This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer File: tpqu8c6hny-Sb1cJYVRc_k7WmvY.cer (raw, json) Hash identifier: D6aih7a9uc9BysdT3mQO61O8hqgU06qDSE4t8sA9ecM= Subject key identifier: B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F1AD11E6A296615A21F9246E0132D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212328 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1a:d1:1e:6a:29:66:15:a2:1f:92:46:e0:13:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b69aaef1cea19f2f926f570961545cfe4ed69af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e7:dd:15:63:ab:55:13:46:5b:2b:c4:6e:4d: e9:23:6c:86:4f:48:fc:13:a1:e5:a9:d4:32:3a:08: 20:d9:72:a9:48:3f:b0:f7:50:17:40:14:8b:c7:8f: 18:a3:ef:57:2d:ea:2b:18:a9:04:22:c5:cb:60:08: 07:71:1f:d7:6c:ad:79:4e:0d:29:02:67:81:da:35: bc:01:c6:97:d9:f7:dc:7d:a4:60:66:0b:ff:de:fd: 81:18:ea:5e:af:f8:44:1b:e1:d3:4a:91:64:a4:5e: 6e:fe:d0:8f:8a:c6:50:9b:53:d9:31:93:bd:c2:a9: cd:8b:ed:7b:a8:c8:9d:07:6c:60:ef:b6:43:4a:a0: b4:07:30:f1:1e:20:0a:3b:de:19:91:1b:e5:85:de: 0f:68:3e:9d:a2:49:4c:b8:00:85:d4:2b:da:2e:95: bc:63:2e:71:76:70:1e:fc:9a:76:97:36:bc:cf:d2: bd:e1:bd:2a:7c:ab:ca:89:bb:3b:df:db:b8:08:b7: f3:6b:5f:5f:9d:b7:c4:5b:ea:74:d7:9e:8a:89:a4: 28:79:84:a9:18:f2:53:db:8e:9d:6c:be:8b:5f:4c: f6:7d:a6:4b:fe:04:56:cb:9f:13:46:57:dd:62:9a: c8:4b:30:94:0d:d7:74:b4:e5:13:61:0a:74:8e:12: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:AE:F1:CE:A1:9F:2F:92:6F:57:09:61:54:5C:FE:4E:D6:9A:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f01712-72bb-4088-8b61-7fe20f2efed4/1/tpqu8c6hny-Sb1cJYVRc_k7WmvY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212328 Signature Algorithm: sha256WithRSAEncryption 7f:87:d5:20:d2:bf:a8:88:14:b6:1f:12:49:f8:d1:c6:f7:8b: 35:4b:05:28:a9:db:7e:94:65:73:42:bc:be:51:4c:a4:fa:2e: f5:5a:da:da:76:5b:8a:28:78:51:da:08:bc:c6:75:8b:5b:cd: f1:9d:ed:28:9b:2c:d5:48:10:53:bf:1b:19:38:5a:a8:25:45: 82:7e:54:a3:68:ee:8a:3a:be:6a:7f:34:ad:2e:8e:59:1c:0d: 65:53:5c:73:d3:50:6e:28:79:69:9f:37:13:11:d8:d3:43:1f: 53:64:74:ac:1c:50:3d:d1:2a:32:3a:96:2a:aa:88:52:19:cd: 98:79:26:b7:1a:4f:91:05:53:14:8c:a1:b4:1b:48:19:bb:4b: cf:e1:9c:9d:d9:d4:3a:76:54:e1:74:26:54:f5:b9:6c:b4:2b: 37:cf:fe:f1:d4:2b:c2:ed:31:e0:96:6e:1d:5a:16:d3:09:dc: 00:2a:cd:a9:50:22:a0:db:7b:e8:15:a4:28:f1:e1:cd:67:16: f2:96:f0:b8:b1:de:5a:5b:7b:0f:a8:2f:21:67:29:c1:24:58: f3:44:03:af:ad:9a:0a:d5:5c:43:f1:9c:60:9e:a1:23:81:7c: 1e:7b:5f:25:d8:5a:64:f0:9c:da:07:94:7b:e6:9c:84:18:1b: 25:2b:be:50 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fxrRHmopZhWiH5JG4BMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjlhYWVmMWNlYTE5ZjJmOTI2ZjU3MDk2MTU0NWNmZTRlZDY5YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ufdFWOrVRNGWyvEbk3pI2yGT0j8 E6HlqdQyOggg2XKpSD+w91AXQBSLx48Yo+9XLeorGKkEIsXLYAgHcR/XbK15Tg0p AmeB2jW8AcaX2ffcfaRgZgv/3v2BGOper/hEG+HTSpFkpF5u/tCPisZQm1PZMZO9 wqnNi+17qMidB2xg77ZDSqC0BzDxHiAKO94ZkRvlhd4PaD6doklMuACF1CvaLpW8 Yy5xdnAe/Jp2lza8z9K94b0qfKvKibs739u4CLfza19fnbfEW+p0156KiaQoeYSp GPJT246dbL6LX0z2faZL/gRWy58TRlfdYprISzCUDdd0tOUTYQp0jhIMZQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLaarvHOoZ8vkm9XCWFUXP5O1pr2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2YwMTcx Mi03MmJiLTQwODgtOGI2MS03ZmUyMGYyZWZlZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvZjAxNzEy LTcyYmItNDA4OC04YjYxLTdmZTIwZjJlZmVkNC8xL3RwcXU4YzZobnktU2IxY0pZ VlJjX2s3V212WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM9aDANBgkqhkiG9w0BAQsFAAOCAQEAf4fVINK/qIgU th8SSfjRxveLNUsFKKnbfpRlc0K8vlFMpPou9Vra2nZbiih4UdoIvMZ1i1vN8Z3t KJss1UgQU78bGThaqCVFgn5Uo2juijq+an80rS6OWRwNZVNcc9NQbih5aZ83ExHY 00MfU2R0rBxQPdEqMjqWKqqIUhnNmHkmtxpPkQVTFIyhtBtIGbtLz+GcndnUOnZU 4XQmVPW5bLQrN8/+8dQrwu0x4JZuHVoW0wncACrNqVAioNt76BWkKPHhzWcW8pbw uLHeWlt7D6gvIWcpwSRY80QDr62aCtVcQ/GcYJ6hI4F8HntfJdhaZPCc2geUe+ac hBgbJSu+UA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:07 2026 by rpki-client