This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer (raw, json) Hash identifier: tCUqckbYLU0kGhJ/8y6QzYQOhPJdsJ+Mth8fGL0tptA= Subject key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11F14A99789C5A953AF96F25B5B303 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6675 AS: 8220 AS: 8372 AS: 9126 AS: 12640 AS: 12755 AS: 12761 AS: 12878 AS: 15404 IP: 46.248.128.0/19 IP: 57.133.0.0/16 IP: 58.0.0.0/16 IP: 58.1.128.0/17 IP: 62.23.0.0/16 IP: 62.72.96.0/19 IP: 62.84.192.0/19 IP: 62.96.0.0/16 IP: 62.97.64.0/18 IP: 62.152.96.0/19 IP: 62.192.0.0/19 IP: 78.143.0.0/18 IP: 78.156.64.0/19 IP: 80.80.0.0/19 IP: 80.169.0.0/16 IP: 80.251.160.0/19 IP: 82.112.192.0/19 IP: 84.14.0.0/16 IP: 84.16.160.0/19 IP: 85.88.128.0/19 IP: 87.241.0.0/18 IP: 116.83.0.0/17 IP: 118.67.224.0/19 IP: 134.128.128.0/18 IP: 136.225.0.0/16 IP: 157.120.224.0/21 IP: 157.120.236.0 -- 157.120.255.255 IP: 178.159.176.0/20 IP: 193.82.32.0/19 IP: 193.93.80.0/22 IP: 193.114.160.0/19 IP: 193.118.160.0/19 IP: 193.118.224.0/19 IP: 193.188.132.0/23 IP: 194.223.128.0 -- 194.223.139.255 IP: 195.68.0.0/17 IP: 195.110.64.0/19 IP: 212.0.96.0/19 IP: 212.23.224.0/19 IP: 212.31.224.0/19 IP: 212.35.96.0/19 IP: 212.36.128.0/18 IP: 212.74.64.0/19 IP: 212.78.160.0/19 IP: 212.121.128.0/19 IP: 212.123.192.0/18 IP: 212.161.0.0/17 IP: 212.203.64.0/18 IP: 213.27.128.0/17 IP: 213.41.0.0/17 IP: 213.61.0.0/16 IP: 213.86.0.0/16 IP: 213.164.0.0/19 IP: 213.173.160.0/19 IP: 213.185.160.0/19 IP: 213.208.192.0/18 IP: 213.215.128.0/17 IP: 213.229.128.0/18 IP: 213.246.192.0/18 IP: 217.110.0.0/15 IP: 217.173.96.0/20 IP: 2001:920::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f1:4a:99:78:9c:5a:95:3a:f9:6f:25:b5:b3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:94:da:e4:b5:6d:20:41:31:fd:17:3e:4a: 20:af:31:a0:4d:03:6b:7a:aa:ec:ac:76:56:3e:72: f9:33:60:b6:0a:aa:d0:ef:48:9d:f0:5c:a9:ea:70: 84:c5:f3:b9:cc:e2:df:c2:5e:63:3e:1b:df:16:b8: b8:ab:e2:cc:e8:f5:36:9a:2f:68:e0:90:09:26:e9: 30:10:1a:5c:3e:8b:6f:2b:1b:36:0c:f5:95:2d:16: 27:c1:bf:a4:e7:4a:de:cc:b8:e6:c4:b2:52:f8:18: 72:3b:b0:b0:a7:a4:fd:3a:5c:c7:b7:a0:9a:71:cb: f4:5b:b1:8c:6f:49:af:43:55:c7:f3:b9:c0:6f:12: 9f:e8:16:60:e4:23:4c:4c:f2:ce:33:40:60:bc:14: 94:67:27:9e:35:ab:4e:07:5b:af:b7:ed:a5:e1:bd: 57:4c:64:a9:1c:c4:58:12:77:70:4d:07:94:b5:0c: fd:c4:1a:3b:11:90:ed:67:f7:dd:5d:68:3b:91:9a: 82:45:47:92:ad:a4:91:04:3c:70:58:42:01:ad:53: 34:da:ff:97:50:a0:7f:a7:f4:4d:0e:65:f3:8d:90: 3c:11:6c:b3:8d:8e:09:2e:9f:4a:d3:4a:13:8a:5d: a2:65:1e:68:32:43:1b:cf:67:85:69:3c:29:45:6c: aa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.248.128.0/19 57.133.0.0/16 58.0.0.0/16 58.1.128.0/17 62.23.0.0/16 62.72.96.0/19 62.84.192.0/19 62.96.0.0/16 62.97.64.0/18 62.152.96.0/19 62.192.0.0/19 78.143.0.0/18 78.156.64.0/19 80.80.0.0/19 80.169.0.0/16 80.251.160.0/19 82.112.192.0/19 84.14.0.0/16 84.16.160.0/19 85.88.128.0/19 87.241.0.0/18 116.83.0.0/17 118.67.224.0/19 134.128.128.0/18 136.225.0.0/16 157.120.224.0/21 157.120.236.0-157.120.255.255 178.159.176.0/20 193.82.32.0/19 193.93.80.0/22 193.114.160.0/19 193.118.160.0/19 193.118.224.0/19 193.188.132.0/23 194.223.128.0-194.223.139.255 195.68.0.0/17 195.110.64.0/19 212.0.96.0/19 212.23.224.0/19 212.31.224.0/19 212.35.96.0/19 212.36.128.0/18 212.74.64.0/19 212.78.160.0/19 212.121.128.0/19 212.123.192.0/18 212.161.0.0/17 212.203.64.0/18 213.27.128.0/17 213.41.0.0/17 213.61.0.0/16 213.86.0.0/16 213.164.0.0/19 213.173.160.0/19 213.185.160.0/19 213.208.192.0/18 213.215.128.0/17 213.229.128.0/18 213.246.192.0/18 217.110.0.0/15 217.173.96.0/20 IPv6: 2001:920::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6675 8220 8372 9126 12640 12755 12761 12878 15404 Signature Algorithm: sha256WithRSAEncryption 47:15:cf:f0:31:de:45:9c:ac:d2:9e:99:a2:b1:49:ae:cb:f8: 8d:e2:84:e3:ea:02:0f:b4:cc:df:df:10:62:b8:95:b9:cf:fd: 4c:ed:95:99:4f:5e:e2:7f:9b:16:54:5f:1c:aa:4c:5c:da:45: c8:8e:10:8b:45:f8:ae:6b:98:57:36:bb:81:b4:a0:e5:f5:bf: 29:25:5f:80:6d:6d:a7:5b:29:28:9d:a3:32:2d:e8:1d:ed:5f: e1:15:34:14:f4:01:2d:58:a3:eb:69:78:d7:44:58:9f:9c:f1: 44:4a:60:86:9e:49:93:dc:33:f3:7f:a2:01:95:c5:42:48:c7: 3b:fd:3b:c8:68:14:8f:a5:4d:a0:23:a0:56:80:86:69:8a:35: e7:9d:54:70:0e:ff:d8:c7:c7:39:ab:27:48:24:9e:63:4f:6d: 50:81:6f:9b:77:75:7b:bb:48:e3:be:23:d8:ca:05:82:bc:6f: 03:40:33:ce:d8:4b:38:5d:bb:69:31:10:d7:f3:14:c9:2a:58: c0:74:a0:3c:cc:d8:5d:19:21:e6:aa:76:fd:3d:89:28:62:c9: 99:ae:06:9d:5a:7c:49:5f:a5:e6:f0:9f:04:04:98:97:d4:08: 97:2b:e6:27:9a:33:37:2a:4e:7c:b3:ce:76:d3:9d:a9:3d:a3: 76:f7:f8:a1 -----BEGIN CERTIFICATE----- MIIHOTCCBiGgAwIBAgISAZt8EfFKmXicWpU6+W8ltbMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2Y4ZmZjMDg4NTkxZTRmMjQzYmFhZmEyMWI0Mjk4YmZiMzY2MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaOU2uS1bSBBMf0XPkogrzGgTQNr eqrsrHZWPnL5M2C2CqrQ70id8Fyp6nCExfO5zOLfwl5jPhvfFri4q+LM6PU2mi9o 4JAJJukwEBpcPotvKxs2DPWVLRYnwb+k50rezLjmxLJS+BhyO7Cwp6T9OlzHt6Ca ccv0W7GMb0mvQ1XH87nAbxKf6BZg5CNMTPLOM0BgvBSUZyeeNatOB1uvt+2l4b1X TGSpHMRYEndwTQeUtQz9xBo7EZDtZ/fdXWg7kZqCRUeSraSRBDxwWEIBrVM02v+X UKB/p/RNDmXzjZA8EWyzjY4JLp9K00oTil2iZR5oMkMbz2eFaTwpRWyq/wIDAQAB o4IERTCCBEEwHQYDVR0OBBYEFEz4/8CIWR5PJDuq+iG0KYv7NmAmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2EwYTM5 Yy1iZTAzLTQ3YmItYmRiMy1iM2I3OGIwYjY2ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvYTBhMzlj LWJlMDMtNDdiYi1iZGIzLWIzYjc4YjBiNjZlYS8xL1RQal93SWhaSGs4a082cjZJ YlFwaV9zMllDWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBowYIKwYB BQUHAQcBAf8EggGSMIIBjjCCAXsEAgABMIIBcwMEBS74gAMDADmFAwMAOgADBAc6 AYADAwA+FwMEBT5IYAMEBT5UwAMDAD5gAwQGPmFAAwQFPphgAwQFPsAAAwQGTo8A AwQFTpxAAwQFUFAAAwMAUKkDBAVQ+6ADBAVScMADAwBUDgMEBVQQoAMEBVVYgAME BlfxAAMEB3RTAAMEBXZD4AMEBoaAgAMDAIjhAwQDnXjgMAsDBAKdeOwDAwCdeAME BLKfsAMEBcFSIAMEAsFdUAMEBcFyoAMEBcF2oAMEBcF24AMEAcG8hDAMAwQHwt+A AwQCwt+IAwQHw0QAAwQFw25AAwQF1ABgAwQF1BfgAwQF1B/gAwQF1CNgAwQG1CSA AwQF1EpAAwQF1E6gAwQF1HmAAwQG1HvAAwQH1KEAAwQG1MtAAwQH1RuAAwQH1SkA AwMA1T0DAwDVVgMEBdWkAAMEBdWtoAMEBdW5oAMEBtXQwAMEB9XXgAMEBtXlgAME BtX2wAMDAdluAwQE2a1gMA0EAgACMAcDBQMgAQkgMDkGCCsGAQUFBwEIAQH/BCow KKAmMCQCAhoTAgIgHAICILQCAiOmAgIxYAICMdMCAjHZAgIyTgICPCwwDQYJKoZI hvcNAQELBQADggEBAEcVz/Ax3kWcrNKemaKxSa7L+I3ihOPqAg+0zN/fEGK4lbnP /UztlZlPXuJ/mxZUXxyqTFzaRciOEItF+K5rmFc2u4G0oOX1vyklX4BtbadbKSid ozIt6B3tX+EVNBT0AS1Yo+tpeNdEWJ+c8URKYIaeSZPcM/N/ogGVxUJIxzv9O8ho FI+lTaAjoFaAhmmKNeedVHAO/9jHxzmrJ0gknmNPbVCBb5t3dXu7SOO+I9jKBYK8 bwNAM87YSzhdu2kxENfzFMkqWMB0oDzM2F0ZIeaqdv09iShiyZmuBp1afElfpebw nwQEmJfUCJcr5ieaMzcqTnyzznbTnak9o3b3+KE= -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:52 2026 by rpki-client