This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer File: TQreVMJ-b83aziYsT995DzIP7Zw.cer (raw, json) Hash identifier: D/PRs811EvgUNhyizimcB1AxX77b4zKfGdb05m/Dx44= Subject key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC954C0B73ADE6BB97184A647D20C41 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42400 AS: 49788 AS: 57997 AS: 60130 AS: 60717 AS: 61227 AS: 207031 IP: 45.153.104.0/22 IP: 79.141.96.0/20 IP: 91.90.104.0/21 IP: 91.189.120.0/21 IP: 91.193.0.0/22 IP: 91.209.212.0/24 IP: 91.218.184.0/22 IP: 91.220.165.0/24 IP: 91.221.130.0/23 IP: 91.223.100.0/24 IP: 91.225.60.0/22 IP: 93.184.112.0/21 IP: 151.252.8.0/21 IP: 176.110.116.0/23 IP: 176.111.206.0/23 IP: 185.7.192.0/22 IP: 185.55.104.0/22 IP: 185.56.184.0/22 IP: 185.80.180.0/22 IP: 185.168.72.0/22 IP: 193.202.115.0/24 IP: 2001:67c:230::/48 IP: 2001:67c:1070::/47 IP: 2001:67c:206c::/48 IP: 2a02:5560::/32 IP: 2a02:d140::/29 IP: 2a04:d340::/29 IP: 2a0b:f200::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:54:c0:b7:3a:de:6b:b9:71:84:a6:47:d2:0c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:48:da:2a:22:a5:e4:11:bd:ef:c2:36:f1: 2d:98:cb:71:4b:b4:94:af:2e:8d:42:66:2a:ce:0c: ab:19:97:0d:ea:0d:b3:0b:d9:63:28:44:33:a4:eb: c4:35:eb:9e:d8:af:ca:55:f0:b6:76:e0:ac:d3:de: 1c:55:fc:ca:5c:d4:4b:10:31:31:b2:9a:bf:14:54: 63:79:34:93:11:98:13:b3:77:db:a0:cf:03:eb:93: 2b:fa:8e:97:08:92:7d:60:8a:aa:43:13:da:e0:ff: 1e:dd:b2:c3:8f:de:e4:47:55:59:cf:76:89:6b:b7: e4:fd:86:d0:3b:24:14:32:3d:6f:a3:56:10:77:5a: a6:53:cc:a6:ca:33:3e:8b:f3:8d:e4:1b:93:32:ea: 7a:b5:50:3b:30:1a:97:73:12:12:26:89:19:8c:41: ab:ea:d1:e9:56:f5:1b:80:d8:18:9a:b8:ad:3c:10: d8:59:b5:85:f8:b7:e0:4f:b7:7b:a1:be:19:a4:01: d3:e5:be:fb:ef:b5:c8:74:2c:0b:bb:7b:ca:86:6d: 56:a6:4f:a2:fd:0f:8c:fc:04:d8:a1:97:e9:58:52: f8:a3:2d:68:c3:e8:be:00:d9:29:c5:7a:db:34:04: 01:fc:2e:5c:d9:15:63:1c:86:13:87:1f:99:fd:8e: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.104.0/22 79.141.96.0/20 91.90.104.0/21 91.189.120.0/21 91.193.0.0/22 91.209.212.0/24 91.218.184.0/22 91.220.165.0/24 91.221.130.0/23 91.223.100.0/24 91.225.60.0/22 93.184.112.0/21 151.252.8.0/21 176.110.116.0/23 176.111.206.0/23 185.7.192.0/22 185.55.104.0/22 185.56.184.0/22 185.80.180.0/22 185.168.72.0/22 193.202.115.0/24 IPv6: 2001:67c:230::/48 2001:67c:1070::/47 2001:67c:206c::/48 2a02:5560::/32 2a02:d140::/29 2a04:d340::/29 2a0b:f200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42400 49788 57997 60130 60717 61227 207031 Signature Algorithm: sha256WithRSAEncryption 05:96:71:34:5d:66:a4:f8:84:9a:5c:eb:46:12:ff:b6:59:bb: 70:78:9f:25:c2:92:96:01:b7:f0:34:c0:5c:a8:d5:e4:ee:24: 6c:f8:32:5a:00:c0:27:f3:f4:fd:ed:40:f5:14:c7:84:69:5a: 3c:87:a9:e1:c8:0c:03:dc:b1:93:14:fe:4a:91:2e:54:87:8b: 51:6a:90:fd:cd:89:58:86:7c:72:ac:a3:91:fb:0a:c1:3a:4c: 88:d7:f7:67:de:4c:8e:1b:15:73:32:72:6b:50:b5:c6:b9:e9: 1b:21:d0:74:e7:aa:41:cf:2e:91:c8:f8:d8:2b:35:8a:19:e4: 3a:a0:9f:d2:65:bb:03:e1:e2:f2:c7:bc:1c:c1:24:ea:81:43: e3:9d:82:4e:ee:46:21:89:28:12:b0:be:52:ed:da:9a:f0:e2: 6f:aa:fa:33:2a:be:c2:0b:cc:54:e1:d4:34:be:e6:a5:89:97: 19:8e:63:a7:8b:b4:6a:31:94:2e:4e:84:88:ba:44:9b:49:0c: 91:d5:3e:ff:e8:fe:64:47:b5:30:cd:0f:0c:28:83:13:27:fa: 39:66:98:b7:72:21:76:c1:20:60:15:21:75:18:95:6b:45:9b: b4:9c:8a:c5:24:28:a7:0a:60:2f:9a:c2:ef:bb:70:97:a8:58: da:b1:5e:02 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgISAZt9yVTAtzrea7lxhKZH0gxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDBhZGU1NGMyN2U2ZmNkZGFjZTI2MmM0ZmRmNzkwZjMyMGZlZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+lI2ioipeQRve/CNvEtmMtxS7SU ry6NQmYqzgyrGZcN6g2zC9ljKEQzpOvENeue2K/KVfC2duCs094cVfzKXNRLEDEx spq/FFRjeTSTEZgTs3fboM8D65Mr+o6XCJJ9YIqqQxPa4P8e3bLDj97kR1VZz3aJ a7fk/YbQOyQUMj1vo1YQd1qmU8ymyjM+i/ON5BuTMup6tVA7MBqXcxISJokZjEGr 6tHpVvUbgNgYmritPBDYWbWF+LfgT7d7ob4ZpAHT5b7777XIdCwLu3vKhm1Wpk+i /Q+M/ATYoZfpWFL4oy1ow+i+ANkpxXrbNAQB/C5c2RVjHIYThx+Z/Y6kSwIDAQAB o4IDeTCCA3UwHQYDVR0OBBYEFE0K3lTCfm/N2s4mLE/feQ8yD+2cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzhlZmQ4 Yi1lNTE2LTRjNDktOTJjYi04OTI5NmNjYjM1ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvOGVmZDhi LWU1MTYtNGM0OS05MmNiLTg5Mjk2Y2NiMzVmNS8xL1RRcmVWTUotYjgzYXppWXNU OTk1RHpJUDdady5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHZBggrBgEF BQcBBwEB/wSByTCBxjCBhAQCAAEwfgMEAi2ZaAMEBE+NYAMEA1taaAMEA1u9eAME AlvBAAMEAFvR1AMEAlvauAMEAFvcpQMEAVvdggMEAFvfZAMEAlvhPAMEA124cAME A5f8CAMEAbBudAMEAbBvzgMEArkHwAMEArk3aAMEArk4uAMEArlQtAMEArmoSAME AMHKczA9BAIAAjA3AwcAIAEGfAIwAwcBIAEGfBBwAwcAIAEGfCBsAwUAKgJVYAMF AyoC0UADBQMqBNNAAwUAKgvyADA4BggrBgEFBQcBCAEB/wQpMCegJTAjAgMApaAC AwDCfAIDAOKNAgMA6uICAwDtLQIDAO8rAgMDKLcwDQYJKoZIhvcNAQELBQADggEB AAWWcTRdZqT4hJpc60YS/7ZZu3B4nyXCkpYBt/A0wFyo1eTuJGz4MloAwCfz9P3t QPUUx4RpWjyHqeHIDAPcsZMU/kqRLlSHi1FqkP3NiViGfHKso5H7CsE6TIjX92fe TI4bFXMycmtQtca56Rsh0HTnqkHPLpHI+NgrNYoZ5Dqgn9JluwPh4vLHvBzBJOqB Q+Odgk7uRiGJKBKwvlLt2prw4m+q+jMqvsILzFTh1DS+5qWJlxmOY6eLtGoxlC5O hIi6RJtJDJHVPv/o/mRHtTDNDwwogxMn+jlmmLdyIXbBIGAVIXUYlWtFm7ScisUk KKcKYC+awu+7cJeoWNqxXgI= -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:37 2026 by rpki-client