This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer (raw, json) Hash identifier: KeYgWA+HbkF8l+oFPUJrnN/4NX7wmOrIPsHBwb1lV90= Subject key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF17532F0FFE4141707A4B15D9F1761 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51826 IP: 185.222.60.0/24 IP: 2a13:a0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:75:32:f0:ff:e4:14:17:07:a4:b1:5d:9f:17:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8e:a8:8d:e2:b3:ad:f1:07:b9:4d:6e:59:40: 66:a6:8a:eb:7d:5a:8e:c2:dd:a5:fa:c8:d4:8a:cd: 56:bf:c2:ac:15:1b:83:1b:e3:3a:a0:82:ea:ca:2c: 5f:7a:f2:cd:a8:a9:7f:6a:21:f2:1e:f7:1d:10:f9: 5f:5c:7d:64:4f:e4:0b:12:25:dd:5b:e2:77:b3:03: e2:44:14:cd:3e:6b:b3:fb:91:b7:37:31:ad:e5:15: a4:08:92:f3:48:95:f8:c0:ae:69:15:47:dd:e4:a5: 31:c8:ec:f3:af:27:1c:44:0d:be:88:8c:a9:de:72: a4:89:ae:70:f2:dd:68:a9:4d:21:ba:8c:92:ed:3f: 99:4a:76:a7:88:b6:9f:a3:e0:9f:f3:e7:e4:23:5b: 37:17:42:d7:2f:07:88:a0:5c:6f:5e:e8:18:bd:04: 53:0c:72:c7:f0:4f:3c:b6:22:05:47:a0:94:cd:2d: fe:ee:dc:7e:9a:b9:d7:2d:58:52:52:9c:42:f2:47: a8:4b:ac:96:35:89:40:20:67:a2:be:a5:ff:c9:8e: fd:2f:79:f3:cf:05:78:fc:75:14:52:5a:70:23:9e: 8f:17:f2:a4:b7:67:58:fb:d4:3e:cc:36:a6:8d:d2: 21:2f:a7:cf:de:20:1a:45:db:3c:0e:67:60:f9:98: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.60.0/24 IPv6: 2a13:a0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51826 Signature Algorithm: sha256WithRSAEncryption 3c:e9:8e:56:1a:13:41:e1:63:60:d5:e2:f0:c8:66:9c:7d:32: 12:42:32:38:11:5b:67:75:4a:d5:6d:47:8d:06:40:bd:83:c2: 31:76:dc:95:ec:38:82:2e:49:f0:20:6b:23:07:c0:10:0b:1f: cd:03:c4:04:69:8a:8b:b9:a4:4b:b9:62:63:45:51:b5:2a:5c: 74:5e:11:02:87:b7:f9:5d:bc:5a:a0:13:c2:d6:ca:4b:9c:16: 2e:9c:c3:52:12:9a:67:d8:60:09:2c:e6:26:50:54:1a:00:9d: 89:c0:2d:8e:d4:c8:76:a5:a9:6f:20:fa:62:38:b6:90:0c:71: c4:68:b5:24:55:ee:4d:4e:fe:2a:2c:1b:7e:6e:11:b9:de:c3: b3:bf:5c:ea:c3:8b:3e:13:01:94:0b:8f:02:6e:af:c0:e1:79: 89:20:68:45:c6:a8:7f:33:82:b4:39:24:31:7d:3f:bd:86:e0: 51:cc:fb:bc:8b:fb:46:37:9c:b2:f2:f1:3e:f4:5e:17:26:48: d3:f7:ac:d6:49:14:1f:79:88:96:a9:a1:71:60:58:c9:d3:87: ec:e1:e8:68:c3:3b:ab:5a:f6:86:19:47:f8:3b:32:ea:b6:d7: 92:bb:cb:0d:a1:5c:80:1c:b1:ef:a2:bc:0c:22:ff:85:05:4d: d3:30:6f:dd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/8XUy8P/kFBcHpLFdnxdhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzNiODhjZGIxM2YzZWIxMmE5YmU1NGFiMTliYWE5MDU1OWIzOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY6ojeKzrfEHuU1uWUBmporrfVqO wt2l+sjUis1Wv8KsFRuDG+M6oILqyixfevLNqKl/aiHyHvcdEPlfXH1kT+QLEiXd W+J3swPiRBTNPmuz+5G3NzGt5RWkCJLzSJX4wK5pFUfd5KUxyOzzryccRA2+iIyp 3nKkia5w8t1oqU0huoyS7T+ZSnaniLafo+Cf8+fkI1s3F0LXLweIoFxvXugYvQRT DHLH8E88tiIFR6CUzS3+7tx+mrnXLVhSUpxC8keoS6yWNYlAIGeivqX/yY79L3nz zwV4/HUUUlpwI56PF/Kkt2dY+9Q+zDamjdIhL6fP3iAaRds8Dmdg+ZiftQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEw7iM2xPz6xKpvlSrGbqpBVmzlqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2VjNTU4 NC02NjE4LTRiMTItYTExYy0zMDU1Y2I3MjliY2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvZWM1NTg0 LTY2MTgtNGIxMi1hMTFjLTMwNTVjYjcyOWJjZi8xL1REdUl6YkVfUHJFcW0tVktz WnVxa0ZXYk9Xby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAud48MA0EAgACMAcDBQMqE6DAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDKcjANBgkqhkiG9w0BAQsFAAOCAQEAPOmOVhoTQeFj YNXi8MhmnH0yEkIyOBFbZ3VK1W1HjQZAvYPCMXbclew4gi5J8CBrIwfAEAsfzQPE BGmKi7mkS7liY0VRtSpcdF4RAoe3+V28WqATwtbKS5wWLpzDUhKaZ9hgCSzmJlBU GgCdicAtjtTIdqWpbyD6Yji2kAxxxGi1JFXuTU7+Kiwbfm4Rud7Ds79c6sOLPhMB lAuPAm6vwOF5iSBoRcaofzOCtDkkMX0/vYbgUcz7vIv7RjecsvLxPvReFyZI0/es 1kkUH3mIlqmhcWBYydOH7OHoaMM7q1r2hhlH+Dsy6rbXkrvLDaFcgByx76K8DCL/ hQVN0zBv3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:40 2026 by rpki-client