This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer File: TDfyfrSZezvvnygmajlpQFD-dPk.cer (raw, json) Hash identifier: RE0fdqmBhf9A0gGU2EKTRWfPQ7Xelm/Cd5Fbs4pp4s4= Subject key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB43A4B790B3C298BF8846C9C295F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12975 AS: 31408 IP: 1.178.112.0 -- 1.178.143.255 IP: 1.178.208.0/20 IP: 1.179.40.0/21 IP: 1.179.72.0/21 IP: 1.179.88.0/21 IP: 5.11.40.0/21 IP: 24.42.64.0/18 IP: 37.75.208.0/21 IP: 43.230.140.0/22 IP: 43.241.156.0/22 IP: 43.243.24.0/22 IP: 43.243.32.0/22 IP: 43.243.92.0/22 IP: 43.245.156.0/22 IP: 43.245.208.0/22 IP: 43.255.108.0/22 IP: 45.113.108.0/22 IP: 45.116.248.0/22 IP: 45.117.4.0/22 IP: 45.117.40.0/22 IP: 45.121.104.0/22 IP: 45.127.176.0/22 IP: 45.134.202.0/23 IP: 46.60.64.0/18 IP: 59.152.88.0/21 IP: 66.9.0.0/19 IP: 77.91.128.0/18 IP: 82.213.0.0/18 IP: 83.244.0.0/17 IP: 85.184.240.0/22 IP: 86.104.188.0/22 IP: 95.215.104.0/22 IP: 103.27.144.0/22 IP: 103.37.84.0/22 IP: 103.47.68.0/22 IP: 103.49.208.0/22 IP: 103.53.4.0/22 IP: 103.57.108.0/22 IP: 103.102.252.0/22 IP: 103.193.132.0/22 IP: 103.196.120.0/22 IP: 103.199.176.0/22 IP: 103.206.36.0/22 IP: 103.206.108.0/22 IP: 103.209.204.0/22 IP: 103.215.4.0/22 IP: 103.216.184.0/22 IP: 103.231.104.0/22 IP: 103.239.96.0/22 IP: 103.242.60.0/22 IP: 103.248.36.0/22 IP: 103.248.244.0/22 IP: 113.212.64.0/22 IP: 115.166.128.0/22 IP: 118.107.180.0/22 IP: 139.190.128.0/18 IP: 144.48.236.0/22 IP: 150.253.32.0/19 IP: 158.140.16.0/20 IP: 158.140.64.0/18 IP: 162.212.180.0/22 IP: 176.65.0.0 -- 176.65.11.255 IP: 182.161.60.0/22 IP: 185.19.220.0/22 IP: 188.0.96.0/19 IP: 188.161.0.0/16 IP: 193.223.252.0/23 IP: 193.227.236.0/23 IP: 194.169.188.0/23 IP: 194.176.98.0/23 IP: 195.123.112.0/21 IP: 195.123.160.0/21 IP: 203.28.19.0/24 IP: 203.30.104.0/22 IP: 203.89.108.0/22 IP: 203.189.236.0/22 IP: 212.14.224.0/19 IP: 213.6.0.0/16 IP: 213.244.64.0/18 IP: 2a00:4a60::/29 IP: 2a00:d2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:43:a4:b7:90:b3:c2:98:bf:88:46:c9:c2:95:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:22:31:6c:ff:d8:77:f0:94:b5:92:89:77: 93:b5:a2:9c:c9:ea:c7:5f:61:f6:09:9d:f9:30:44: 3a:ad:0b:93:4c:1f:d1:9b:51:ab:10:3d:95:94:dc: 4a:c9:7e:59:50:e9:4c:f0:a1:5f:d6:8c:4e:c0:6a: a7:2d:cd:ee:1d:37:21:84:6e:c9:31:19:ad:ca:b3: 6f:1c:76:40:be:b2:45:22:ad:af:76:13:2d:17:31: 3b:64:b6:97:f7:08:2e:a1:03:fb:f3:99:8f:42:8d: c0:7d:f6:db:e8:0b:2f:8f:8d:53:67:32:09:61:19: 13:f0:b0:1a:6b:f2:6f:d9:2f:7f:56:00:9d:ef:0e: e3:1a:83:8b:93:ba:8a:15:e6:78:94:f2:bf:35:a7: 6e:5a:85:82:10:b0:c2:1c:03:49:cd:ee:ef:ac:16: af:d4:54:8d:01:f3:87:92:23:dd:c9:8f:8c:d5:b3: 9a:68:ab:d3:9a:d4:82:ac:b1:6b:82:14:a8:23:4b: c2:c3:91:99:51:ce:31:31:0c:e2:17:1d:c0:67:b6: a5:16:ea:25:30:8d:aa:41:ee:92:cf:92:16:dc:14: 44:a5:a0:b2:f8:0c:9b:00:cd:b7:e5:80:15:6a:33: da:3d:c8:22:ba:ca:3a:85:ae:b3:8f:cf:23:23:96: 97:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.178.112.0-1.178.143.255 1.178.208.0/20 1.179.40.0/21 1.179.72.0/21 1.179.88.0/21 5.11.40.0/21 24.42.64.0/18 37.75.208.0/21 43.230.140.0/22 43.241.156.0/22 43.243.24.0/22 43.243.32.0/22 43.243.92.0/22 43.245.156.0/22 43.245.208.0/22 43.255.108.0/22 45.113.108.0/22 45.116.248.0/22 45.117.4.0/22 45.117.40.0/22 45.121.104.0/22 45.127.176.0/22 45.134.202.0/23 46.60.64.0/18 59.152.88.0/21 66.9.0.0/19 77.91.128.0/18 82.213.0.0/18 83.244.0.0/17 85.184.240.0/22 86.104.188.0/22 95.215.104.0/22 103.27.144.0/22 103.37.84.0/22 103.47.68.0/22 103.49.208.0/22 103.53.4.0/22 103.57.108.0/22 103.102.252.0/22 103.193.132.0/22 103.196.120.0/22 103.199.176.0/22 103.206.36.0/22 103.206.108.0/22 103.209.204.0/22 103.215.4.0/22 103.216.184.0/22 103.231.104.0/22 103.239.96.0/22 103.242.60.0/22 103.248.36.0/22 103.248.244.0/22 113.212.64.0/22 115.166.128.0/22 118.107.180.0/22 139.190.128.0/18 144.48.236.0/22 150.253.32.0/19 158.140.16.0/20 158.140.64.0/18 162.212.180.0/22 176.65.0.0-176.65.11.255 182.161.60.0/22 185.19.220.0/22 188.0.96.0/19 188.161.0.0/16 193.223.252.0/23 193.227.236.0/23 194.169.188.0/23 194.176.98.0/23 195.123.112.0/21 195.123.160.0/21 203.28.19.0/24 203.30.104.0/22 203.89.108.0/22 203.189.236.0/22 212.14.224.0/19 213.6.0.0/16 213.244.64.0/18 IPv6: 2a00:4a60::/29 2a00:d2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12975 31408 Signature Algorithm: sha256WithRSAEncryption 14:d8:22:02:01:1c:e6:ba:bd:3a:4a:c4:72:14:2e:12:13:43: 31:84:38:bf:3d:83:29:3c:14:94:24:28:4c:39:71:d1:91:f7: e9:7f:e5:3c:a0:0c:0a:fc:19:ea:3c:7c:33:d4:54:6a:c2:6f: a0:13:16:93:a6:e0:93:b9:cb:1e:aa:b0:1e:ba:9d:ed:f9:1f: 00:2d:c0:76:96:56:7a:1d:c8:6d:f7:9f:64:c8:00:c0:29:70: ed:e9:00:2c:30:ea:a4:28:b1:94:cf:cf:3d:53:ee:3c:97:d5: 9d:84:b6:7c:f4:cc:f7:34:c2:29:84:74:22:01:0a:b7:c7:2b: ad:57:1a:58:66:f5:18:50:9a:cd:51:0d:48:29:21:90:a8:00: 6d:cc:2c:fc:d4:3a:ce:d8:9e:de:60:48:82:a6:ad:30:7a:ec: a4:70:19:a0:4f:e6:3b:c1:ec:93:1f:cc:ba:46:a4:14:bb:09: 6e:34:1d:ac:36:81:a6:f8:2d:32:5b:f9:b5:de:7d:0a:b2:ba: 7a:14:d3:4b:c1:2b:72:08:75:b8:65:9c:5c:07:5c:9a:05:d3: 9c:9f:bc:b3:3b:9d:5e:cb:e3:84:cb:35:14:2e:4c:4a:fe:2d: cf:73:49:96:01:50:6d:6f:4d:f1:c8:9c:d5:90:0c:63:25:f0: 3c:da:e7:bf -----BEGIN CERTIFICATE----- MIIHmDCCBoCgAwIBAgISAZt9y0Okt5Czwpi/iEbJwpXwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzM3ZjI3ZWI0OTk3YjNiZWY5ZjI4MjY2YTM5Njk0MDUwZmU3NGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbsiMWz/2HfwlLWSiXeTtaKcyerH X2H2CZ35MEQ6rQuTTB/Rm1GrED2VlNxKyX5ZUOlM8KFf1oxOwGqnLc3uHTchhG7J MRmtyrNvHHZAvrJFIq2vdhMtFzE7ZLaX9wguoQP785mPQo3Affbb6Asvj41TZzIJ YRkT8LAaa/Jv2S9/VgCd7w7jGoOLk7qKFeZ4lPK/NaduWoWCELDCHANJze7vrBav 1FSNAfOHkiPdyY+M1bOaaKvTmtSCrLFrghSoI0vCw5GZUc4xMQziFx3AZ7alFuol MI2qQe6Sz5IW3BREpaCy+AybAM235YAVajPaPcgiuso6ha6zj88jI5aX2QIDAQAB o4IEpDCCBKAwHQYDVR0OBBYEFEw38n60mXs7758oJmo5aUBQ/nT5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzA5Y2Vh MC1lZjJiLTRmMjAtYTE5YS1lYjVhNjI3ZTc2YTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvMDljZWEw LWVmMmItNGYyMC1hMTlhLWViNWE2MjdlNzZhMy8xL1REZnlmclNaZXp2dm55Z21h amxwUUZELWRQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICHgYIKwYB BQUHAQcBAf8EggINMIICCTCCAe8EAgABMIIB5zAMAwQEAbJwAwQEAbKAAwQEAbLQ AwQDAbMoAwQDAbNIAwQDAbNYAwQDBQsoAwQGGCpAAwQDJUvQAwQCK+aMAwQCK/Gc AwQCK/MYAwQCK/MgAwQCK/NcAwQCK/WcAwQCK/XQAwQCK/9sAwQCLXFsAwQCLXT4 AwQCLXUEAwQCLXUoAwQCLXloAwQCLX+wAwQBLYbKAwQGLjxAAwQDO5hYAwQFQgkA AwQGTVuAAwQGUtUAAwQHU/QAAwQCVbjwAwQCVmi8AwQCX9doAwQCZxuQAwQCZyVU AwQCZy9EAwQCZzHQAwQCZzUEAwQCZzlsAwQCZ2b8AwQCZ8GEAwQCZ8R4AwQCZ8ew AwQCZ84kAwQCZ85sAwQCZ9HMAwQCZ9cEAwQCZ9i4AwQCZ+doAwQCZ+9gAwQCZ/I8 AwQCZ/gkAwQCZ/j0AwQCcdRAAwQCc6aAAwQCdmu0AwQGi76AAwQCkDDsAwQFlv0g AwQEnowQAwQGnoxAAwQCotS0MAsDAwCwQQMEArBBCAMEArahPAMEArkT3AMEBbwA YAMDALyhAwQBwd/8AwQBwePsAwQBwqm8AwQBwrBiAwQDw3twAwQDw3ugAwQAyxwT AwQCyx5oAwQCy1lsAwQCy73sAwQF1A7gAwMA1QYDBAbV9EAwFAQCAAIwDgMFAyoA SmADBQMqANLAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAjKvAgJ6sDANBgkqhkiG 9w0BAQsFAAOCAQEAFNgiAgEc5rq9OkrEchQuEhNDMYQ4vz2DKTwUlCQoTDlx0ZH3 6X/lPKAMCvwZ6jx8M9RUasJvoBMWk6bgk7nLHqqwHrqd7fkfAC3AdpZWeh3Ibfef ZMgAwClw7ekALDDqpCixlM/PPVPuPJfVnYS2fPTM9zTCKYR0IgEKt8crrVcaWGb1 GFCazVENSCkhkKgAbcws/NQ6ztie3mBIgqatMHrspHAZoE/mO8Hskx/MukakFLsJ bjQdrDaBpvgtMlv5td59CrK6ehTTS8Ercgh1uGWcXAdcmgXTnJ+8szudXsvjhMs1 FC5MSv4tz3NJlgFQbW9N8cic1ZAMYyXwPNrnvw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:24:11 2026 by rpki-client