This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer File: tpLtL-_9BExt1_INcJUmSEAKd0Q.cer (raw, json) Hash identifier: j52YgSNoLzQNelKur4SZT4PNF9rCzz/uepEO3sA8P+M= Subject key identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835584D90B6410C7BCA2F43BF1DE140 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/ Notify URL: https://rpki.as207960.net/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208051 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:58:4d:90:b6:41:0c:7b:ca:2f:43:bf:1d:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b692ed2feffd044c6dd7f20d70952648400a7744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:31:dc:57:12:4c:b4:6f:13:91:2e:5e:6c: 04:3e:79:08:17:fb:89:03:b3:4f:0a:99:fd:1e:16: e3:a8:f0:ad:63:23:9d:e3:3b:d0:df:4b:bd:db:ad: 7e:f3:dd:3f:32:7b:1f:0a:c4:28:11:30:66:82:f7: 05:c6:0e:08:c4:29:1c:b9:99:c7:2f:e9:68:72:e3: f7:d9:9f:ff:9b:2e:dc:9f:01:d8:ba:04:32:12:34: 19:0e:5a:04:36:8c:75:d5:49:8d:94:08:d8:e8:d8: f3:05:9f:da:a8:1e:19:68:47:b7:92:8e:0c:4a:4a: 29:4c:a7:a7:41:56:d1:dc:b9:d8:b3:2d:e4:72:b9: 12:79:25:80:53:85:d9:74:ae:0c:44:df:e9:ac:7b: 3f:ab:e0:f8:bf:3c:c5:21:2d:c9:2e:ec:54:ae:99: bb:e2:fa:8e:1f:44:49:d4:20:7d:ff:3f:c9:08:d0: b5:43:2e:25:0a:0a:32:c3:92:37:c2:b8:9c:cb:54: 4e:a8:1b:39:00:6c:ad:ba:b1:5a:a6:2c:8c:e2:f8: 73:92:bf:37:e6:5a:f4:4f:38:90:d3:0d:6f:6d:1b: 28:f5:fe:ee:d1:75:10:81:9d:f1:7f:13:4b:d1:c6: 2b:25:2b:b0:83:08:f6:ad:71:16:42:70:f1:43:c1: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/ RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208051 Signature Algorithm: sha256WithRSAEncryption 84:7e:ef:41:6a:9a:92:6a:43:00:7b:dd:57:ef:7a:63:29:00: d5:0a:75:a8:08:8b:42:41:db:e1:e2:72:41:69:4b:a2:7f:b8: af:c7:c3:0b:66:95:0e:89:84:f4:2b:17:aa:72:2d:86:3b:f8: 88:2f:91:3f:4f:65:57:92:b3:43:9b:31:df:ca:53:fb:a5:c4: 06:d6:a2:8f:cd:fc:7f:d6:f2:69:07:2f:86:9c:7f:95:58:46: f8:b4:f1:b6:e8:f0:e8:ec:b1:08:08:76:92:43:d2:4b:f4:b7: f0:20:10:5f:77:24:c9:4f:ea:55:81:f6:0d:bf:64:66:68:99: d9:be:d3:8f:96:b6:d5:17:c4:76:ac:55:6b:d6:b7:aa:df:78: 6b:be:1c:e7:6e:89:62:24:89:41:ee:cd:82:d4:de:e8:51:92: 8c:98:63:2f:72:23:f2:8f:2b:ce:c8:b0:68:c2:ff:ca:32:a2: 7c:a9:b7:21:43:3d:df:77:9c:27:74:bb:93:8a:65:9a:95:63: d8:02:87:8a:49:b6:ab:a6:65:d5:98:31:6c:66:7b:cb:6c:c2: d9:c9:07:bf:31:d6:77:d8:9f:f2:b2:0b:cf:c2:1e:c2:ec:cf: 18:36:09:e6:30:46:49:e4:ff:eb:3d:c1:55:0d:e3:e9:ab:e5: 88:11:87:e8 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt4NVhNkLZBDHvKL0O/HeFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjkyZWQyZmVmZmQwNDRjNmRkN2YyMGQ3MDk1MjY0ODQwMGE3NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLAx3FcSTLRvE5EuXmwEPnkIF/uJ A7NPCpn9HhbjqPCtYyOd4zvQ30u9261+890/MnsfCsQoETBmgvcFxg4IxCkcuZnH L+locuP32Z//my7cnwHYugQyEjQZDloENox11UmNlAjY6NjzBZ/aqB4ZaEe3ko4M SkopTKenQVbR3LnYsy3kcrkSeSWAU4XZdK4MRN/prHs/q+D4vzzFIS3JLuxUrpm7 4vqOH0RJ1CB9/z/JCNC1Qy4lCgoyw5I3wricy1ROqBs5AGyturFapiyM4vhzkr83 5lr0TziQ0w1vbRso9f7u0XUQgZ3xfxNL0cYrJSuwgwj2rXEWQnDxQ8Hj0QIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFLaS7S/v/QRMbdfyDXCVJkhACndEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE2BggrBgEFBQcBCwSCASgwggEkMFsGCCsGAQUFBzAFhk9y c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzEvMIGHBggrBgEFBQcwCoZ7cnN5 bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV81YzU1MjJi YTY5ZmU0N2QyYjYzYzdiNjUzMWEyNDRmOC8xL0I2OTJFRDJGRUZGRDA0NEM2REQ3 RjIwRDcwOTUyNjQ4NDAwQTc3NDQubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jw a2kuYXMyMDc5NjAubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLLMwDQYJKoZIhvcN AQELBQADggEBAIR+70FqmpJqQwB73VfvemMpANUKdagIi0JB2+HickFpS6J/uK/H wwtmlQ6JhPQrF6pyLYY7+IgvkT9PZVeSs0ObMd/KU/ulxAbWoo/N/H/W8mkHL4ac f5VYRvi08bbo8OjssQgIdpJD0kv0t/AgEF93JMlP6lWB9g2/ZGZomdm+04+WttUX xHasVWvWt6rfeGu+HOduiWIkiUHuzYLU3uhRkoyYYy9yI/KPK87IsGjC/8oyonyp tyFDPd93nCd0u5OKZZqVY9gCh4pJtqumZdWYMWxme8tswtnJB78x1nfYn/KyC8/C HsLszxg2CeYwRknk/+s9wVUN4+mr5YgRh+g= -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:49 2026 by rpki-client