This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer (raw, json) Hash identifier: 4bT+Y/kKzCKqXGE/4Oayg0Wrn3JXYGMMZUCRd/tsWIU= Subject key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E940C09780AFFFBCBA036E9DB14AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.29.50.0/24 IP: 2a14:2880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:94:0c:09:78:0a:ff:fb:cb:a0:36:e9:db:14:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4a:39:50:ca:1e:ab:b4:66:eb:c6:4c:1c:cc: aa:d9:fe:7a:94:3b:96:c1:0b:6b:5e:3e:0e:5d:1c: 16:63:1b:8b:54:a3:0a:77:27:75:a7:d2:4a:a6:9b: b9:b1:d0:11:ef:89:a9:55:8d:a3:98:9e:1a:bc:af: 80:53:70:e1:1f:35:73:75:b7:29:ad:19:0e:6a:a3: 25:44:22:35:29:a6:11:70:ab:a3:67:c2:ce:0d:50: 1f:81:0d:56:a5:3a:af:c8:a9:bc:24:f8:31:19:4f: 50:f2:b0:a5:3d:00:bb:52:05:55:2c:5a:0b:a7:f4: b7:c8:af:46:b6:1f:2d:94:d7:f1:0a:5f:13:c8:c0: 86:a5:21:0a:6d:35:b1:1d:26:79:ec:f6:0b:03:5b: 3f:c8:8c:f4:29:2a:f0:22:52:44:38:2c:d6:e5:45: fc:6f:13:ae:b9:75:38:7c:1e:72:33:da:8a:24:5f: dc:d4:b6:fe:c9:16:a1:b9:5e:64:85:94:53:43:2f: 95:6f:08:59:93:25:2c:75:d5:0b:c6:03:25:5a:cd: 1c:d6:1b:08:d4:fa:f0:13:20:02:9b:12:19:fb:1e: 93:0b:92:2d:b0:a0:a2:15:1d:e3:b1:d9:28:f3:d5: 09:9d:18:5b:eb:97:7b:a7:9a:5f:a8:09:74:37:a6: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.29.50.0/24 IPv6: 2a14:2880::/29 Signature Algorithm: sha256WithRSAEncryption 9a:25:0e:4a:a9:b2:36:aa:fa:a0:0b:25:3c:c7:3a:21:43:98: 93:34:4b:f9:e6:d3:f9:6d:b0:86:55:fb:a2:4b:6d:b7:3f:24: e1:65:c4:e2:96:ca:37:11:8d:b8:c1:a5:94:d1:16:98:50:35: fe:84:8d:cb:6d:8d:0a:95:33:97:d8:48:1a:01:a7:6e:ce:84: 3b:fc:c2:b1:4f:c4:ca:6a:9c:06:95:a9:06:97:27:02:ec:96: 8b:d9:18:3f:13:ed:0a:09:03:be:f4:1e:43:f0:74:a2:1e:fd: 65:0c:8a:32:25:cf:9c:fd:59:a0:20:48:89:4b:b1:60:a9:2b: 6e:e6:de:06:be:fb:89:f6:9b:80:96:2b:48:25:10:b6:4a:8a: dc:52:b6:79:bf:5f:9d:5c:ac:2d:17:bf:03:8d:ee:b4:34:c5: bc:df:66:c9:01:0a:b7:89:4c:7f:c3:6e:cf:d6:cd:1c:db:ef: 21:e2:2e:ca:93:9b:c8:f9:46:24:af:d2:ac:c5:25:f6:9c:94: f0:be:85:dc:48:62:bd:9a:46:eb:08:7a:96:9b:f8:e2:96:e9: 2d:23:e5:99:d3:56:6c:39:fc:91:c2:9d:5d:86:3a:4a:3e:15: f3:57:a2:1c:b8:1c:bd:ff:73:60:64:00:15:e1:7d:c9:b5:03: 85:35:1e:4e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fpQMCXgK//vLoDbp2xSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzM4YTMwNmEzN2VlODdiZWJmZjcyMzY1NTNlMGQzY2I2NzJjZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEo5UMoeq7Rm68ZMHMyq2f56lDuW wQtrXj4OXRwWYxuLVKMKdyd1p9JKppu5sdAR74mpVY2jmJ4avK+AU3DhHzVzdbcp rRkOaqMlRCI1KaYRcKujZ8LODVAfgQ1WpTqvyKm8JPgxGU9Q8rClPQC7UgVVLFoL p/S3yK9Gth8tlNfxCl8TyMCGpSEKbTWxHSZ57PYLA1s/yIz0KSrwIlJEOCzW5UX8 bxOuuXU4fB5yM9qKJF/c1Lb+yRahuV5khZRTQy+VbwhZkyUsddULxgMlWs0c1hsI 1PrwEyACmxIZ+x6TC5ItsKCiFR3jsdko89UJnRhb65d7p5pfqAl0N6aifwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEw4owajfuh76/9yNlU+DTy2cs0XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzA4Y2Q5 My0wODc2LTQzZmQtOTJjMC1iODYzYzBhOThiMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvMDhjZDkz LTA4NzYtNDNmZC05MmMwLWI4NjNjMGE5OGIyZC8xL1REaWpCcU4tNkh2cl8zSTJW VDROUExaeXpSYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwR0yMA0EAgACMAcDBQMqFCiAMA0GCSqGSIb3 DQEBCwUAA4IBAQCaJQ5KqbI2qvqgCyU8xzohQ5iTNEv55tP5bbCGVfuiS223PyTh ZcTilso3EY24waWU0RaYUDX+hI3LbY0KlTOX2EgaAaduzoQ7/MKxT8TKapwGlakG lycC7JaL2Rg/E+0KCQO+9B5D8HSiHv1lDIoyJc+c/VmgIEiJS7FgqStu5t4GvvuJ 9puAlitIJRC2SorcUrZ5v1+dXKwtF78Dje60NMW832bJAQq3iUx/w27P1s0c2+8h 4i7Kk5vI+UYkr9KsxSX2nJTwvoXcSGK9mkbrCHqWm/jiluktI+WZ01ZsOfyRwp1d hjpKPhXzV6IcuBy9/3NgZAAV4X3JtQOFNR5O -----END CERTIFICATE-----Generated at Mon Jan 26 19:36:53 2026 by rpki-client