This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer (raw, json) Hash identifier: BNopGYuZoAOjp2hUDDEBKJ+6VxVS7hc2AQNz3mlu8Wo= Subject key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2B5FEC18BAC39648816F75B247A6A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.150.104.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b5:fe:c1:8b:ac:39:64:88:16:f7:5b:24:7a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:2b:e6:0c:d4:2b:c2:90:08:db:25:b1:4a: 88:fa:7e:ed:69:0b:97:3b:0e:89:48:62:0d:2b:c6: 48:e2:1f:30:a8:8c:5c:10:22:1e:2d:81:43:8c:73: 93:52:1f:58:e5:55:1a:10:38:d7:77:1a:05:1e:8b: 92:19:c1:41:c8:16:0f:8f:8e:30:cc:3d:29:72:73: a5:33:0a:87:64:d6:d9:59:00:54:d9:45:68:b2:bd: eb:07:2a:06:d9:8b:bb:c0:7d:00:3d:23:4a:bb:26: e2:17:03:1f:76:1b:49:3e:dd:5e:2a:63:e7:4c:5f: b0:e1:4f:a5:ff:f6:e3:79:f6:c9:06:6e:c1:3e:71: a4:f8:a7:7b:78:bb:37:90:4f:f7:2f:6f:02:45:fc: ea:41:ac:3d:b0:7c:0b:71:b7:51:de:ef:96:8e:c9: 88:ce:a2:29:46:36:8f:61:2f:2a:23:75:cc:6d:eb: 02:d3:f5:c9:7e:55:3a:95:e8:b4:05:b7:79:f0:0e: db:e7:c8:46:43:c6:41:6a:fa:65:da:2e:47:41:00: 1e:58:60:36:2e:2b:2a:8b:43:44:a1:35:5a:78:8b: d9:9f:9c:ff:12:b9:99:b1:cf:76:92:71:7d:40:c2: 31:37:ba:7c:ab:64:13:4c:c6:00:1f:ba:7f:de:10: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.104.0/22 Signature Algorithm: sha256WithRSAEncryption 21:c0:94:fd:07:77:d4:3b:b5:15:20:f5:de:6d:df:e0:a0:dd: 34:58:69:46:84:1c:95:4e:8b:aa:be:e4:ea:c4:09:11:29:1c: 7e:b9:98:2b:99:76:fc:96:8c:02:75:b3:7d:87:2b:12:4b:d1: 16:c3:b8:ea:11:d0:b1:68:7b:bf:e3:ba:a1:02:79:ff:9a:2a: c5:b2:3e:2a:38:5c:45:b5:bd:d3:0a:6b:b7:51:e2:e2:8b:19: a7:95:54:61:e3:fa:9e:16:0a:74:53:13:00:5a:df:b4:1a:eb: d1:a5:28:22:b4:14:71:38:f5:e7:5d:78:74:d1:4b:9e:92:fb: 14:fe:dc:c6:a9:36:3e:be:18:6d:57:85:7f:ad:2c:37:9b:80: c5:0b:f8:1f:b5:f5:3a:53:f6:c1:40:3d:a3:c7:b5:84:c7:d2: 64:e6:cd:bf:cc:fc:af:5e:6d:ac:28:e6:20:8c:bd:08:f9:21: 0e:63:58:82:da:26:ad:f8:dc:0c:9f:87:d3:74:23:4e:14:fb: 95:25:9a:fd:b0:3c:f9:1a:6c:ef:58:34:44:6b:03:5c:4e:d7: f6:75:7e:aa:0b:c4:da:02:ac:8f:da:7f:fb:3e:7c:5d:02:87: df:4c:c2:06:e8:11:6f:09:6f:0e:d3:7f:28:c4:16:f0:ed:17: 8c:23:85:43 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4orX+wYusOWSIFvdbJHpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2Q3MWY1YTAwNTBmOGFlNjQ0NGM2Mzg3NjliYTM3NWZkZGJjZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqkr5gzUK8KQCNslsUqI+n7taQuX Ow6JSGINK8ZI4h8wqIxcECIeLYFDjHOTUh9Y5VUaEDjXdxoFHouSGcFByBYPj44w zD0pcnOlMwqHZNbZWQBU2UVosr3rByoG2Yu7wH0APSNKuybiFwMfdhtJPt1eKmPn TF+w4U+l//bjefbJBm7BPnGk+Kd7eLs3kE/3L28CRfzqQaw9sHwLcbdR3u+WjsmI zqIpRjaPYS8qI3XMbesC0/XJflU6lei0Bbd58A7b58hGQ8ZBavpl2i5HQQAeWGA2 Lisqi0NEoTVaeIvZn5z/ErmZsc92knF9QMIxN7p8q2QTTMYAH7p/3hA2/QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFEzXH1oAUPiuZETGOHabo3X9284ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzI3ODM5 OC03MzM5LTQ0YjItYjBiMC03M2EwMWFlNWRlOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvMjc4Mzk4 LTczMzktNDRiMi1iMGIwLTczYTAxYWU1ZGU4Zi8xL1ROY2ZXZ0JRLUs1a1JNWTRk cHVqZGYzYnpoay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLZZoMA0GCSqGSIb3DQEBCwUAA4IBAQAhwJT9 B3fUO7UVIPXebd/goN00WGlGhByVTouqvuTqxAkRKRx+uZgrmXb8lowCdbN9hysS S9EWw7jqEdCxaHu/47qhAnn/mirFsj4qOFxFtb3TCmu3UeLiixmnlVRh4/qeFgp0 UxMAWt+0GuvRpSgitBRxOPXnXXh00UuekvsU/tzGqTY+vhhtV4V/rSw3m4DFC/gf tfU6U/bBQD2jx7WEx9Jk5s2/zPyvXm2sKOYgjL0I+SEOY1iC2iat+NwMn4fTdCNO FPuVJZr9sDz5GmzvWDREawNcTtf2dX6qC8TaAqyP2n/7PnxdAoffTMIG6BFvCW8O 038oxBbw7ReMI4VD -----END CERTIFICATE-----Generated at Mon Jan 26 11:09:04 2026 by rpki-client