This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer (raw, json) Hash identifier: 2hQ8ax5uevy3QjKeIk+xPryikVXucuDtxiV0I6GspTs= Subject key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8AC0B1C90FA086F3F046AAF92BDCD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 38926 IP: 5.44.160.0/21 IP: 185.105.68.0/22 IP: 193.169.64.0/23 IP: 195.114.114.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ac:0b:1c:90:fa:08:6f:3f:04:6a:af:92:bd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:2e:af:ed:2a:61:88:db:61:3e:6d:d3:4a: 98:16:03:20:bb:42:54:06:b8:c1:95:3a:97:52:9b: d2:66:0b:27:89:c7:4c:68:1e:de:02:6d:0c:1a:44: 1b:0a:79:b0:03:0c:99:46:75:62:72:d0:5e:8a:7b: 61:fb:87:bb:bf:12:6c:61:ec:29:20:67:0e:cf:b8: 06:e2:8e:76:da:e8:c0:95:aa:79:7a:60:e4:fd:39: b0:15:b1:03:bf:ce:a0:3b:60:16:e2:39:f1:05:f8: 58:12:82:65:31:37:29:ae:c4:06:b3:81:0d:13:17: 9d:03:ec:17:3e:39:fc:7b:50:b6:3b:94:92:ab:e2: f7:00:e7:aa:e1:50:62:c6:3a:4d:57:ac:75:66:8a: df:ea:77:18:93:ae:50:58:56:84:0a:60:f7:79:82: 27:47:8c:cf:5b:06:ae:59:16:f6:31:d1:01:43:a6: 87:e3:8b:bb:1b:e5:f3:88:52:09:08:61:da:99:9e: b5:37:d1:94:84:bd:db:39:b3:90:f4:6f:05:08:49: 7a:48:4f:83:86:0e:3a:dd:3a:32:de:a5:00:80:bd: 90:9e:8b:14:96:7a:a1:bb:ad:ce:cb:47:8b:59:23: 4d:6e:a8:c5:da:f4:04:5b:a3:28:59:e7:1f:15:54: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.160.0/21 185.105.68.0/22 193.169.64.0/23 195.114.114.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38926 Signature Algorithm: sha256WithRSAEncryption 75:ba:18:09:8a:76:fe:32:a8:7a:27:42:69:de:9b:b6:ee:9f: 78:69:be:ed:03:b0:46:5c:3d:bd:10:4b:e6:89:11:b6:93:c8: 21:7e:da:39:c0:bc:10:18:65:4a:95:64:94:e5:27:3e:49:07: c8:62:c1:f0:a0:8a:a2:33:5e:84:9a:1e:f3:80:4a:a1:9a:eb: 85:47:d5:7f:59:8e:d1:bf:46:73:34:cf:ef:81:38:95:7b:62: 7a:4b:49:45:cb:28:5c:94:22:46:13:46:fc:88:2d:cb:38:ac: ab:f1:00:6b:b3:0f:30:6e:c6:85:06:e8:90:95:d0:48:d4:68: b7:c0:4d:a5:50:cb:ce:ef:05:18:3a:39:f3:28:6d:27:73:b8: b3:81:f4:d8:b5:72:20:c3:4a:6a:b4:cd:56:c4:42:dd:fe:34: df:f4:f4:ac:86:79:df:05:8c:1f:3b:f9:aa:38:cb:e0:59:27: 46:3c:1f:82:77:69:0d:c6:07:58:89:e6:00:02:93:7e:5a:0e: be:aa:0c:1b:2a:8c:c7:23:f8:90:02:96:6c:de:96:4a:4d:c4: 5a:f7:cc:43:91:18:27:06:39:be:45:99:7d:30:5c:3d:87:5a: 0b:e0:05:83:77:0a:de:bb:ba:4b:5d:f7:e1:a7:ae:00:65:bf: 2d:24:25:68 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt6yKwLHJD6CG8/BGqvkr3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjljYjcwOTkzNGI5OWY2ODlkZDFlOTlkNzJjMWIwMDBmZDg3MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUkur+0qYYjbYT5t00qYFgMgu0JU BrjBlTqXUpvSZgsnicdMaB7eAm0MGkQbCnmwAwyZRnVictBeinth+4e7vxJsYewp IGcOz7gG4o522ujAlap5emDk/TmwFbEDv86gO2AW4jnxBfhYEoJlMTcprsQGs4EN ExedA+wXPjn8e1C2O5SSq+L3AOeq4VBixjpNV6x1Zorf6ncYk65QWFaECmD3eYIn R4zPWwauWRb2MdEBQ6aH44u7G+XziFIJCGHamZ61N9GUhL3bObOQ9G8FCEl6SE+D hg463Toy3qUAgL2QnosUlnqhu63Oy0eLWSNNbqjF2vQEW6MoWecfFVSHMQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFLactwmTS5n2id0emdcsGwAP2HLFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzQxZTI4 Ny01MGI0LTQ2ZWYtODJjYy1jYTNiNzI3OGRkZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNDFlMjg3 LTUwYjQtNDZlZi04MmNjLWNhM2I3Mjc4ZGRlMi8xL3RweTNDWk5MbWZhSjNSNlox eXdiQUFfWWNzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQDBSygAwQCuWlEAwQBwalAAwQBw3JyMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwCYDjANBgkqhkiG9w0BAQsFAAOCAQEAdboYCYp2 /jKoeidCad6btu6feGm+7QOwRlw9vRBL5okRtpPIIX7aOcC8EBhlSpVklOUnPkkH yGLB8KCKojNehJoe84BKoZrrhUfVf1mO0b9GczTP74E4lXtiektJRcsoXJQiRhNG /Igtyzisq/EAa7MPMG7GhQbokJXQSNRot8BNpVDLzu8FGDo58yhtJ3O4s4H02LVy IMNKarTNVsRC3f403/T0rIZ53wWMHzv5qjjL4FknRjwfgndpDcYHWInmAAKTfloO vqoMGyqMxyP4kAKWbN6WSk3EWvfMQ5EYJwY5vkWZfTBcPYdaC+AFg3cK3ru6S133 4aeuAGW/LSQlaA== -----END CERTIFICATE-----Generated at Wed Jan 21 22:42:41 2026 by rpki-client