This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer (raw, json) Hash identifier: hfyE8QsPYWlyIfveUXMWP6+BYobQpmgFel5ju5BJFVE= Subject key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B9AA785C5CAE980179F288B94C4B1AAB9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 07 Jan 2026 22:50:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48752 AS: 202197 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9a:a7:85:c5:ca:e9:80:17:9f:28:8b:94:c4:b1:aa:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 7 22:50:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cca52610c77c24069c6a659f5f75862444d21d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:34:c9:2e:bd:a1:98:18:d3:63:9a:68:bc: 92:24:fb:ed:8f:05:b2:b1:b7:6d:e4:57:83:4f:3d: 07:d7:72:5c:5c:1e:86:2d:ea:46:d1:2b:50:9f:46: ad:aa:03:ef:2d:64:4c:8e:18:77:5a:87:0c:cd:c0: 68:ef:03:85:bf:6e:ea:51:92:2d:e9:79:c6:d2:ad: 18:2a:4c:5f:66:3b:8e:85:a1:d5:21:d1:e8:51:f6: f6:07:16:4b:6f:7d:db:07:95:5c:e7:b6:c8:be:de: 55:e3:c8:61:76:b7:ab:6b:5c:66:fc:c7:7b:ff:e1: 8f:6e:91:5b:0e:b0:7d:1b:38:82:46:c9:d1:7c:1d: a2:f1:10:17:d1:18:76:9a:d0:3b:8c:ad:91:2c:ac: a0:b4:b6:66:89:41:9d:53:70:89:67:e9:37:55:fd: 43:20:15:11:58:1e:5a:2c:59:11:83:69:fa:21:dd: 5b:c2:c8:bb:8a:0c:55:f8:f9:e8:3b:09:c9:6d:fb: a5:d1:db:54:0e:32:1d:82:0d:19:96:ca:78:c2:26: 6e:b3:b6:45:43:c1:55:5f:5a:4e:f9:3a:61:2b:20: e0:28:fb:ac:de:d1:3b:2c:91:6a:64:32:72:a2:65: b2:1a:79:65:35:ad:6a:1c:8f:99:fa:a6:bd:f9:54: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48752 202197 Signature Algorithm: sha256WithRSAEncryption 43:2c:c4:af:05:13:64:0e:db:58:40:ea:4c:19:49:57:94:d6: 1d:46:f9:eb:4b:e9:87:fb:d8:51:15:af:0b:a2:27:e9:2f:e9: 2f:b8:51:34:25:8c:d1:da:f6:a3:bc:8d:69:c9:c5:c3:a4:23: 2e:10:b7:69:89:cd:f5:f8:6b:98:0f:b5:e3:f4:c8:bd:44:11: 9f:a4:4c:68:d8:82:2b:b1:96:00:df:2d:4e:64:ce:6a:d4:5b: bb:c1:ec:d9:3a:f9:b8:96:a9:74:b1:11:35:4b:c0:4b:44:07: 6f:72:4f:25:88:8c:73:b6:20:41:8c:bd:34:bb:3f:14:ca:01: 24:b5:a6:6c:a9:c0:be:7c:fb:82:7f:ef:b3:8a:68:ee:e1:45: 85:50:85:f2:8c:2c:d5:12:4c:d2:29:18:f3:76:2d:6e:63:09: 9d:96:ec:62:f2:2a:01:52:78:6a:45:ab:32:6a:ce:82:35:7c: 10:45:07:b4:e7:45:22:53:fc:04:96:25:59:53:c8:35:12:c3: 9f:9d:ff:3a:23:1a:f5:58:b5:80:06:95:1a:f0:81:3e:79:30: 66:59:fc:a9:5e:cd:92:28:67:05:a2:83:9c:b8:06:f5:63:72: 4c:7f:26:9b:23:71:30:b8:08:9f:c6:15:36:50:34:4b:ce:d1: 4e:27:4c:39 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZuap4XFyumAF58oi5TEsaq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA3MjI1MDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2NhNTI2MTBjNzdjMjQwNjljNmE2NTlmNWY3NTg2MjQ0NGQyMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlQ0yS69oZgY02OaaLySJPvtjwWy sbdt5FeDTz0H13JcXB6GLepG0StQn0atqgPvLWRMjhh3WocMzcBo7wOFv27qUZIt 6XnG0q0YKkxfZjuOhaHVIdHoUfb2BxZLb33bB5Vc57bIvt5V48hhdrera1xm/Md7 /+GPbpFbDrB9GziCRsnRfB2i8RAX0Rh2mtA7jK2RLKygtLZmiUGdU3CJZ+k3Vf1D IBURWB5aLFkRg2n6Id1bwsi7igxV+PnoOwnJbful0dtUDjIdgg0Zlsp4wiZus7ZF Q8FVX1pO+TphKyDgKPus3tE7LJFqZDJyomWyGnllNa1qHI+Z+qa9+VRjcQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEzKUmEMd8JAacamWfX3WGJETSHRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzQ5MjFm MC01YzVjLTQwMTQtOGNlZC0xYjAzZTU4OTRlMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvNDkyMWYw LTVjNWMtNDAxNC04Y2VkLTFiMDNlNTg5NGUwNS8xL1RNcFNZUXgzd2tCcHhxWlo5 ZmRZWWtSTklkRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwC+cAIDAxXVMA0GCSqGSIb3DQEBCwUAA4IBAQBDLMSv BRNkDttYQOpMGUlXlNYdRvnrS+mH+9hRFa8LoifpL+kvuFE0JYzR2vajvI1pycXD pCMuELdpic31+GuYD7Xj9Mi9RBGfpExo2IIrsZYA3y1OZM5q1Fu7wezZOvm4lql0 sRE1S8BLRAdvck8liIxztiBBjL00uz8UygEktaZsqcC+fPuCf++zimju4UWFUIXy jCzVEkzSKRjzdi1uYwmdluxi8ioBUnhqRasyas6CNXwQRQe050UiU/wEliVZU8g1 EsOfnf86Ixr1WLWABpUa8IE+eTBmWfypXs2SKGcFooOcuAb1Y3JMfyabI3EwuAif xhU2UDRLztFOJ0w5 -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:33 2026 by rpki-client