This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer File: TMC300XPrlNH086YtCQbkA5KnvM.cer (raw, json) Hash identifier: y5YLUGMVS5cRUc7Yv7q4+Qvtb7OE3i2Jp5tY1UDCT6Q= Subject key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A7FC6A3F3FB31C1913613AE9C3BA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.94.184.0/22 IP: 2a05:5200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:7f:c6:a3:f3:fb:31:c1:91:36:13:ae:9c:3b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9f:11:9c:43:86:e6:9b:18:43:dd:7d:d1:e4: 48:7a:87:40:d0:a6:2a:11:7c:36:d0:78:af:07:9c: 65:1b:e5:31:fb:a8:57:fb:32:d1:da:0a:fc:df:c2: 8f:e7:7b:15:88:16:e4:6a:db:b5:47:7a:5a:7d:86: 3e:4c:4e:02:a4:a9:6c:ff:5b:5f:19:73:d7:67:b0: f4:09:aa:fb:51:1c:7e:de:ce:cd:ae:b6:a0:de:8a: 1c:7a:11:09:00:06:b8:05:90:39:d5:63:14:de:ab: e3:fa:c9:05:c2:e0:3a:ef:b9:eb:89:bb:a2:33:f5: be:bf:5c:ce:cc:41:80:a4:58:a9:ef:f9:e2:63:80: ec:48:62:31:aa:fa:5c:b8:7d:c5:f2:4b:d5:2e:8d: 93:c8:06:5e:c9:d8:73:f4:d8:f6:5d:23:b3:49:1c: 81:7f:b3:c9:11:9a:de:de:f4:a3:a5:67:60:e2:68: 67:44:3d:ac:a6:b0:82:cf:1b:e7:34:5b:50:12:59: 05:87:7b:43:20:4c:e2:46:04:16:2e:b9:d9:a1:1d: 53:ab:84:72:9c:00:c8:af:7f:c1:47:a2:4d:b7:96: 84:fe:56:1f:9d:31:6d:f8:94:af:a9:18:23:29:9e: 5d:93:2f:7a:25:ee:dc:b8:d6:12:c6:66:11:16:09: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.184.0/22 IPv6: 2a05:5200::/29 Signature Algorithm: sha256WithRSAEncryption 79:1e:e4:22:27:05:9f:f7:d2:6b:7a:73:15:34:98:15:25:0a: 17:26:5d:ea:cc:fe:6a:b7:02:3c:9e:61:75:78:01:47:0f:31: c9:6b:96:e0:d2:d8:24:71:03:65:2a:b2:93:c9:fb:54:1d:b9: 1f:07:c3:fd:3e:65:eb:db:aa:24:eb:55:30:9a:ec:aa:80:f4: 6b:f3:b2:33:a1:36:eb:89:9a:11:d9:52:94:01:09:c9:b5:c2: 4b:8a:0f:0d:9c:70:dc:7d:31:6b:1b:88:6a:1b:99:84:5a:05: a1:4c:11:09:6f:3e:f8:7b:70:af:b3:4e:92:39:ff:68:f7:96: 20:ed:6c:b5:9e:fc:15:cf:01:0c:21:c9:5d:49:a5:10:fd:83: 26:6c:6c:31:12:41:02:6e:c9:08:2c:a2:87:2a:45:0b:1c:0e: 12:c6:2b:f3:44:05:d5:b2:15:79:92:71:1f:3d:c1:1e:c1:9e: 16:5d:20:81:00:65:f4:ac:1b:68:15:bf:e7:95:89:d2:0a:06: 76:75:7f:16:1b:c0:6f:6a:08:58:1e:5b:d1:45:27:e9:b8:e2: d5:dc:32:55:94:0c:92:39:e4:6b:0f:a5:5f:cb:90:b7:4e:5f: 4d:e9:12:28:73:b1:cc:93:b7:1c:3c:59:9d:93:ff:3f:3c:f9: 5e:4f:ae:82 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6Wn/Go/P7McGRNhOunDupMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2MwYjdkMzQ1Y2ZhZTUzNDdkM2NlOThiNDI0MWI5MDBlNGE5ZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ8RnEOG5psYQ9190eRIeodA0KYq EXw20HivB5xlG+Ux+6hX+zLR2gr838KP53sViBbkatu1R3pafYY+TE4CpKls/1tf GXPXZ7D0Car7URx+3s7Nrrag3oocehEJAAa4BZA51WMU3qvj+skFwuA677nribui M/W+v1zOzEGApFip7/niY4DsSGIxqvpcuH3F8kvVLo2TyAZeydhz9Nj2XSOzSRyB f7PJEZre3vSjpWdg4mhnRD2sprCCzxvnNFtQElkFh3tDIEziRgQWLrnZoR1Tq4Ry nADIr3/BR6JNt5aE/lYfnTFt+JSvqRgjKZ5dky96Je7cuNYSxmYRFgmLaQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEzAt9NFz65TR9POmLQkG5AOSp7zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5LzE2ZDM3 MC1mNjMyLTRjYTEtOGI5Ni0xYmUzMjVmN2EyZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvMTZkMzcw LWY2MzItNGNhMS04Yjk2LTFiZTMyNWY3YTJlMy8xL1RNQzMwMFhQcmxOSDA4Nll0 Q1Fia0E1S252TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuV64MA0EAgACMAcDBQMqBVIAMA0GCSqGSIb3 DQEBCwUAA4IBAQB5HuQiJwWf99JrenMVNJgVJQoXJl3qzP5qtwI8nmF1eAFHDzHJ a5bg0tgkcQNlKrKTyftUHbkfB8P9PmXr26ok61UwmuyqgPRr87IzoTbriZoR2VKU AQnJtcJLig8NnHDcfTFrG4hqG5mEWgWhTBEJbz74e3Cvs06SOf9o95Yg7Wy1nvwV zwEMIcldSaUQ/YMmbGwxEkECbskILKKHKkULHA4SxivzRAXVshV5knEfPcEewZ4W XSCBAGX0rBtoFb/nlYnSCgZ2dX8WG8BvaghYHlvRRSfpuOLV3DJVlAySOeRrD6Vf y5C3Tl9N6RIoc7HMk7ccPFmdk/8/PPleT66C -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:29 2026 by rpki-client