This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer File: trIzPwZlc_UxbgdaAc4kkLWMauE.cer (raw, json) Hash identifier: Y/bMWuVLzDK7loiLuVKllLbO7/4qj9wYYB8mWtawjEA= Subject key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAEC0971FCA230A2029398C3CAF10B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202734 IP: 2001:678:1184::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ec:09:71:fc:a2:30:a2:02:93:98:c3:ca:f1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:9a:bc:12:b4:e2:4c:bc:2c:af:6a:1c:8a: cd:4a:4f:3c:9a:65:1f:c4:37:fe:5e:7d:06:04:21: 0f:79:85:a3:11:c9:8b:5e:93:86:69:d1:05:fb:bb: 90:94:74:54:9e:39:96:80:d3:e8:9a:a9:e5:c0:1d: 6e:a0:8d:7c:bb:68:af:9f:71:78:24:1a:c6:b1:91: a2:d1:a2:c4:cd:67:16:fc:0e:ee:b1:f9:3a:c7:d2: f1:fb:20:ea:45:e5:c6:65:79:71:7d:1f:9f:31:63: c8:d8:fd:01:36:f2:6d:bb:fa:37:b0:e7:03:6f:b7: a4:11:27:a5:a0:03:e6:e3:11:3c:30:52:22:40:73: 5a:2e:b2:3e:f4:9e:d5:67:e3:6b:e5:64:81:7f:98: 1b:92:21:9b:60:9a:cf:70:54:85:c2:41:19:e3:99: 11:06:0a:48:25:97:2e:58:f2:43:d6:a9:f2:d6:f6: 72:df:b9:a6:4c:a3:00:71:f9:71:3f:0d:7e:b6:9b: 80:e0:cc:12:7c:fa:6f:ac:2b:cf:8e:03:a3:bc:9a: 82:59:68:03:bd:75:85:5f:c5:a2:6c:f4:c1:9f:d8: 46:0d:8e:7b:0d:ee:74:52:2c:06:47:07:e7:b7:03: 8e:2d:ca:8b:ea:d2:c5:65:a8:39:cf:b3:95:6b:c0: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1184::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202734 Signature Algorithm: sha256WithRSAEncryption 15:fb:e3:4b:9c:96:41:3e:b4:5b:0e:96:dd:1c:12:20:f1:92: 25:94:28:d5:17:d5:e0:e5:84:ad:9a:5c:91:1a:40:27:6b:0c: ab:77:d2:5e:9a:0d:a0:49:1d:0a:fc:32:fa:b0:49:01:7b:39: 38:9d:78:fc:39:47:34:c1:f2:1d:bf:90:03:9d:f5:b8:26:6f: 21:c9:e4:39:0c:88:d4:39:3f:e9:06:52:b1:fa:1e:3b:ab:90: 91:74:b3:0b:80:8d:73:82:14:f8:db:dc:23:75:a3:62:65:26: 05:72:f2:fe:ba:e5:20:66:49:a4:40:1a:18:ff:d3:81:5c:bb: e7:d2:ce:45:fc:4b:30:0b:d4:37:8e:52:3a:3b:14:f1:0a:dd: 1b:32:17:a4:96:fc:8b:1e:30:b3:26:5b:6b:d5:f5:29:37:d2: 58:66:9d:7d:3f:f6:99:3f:30:e9:25:0b:48:df:e1:0b:fc:32: bb:6d:5b:9b:0c:15:9c:81:2c:00:a9:a8:f0:59:03:dd:b6:ac: b6:97:39:07:7e:2e:8a:55:b4:1f:e3:4c:02:44:2d:b8:33:22: af:08:12:62:cf:4c:7a:5b:cb:1b:2e:19:7f:13:54:1b:a8:96: 5a:84:2e:bb:1a:42:3d:4e:ca:3a:cd:d6:68:9c:3f:59:ec:7d: 07:3d:df:e9 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt26uwJcfyiMKICk5jDyvELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmIyMzMzZjA2NjU3M2Y1MzE2ZTA3NWEwMWNlMjQ5MGI1OGM2YWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sCavBK04ky8LK9qHIrNSk88mmUf xDf+Xn0GBCEPeYWjEcmLXpOGadEF+7uQlHRUnjmWgNPomqnlwB1uoI18u2ivn3F4 JBrGsZGi0aLEzWcW/A7usfk6x9Lx+yDqReXGZXlxfR+fMWPI2P0BNvJtu/o3sOcD b7ekESeloAPm4xE8MFIiQHNaLrI+9J7VZ+Nr5WSBf5gbkiGbYJrPcFSFwkEZ45kR BgpIJZcuWPJD1qny1vZy37mmTKMAcflxPw1+tpuA4MwSfPpvrCvPjgOjvJqCWWgD vXWFX8WibPTBn9hGDY57De50UiwGRwfntwOOLcqL6tLFZag5z7OVa8Di9QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFLayMz8GZXP1MW4HWgHOJJC1jGrhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzVkNjhh Mi05NWQzLTRkZGYtODVmNi04MDUxNzBhYzljMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvNWQ2OGEy LTk1ZDMtNGRkZi04NWY2LTgwNTE3MGFjOWMwZS8xL3RySXpQd1psY19VeGJnZGFB YzRra0xXTWF1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGEMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMX7jANBgkqhkiG9w0BAQsFAAOCAQEAFfvjS5yWQT60Ww6W3RwSIPGSJZQo 1RfV4OWErZpckRpAJ2sMq3fSXpoNoEkdCvwy+rBJAXs5OJ14/DlHNMHyHb+QA531 uCZvIcnkOQyI1Dk/6QZSsfoeO6uQkXSzC4CNc4IU+NvcI3WjYmUmBXLy/rrlIGZJ pEAaGP/TgVy759LORfxLMAvUN45SOjsU8QrdGzIXpJb8ix4wsyZba9X1KTfSWGad fT/2mT8w6SULSN/hC/wyu21bmwwVnIEsAKmo8FkD3bastpc5B34uilW0H+NMAkQt uDMirwgSYs9MelvLGy4ZfxNUG6iWWoQuuxpCPU7KOs3WaJw/Wex9Bz3f6Q== -----END CERTIFICATE-----Generated at Sun Jan 18 16:19:21 2026 by rpki-client