo0wShhrR4ez/h3vpJK4xJ+7TSw CpmQRLc1NxvWKvDIHeVIgGC8dRFivQqevmtDKiblsyRtTaHOLiHa0vTkiwWVchwP lX1Q+2hrUQVXIwe8c+Hy7GJqp3PruFad0E3R6OIJoh0XAaJPgwxrmqeW7rKWp2mp 9/6BKzF5G6/u7VcXIu8XCn5WZOLmTy78D+UXLBPSJNkoh5DvV+PZ9udSbQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLaRn+jL75qzIKx+DjRoedSdGFfWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzL2M2OTk0 Yy1hOGMwLTQ3ZTAtYTAwNi1iMDg2NjY2ZTJhZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvYzY5OTRj LWE4YzAtNDdlMC1hMDA2LWIwODY2NjZlMmFkYS8xL3RwR2Y2TXZ2bXJNZ3JINE9O R2g1MUowWVY5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMMTANBgkqhkiG9w0BAQsFAAOCAQEAMx1s6Plkfmdp YNUfY6018WFLFaFscOAuLWCDa3rlYfDWOZlDn6O6+fsNb83xBV/oCOEpTVPY+ZLC 4ftKkkc4cybglN6z0ODbZJTtOXQyVQq1K0p8LVjVKPHAjBdY2BiDSmeuujxBsrX6 lSKVfEzLTZDEfHtZoMOpajLC9uMWB6cQ+ys5kTTBmfgGk9KAbWMRawryiETTirRP Kx2GCtYS9DONcQGelXx8jkMoTXQTFkCDR2y9mMm4XAOYMz503v3OXnfJ+ybi17/O B0h6BXSj9FmdVv0xYQIMbkbi4f/xywU6PJ+TtnEh5dnXCw+m7VvxH4d4FxUfutGJ 7RP5pqh4aQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:46 2026 by rpki-client