This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer (raw, json) Hash identifier: enXAr8iz/J41ssGMG4OtcXnqDXBPgqlklsqK1B4Jw9M= Subject key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2ADA120D93A577F9DF8E747ACD1A7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206658 IP: 45.137.232.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:ad:a1:20:d9:3a:57:7f:9d:f8:e7:47:ac:d1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ce90379bd8d04374b3adef060d51ae215710935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:a5:21:2f:a7:7d:c4:91:92:72:79:72:64: 6f:c9:92:99:c8:aa:6e:39:90:9d:19:b1:43:1a:c6: e1:08:6b:42:12:e9:a8:82:1d:5d:06:eb:d4:99:93: 3c:d6:b1:18:f0:a9:ee:2c:3e:85:c2:c1:fd:4a:9d: dc:b8:61:b8:98:38:bc:9e:bd:64:d0:78:82:80:a9: 8a:10:e8:0c:a4:16:51:2c:91:1e:00:58:0c:49:8f: fd:69:75:1b:04:d5:ec:7d:28:e8:be:a2:3a:82:76: 03:83:61:ea:7d:ca:05:be:3d:bb:3c:6a:67:2b:e0: 42:54:cf:1b:2b:44:dd:71:20:dd:64:fa:d6:66:83: d7:e4:fb:da:e3:cd:d0:2b:1c:b3:b3:c5:1a:0e:47: 94:e8:10:fe:12:4f:66:73:22:da:92:10:67:0d:46: 9c:39:ef:d5:3e:e9:69:c7:f5:2b:40:b4:1f:75:6f: e8:72:7d:98:a2:c3:d9:cd:40:68:eb:6c:b0:52:8d: 16:9c:63:27:33:8f:db:c1:78:94:fa:51:2b:cb:e9: 6e:b2:2a:40:27:5a:a4:c3:0e:25:c8:6a:30:5f:e4: 3f:08:15:60:0e:2d:b7:91:fe:5e:2e:e4:17:d5:3e: d1:a0:c2:14:8d:69:81:10:38:50:43:e8:e8:7e:b3: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.232.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206658 Signature Algorithm: sha256WithRSAEncryption 5b:2d:f3:eb:44:55:74:21:a5:5a:af:b6:13:42:b7:74:35:10: 05:af:2a:0b:94:a9:a3:ad:9f:b5:84:be:b3:f5:eb:81:6a:15: 78:39:8b:0a:9f:a9:1a:58:20:7c:67:9d:27:d9:2e:81:dc:b9: 4b:94:50:f9:f0:ca:41:fd:a7:c8:87:c1:79:05:7c:72:04:bb: b9:8b:31:15:d2:1c:82:4a:65:6a:b9:88:5f:c8:50:e8:63:f6: 80:33:59:19:46:a0:df:f7:fe:a9:9a:f8:90:e4:05:82:a2:66: 18:07:9f:b7:a1:4e:df:8c:52:5d:04:40:df:96:27:c2:89:63: 8e:b1:c9:26:60:0d:40:13:a8:03:78:bc:d7:bd:1f:4b:99:e8: ae:81:75:d7:78:60:70:55:c5:6e:81:c4:ab:33:19:4f:55:8d: 15:99:34:04:83:b8:49:68:01:7d:b7:ab:85:32:0a:84:71:d4: d7:52:ed:b6:b2:07:05:da:fc:83:a6:63:db:92:37:8d:61:7c: 2e:4b:f1:6c:50:b8:d6:8b:bf:29:b3:c5:6d:9e:48:a6:48:b8: 14:db:b6:a1:d5:07:1e:09:96:73:d5:81:f4:d3:ac:a3:c3:6b: 3a:b6:fc:eb:93:72:be:b7:c9:87:d9:3b:e2:7b:27:99:d0:6e: 8a:7f:0e:e9 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8q2hINk6V3+d+OdHrNGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2U5MDM3OWJkOGQwNDM3NGIzYWRlZjA2MGQ1MWFlMjE1NzEwOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwGlIS+nfcSRknJ5cmRvyZKZyKpu OZCdGbFDGsbhCGtCEumogh1dBuvUmZM81rEY8KnuLD6FwsH9Sp3cuGG4mDi8nr1k 0HiCgKmKEOgMpBZRLJEeAFgMSY/9aXUbBNXsfSjovqI6gnYDg2HqfcoFvj27PGpn K+BCVM8bK0TdcSDdZPrWZoPX5Pva483QKxyzs8UaDkeU6BD+Ek9mcyLakhBnDUac Oe/VPulpx/UrQLQfdW/ocn2YosPZzUBo62ywUo0WnGMnM4/bwXiU+lEry+lusipA J1qkww4lyGowX+Q/CBVgDi23kf5eLuQX1T7RoMIUjWmBEDhQQ+jofrP0HQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEzpA3m9jQQ3Szre8GDVGuIVcQk1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzliYWNm OC0xNDZjLTRiNjMtOWQzNi04MjAwYjg2NjAzYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvOWJhY2Y4 LTE0NmMtNGI2My05ZDM2LTgyMDBiODY2MDNiMS8xL1RPa0RlYjJOQkRkTE90N3dZ TlVhNGhWeENUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLYnoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMnQjANBgkqhkiG9w0BAQsFAAOCAQEAWy3z60RVdCGlWq+2E0K3dDUQBa8qC5Sp o62ftYS+s/XrgWoVeDmLCp+pGlggfGedJ9kugdy5S5RQ+fDKQf2nyIfBeQV8cgS7 uYsxFdIcgkplarmIX8hQ6GP2gDNZGUag3/f+qZr4kOQFgqJmGAeft6FO34xSXQRA 35YnwoljjrHJJmANQBOoA3i8170fS5noroF113hgcFXFboHEqzMZT1WNFZk0BIO4 SWgBfberhTIKhHHU11LttrIHBdr8g6Zj25I3jWF8LkvxbFC41ou/KbPFbZ5Ipki4 FNu2odUHHgmWc9WB9NOso8NrOrb865NyvrfJh9k74nsnmdBuin8O6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 17:00:17 2026 by rpki-client