This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer (raw, json) Hash identifier: 77RsvFMnbvs+A08/lazSbjuTNpCcP1snQAhFiqtpv+w= Subject key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7120EDF26294BD623B40FF09E8382 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3188 AS: 202620 IP: 5.2.80.0/21 IP: 185.8.32.0/22 IP: 185.8.128.0/22 IP: 185.40.84.0/23 IP: 185.67.121.0/24 IP: 185.150.128.0/22 IP: 193.31.118.0/24 IP: 2a02:d9c0::/29 IP: 2a04:8340::/29 IP: 2a04:b600::/29 IP: 2a06:ad40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:12:0e:df:26:29:4b:d6:23:b4:0f:f0:9e:83:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c5:a0:5b:dd:f9:a4:b7:ec:5d:5c:69:88:9d: ba:58:bb:52:ec:ed:63:65:ba:c7:de:cc:6e:36:7d: 05:90:07:31:c7:44:10:a4:71:93:ac:92:92:25:f7: 73:34:09:86:db:3c:01:32:2c:1f:c1:be:1d:ce:ad: 37:6a:b7:af:14:56:2b:c3:52:1f:11:83:90:81:e5: fc:f2:b5:c5:27:e0:04:37:44:1b:17:1b:4b:73:c5: ea:0d:58:52:e1:b1:b6:af:ee:a5:81:8f:b6:ff:a6: 18:5c:15:02:22:c7:06:7c:61:2c:5a:90:6f:36:3c: c9:70:fb:32:9f:02:31:9c:4b:e8:f4:92:a2:9e:4f: fa:1d:49:0f:69:96:3f:74:44:51:51:29:74:f2:aa: 4b:dd:80:53:cd:ee:35:90:1b:79:d5:0e:f8:22:29: da:f4:28:cd:e7:c4:86:2f:83:9b:52:7a:3d:b1:c0: d6:a7:cd:5d:1a:9e:3f:0d:fc:90:61:a7:03:ca:f8: ec:da:c7:b8:d2:2a:05:b5:ed:18:f1:15:18:ea:07: e6:53:a2:69:ef:33:7d:1a:6b:09:8d:2d:c0:ae:7d: ab:a2:4f:87:dc:cb:a8:d2:45:2c:84:5e:dd:a0:87: 11:d5:57:53:d2:cf:0f:88:86:b3:c9:c7:4b:3c:39: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.2.80.0/21 185.8.32.0/22 185.8.128.0/22 185.40.84.0/23 185.67.121.0/24 185.150.128.0/22 193.31.118.0/24 IPv6: 2a02:d9c0::/29 2a04:8340::/29 2a04:b600::/29 2a06:ad40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3188 202620 Signature Algorithm: sha256WithRSAEncryption ae:dd:a1:19:6e:8d:e4:4e:73:83:92:89:f2:84:82:89:a2:4e: c6:0a:2f:7c:70:ff:9b:7e:15:3d:c4:f0:eb:da:6b:2f:5c:8a: 45:10:a5:6a:3f:02:0c:31:a4:60:b6:d9:d0:02:91:81:a8:4c: cc:d5:67:b5:7e:62:89:f4:11:88:01:79:79:b6:9e:d3:1d:e2: 45:d1:ae:16:37:fa:73:3e:1b:e1:de:7e:bd:b5:ee:d2:72:f1: e2:87:7b:9c:73:1e:67:a5:6b:d2:32:1a:24:49:6d:dc:34:7c: 70:41:21:75:1c:ac:a5:a9:87:38:ec:4a:6d:6b:17:18:d0:ba: 2c:36:2a:d1:19:1a:6c:52:bf:9c:ab:e4:01:29:13:77:26:a1: f7:47:e8:55:ce:0d:a2:f7:02:6c:41:68:14:ac:0f:9b:bf:88: 59:13:91:fd:c6:1a:16:e8:0f:3f:e9:10:2a:c9:28:a7:3c:6d: 19:5d:88:2a:10:3b:a3:f8:28:1c:b6:48:c1:06:b1:0c:cd:83: b1:94:04:4d:f7:de:22:6f:7d:51:aa:be:58:36:85:63:0b:ff: de:4d:0b:26:68:e9:03:e9:e1:92:a2:9b:ba:25:de:bd:c1:bd: 2b:df:ec:9c:79:36:e8:8a:70:68:a1:0d:f2:da:0c:4d:33:13: 82:02:f5:ce -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgISAZt+pxIO3yYpS9YjtA/wnoOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2JmZDNlNzJkNGEwMzk2Zjk1MzQ3MzM2YjQyNjc4ZjY4YzI2NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusWgW935pLfsXVxpiJ26WLtS7O1j ZbrH3sxuNn0FkAcxx0QQpHGTrJKSJfdzNAmG2zwBMiwfwb4dzq03arevFFYrw1If EYOQgeX88rXFJ+AEN0QbFxtLc8XqDVhS4bG2r+6lgY+2/6YYXBUCIscGfGEsWpBv NjzJcPsynwIxnEvo9JKink/6HUkPaZY/dERRUSl08qpL3YBTze41kBt51Q74Iina 9CjN58SGL4ObUno9scDWp81dGp4/DfyQYacDyvjs2se40ioFte0Y8RUY6gfmU6Jp 7zN9GmsJjS3Arn2rok+H3Muo0kUshF7doIcR1VdT0s8PiIazycdLPDnAFwIDAQAB o4IC7DCCAugwHQYDVR0OBBYEFEy/0+ctSgOW+VNHM2tCZ49owmQwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2I1NzMz Yi0zODkxLTQ0OWItOTk1MC1mZjYwZTIxOGVkNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvYjU3MzNi LTM4OTEtNDQ5Yi05OTUwLWZmNjBlMjE4ZWQ0MS8xL1RMX1Q1eTFLQTViNVUwY3ph MEpuajJqQ1pEQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUF BwEHAQH/BFgwVjAwBAIAATAqAwQDBQJQAwQCuQggAwQCuQiAAwQBuShUAwQAuUN5 AwQCuZaAAwQAwR92MCIEAgACMBwDBQMqAtnAAwUDKgSDQAMFAyoEtgADBQMqBq1A MB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAgx0AgMDF3wwDQYJKoZIhvcNAQELBQAD ggEBAK7doRlujeROc4OSifKEgomiTsYKL3xw/5t+FT3E8Ovaay9cikUQpWo/Agwx pGC22dACkYGoTMzVZ7V+Yon0EYgBeXm2ntMd4kXRrhY3+nM+G+Hefr217tJy8eKH e5xzHmela9IyGiRJbdw0fHBBIXUcrKWphzjsSm1rFxjQuiw2KtEZGmxSv5yr5AEp E3cmofdH6FXODaL3AmxBaBSsD5u/iFkTkf3GGhboDz/pECrJKKc8bRldiCoQO6P4 KBy2SMEGsQzNg7GUBE333iJvfVGqvlg2hWML/95NCyZo6QPp4ZKim7ol3r3BvSvf 7Jx5NuiKcGihDfLaDE0zE4IC9c4= -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:43 2026 by rpki-client