This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer File: TDn4uP66ttIJokmB45n9YEMuHMk.cer (raw, json) Hash identifier: KNB4TK2JGldHZFy1m4+ipl9HZ654M5vFUg0M/ZwUjPc= Subject key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15F4F3814A2A5A33992383628BA323 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.182.41.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f4:f3:81:4a:2a:5a:33:99:23:83:62:8b:a3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b9:ea:45:6e:ca:f8:9f:3f:32:9d:87:39:61: 7a:95:c3:76:96:6d:55:08:df:b0:2f:29:91:a0:fe: c1:5e:b1:7d:1f:9a:c2:d9:8f:99:bf:dd:f1:4a:e2: 04:67:b7:bb:f6:3e:49:a4:40:85:76:8e:2e:0b:7f: be:5b:a4:10:72:2b:6e:24:b3:ee:9b:f1:e1:40:76: 03:59:9c:4d:97:3b:be:93:8c:35:b5:97:fd:f2:b7: 0e:c4:ac:1f:f7:52:05:94:df:4d:aa:6a:e6:41:b9: d3:cc:9e:ee:ad:79:99:08:53:68:b2:5a:3d:71:74: d8:f6:12:6b:35:ba:e3:3a:82:13:c0:24:7d:b3:7d: 12:27:4c:ba:28:16:53:42:30:77:e8:6b:ce:ef:08: 64:af:bb:33:54:2b:41:a6:22:f1:58:1c:a2:2c:44: 5a:d9:f1:03:67:01:e1:60:41:56:c2:96:a6:e6:3d: 99:be:ab:6e:cd:a8:97:11:bc:3d:94:f9:0f:bd:32: f7:b5:b0:9b:62:cd:e4:03:80:44:70:4b:89:c8:87: 7b:3c:87:92:37:77:95:64:51:ec:0d:21:db:17:0c: dd:1e:f7:84:c9:2a:2e:89:87:5b:66:a0:0e:fc:73: b9:f3:64:64:da:b1:9c:98:25:34:b4:05:3e:38:3c: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.41.0/24 Signature Algorithm: sha256WithRSAEncryption 67:27:3c:19:28:e1:cc:fa:df:45:b1:d4:fe:a8:aa:0b:df:a9: 58:c9:2d:fb:d0:4f:80:f1:49:f9:2e:bf:ae:88:57:3d:02:ff: cc:5d:09:5b:4b:cd:41:8e:76:e0:cf:fe:62:8b:c6:6c:89:96: 93:0b:45:78:33:77:cc:86:ea:13:cc:5b:76:03:32:03:30:0d: c7:74:f3:2e:f8:d0:fb:9d:76:f8:19:0d:92:09:0e:cd:ce:32: 46:4e:ea:63:af:de:7f:32:fd:de:70:6d:6b:4f:11:38:ef:e2: 6a:07:e6:b7:db:a3:1c:f8:8c:f7:aa:62:b9:87:47:5b:80:77: 32:cc:c5:97:58:f3:72:47:c3:53:d2:40:0f:30:61:a3:0c:43: 0b:f4:41:3a:ba:0d:eb:70:b5:59:a9:15:5f:45:44:8b:fd:1b: ef:7b:5a:cb:2e:57:86:21:51:f3:27:9c:72:a2:8b:db:e1:66: 54:f2:48:6e:af:91:87:c9:f4:e3:dc:32:2f:ce:2c:5e:20:de: c9:28:dc:da:c7:c0:8e:f9:e0:b6:23:7e:34:6a:c5:5d:6c:0a: 54:bf:eb:51:e2:dc:eb:d0:2d:6f:cd:e0:13:1c:59:08:b1:39: d9:e6:01:29:5a:e6:72:73:0e:4a:9d:4f:c9:a4:c3:f3:e5:46: 12:1e:62:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FfTzgUoqWjOZI4Nii6MjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzM5ZjhiOGZlYmFiNmQyMDlhMjQ5ODFlMzk5ZmQ2MDQzMmUxY2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bnqRW7K+J8/Mp2HOWF6lcN2lm1V CN+wLymRoP7BXrF9H5rC2Y+Zv93xSuIEZ7e79j5JpECFdo4uC3++W6QQcituJLPu m/HhQHYDWZxNlzu+k4w1tZf98rcOxKwf91IFlN9NqmrmQbnTzJ7urXmZCFNoslo9 cXTY9hJrNbrjOoITwCR9s30SJ0y6KBZTQjB36GvO7whkr7szVCtBpiLxWByiLERa 2fEDZwHhYEFWwpam5j2ZvqtuzaiXEbw9lPkPvTL3tbCbYs3kA4BEcEuJyId7PIeS N3eVZFHsDSHbFwzdHveEySouiYdbZqAO/HO582Rk2rGcmCU0tAU+ODxS2QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzg0YmJl My00YzYxLTQwMzMtYjlhZi05MzIwZmUxM2U1ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvODRiYmUz LTRjNjEtNDAzMy1iOWFmLTkzMjBmZTEzZTVmZS8xL1REbjR1UDY2dHRJSm9rbUI0 NW45WUVNdUhNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw7YpMA0GCSqGSIb3DQEBCwUAA4IBAQBnJzwZ KOHM+t9FsdT+qKoL36lYyS370E+A8Un5Lr+uiFc9Av/MXQlbS81Bjnbgz/5ii8Zs iZaTC0V4M3fMhuoTzFt2AzIDMA3HdPMu+ND7nXb4GQ2SCQ7NzjJGTupjr95/Mv3e cG1rTxE47+JqB+a326Mc+Iz3qmK5h0dbgHcyzMWXWPNyR8NT0kAPMGGjDEML9EE6 ug3rcLVZqRVfRUSL/Rvve1rLLleGIVHzJ5xyoovb4WZU8khur5GHyfTj3DIvzixe IN7JKNzax8CO+eC2I340asVdbApUv+tR4tzr0C1vzeATHFkIsTnZ5gEpWuZycw5K nU/JpMPz5UYSHmKe -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:00 2026 by rpki-client