This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer File: TRMSiBUQNXRBfKenBBLaOrO4RRE.cer (raw, json) Hash identifier: K6Cj7wxvwZTyeGpgDdRhIb2xOQFTHGeHgh5hnMiZ/cM= Subject key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5198244D103BBF13434E4426275B4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8587 IP: 91.208.251.0/24 IP: 91.209.14.0/24 IP: 91.209.21.0 -- 91.209.22.255 IP: 94.247.72.0/21 IP: 195.114.224.0/20 IP: 212.104.210.0/24 IP: 2a02:ca0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:19:82:44:d1:03:bb:f1:34:34:e4:42:62:75:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d13128815103574417ca7a70412da3ab3b84511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:cf:3b:eb:ed:b9:81:19:d1:42:40:6f:d8: 56:35:60:ce:87:5c:65:de:d3:26:4c:30:1f:ff:76: 25:58:3a:08:5d:8e:af:db:37:a5:99:5b:14:46:78: 0f:d1:32:70:ba:dd:31:b9:3f:cd:9c:ee:9a:0a:c6: b6:3e:97:c9:15:53:ec:b3:4b:fa:c5:5a:b8:5e:2f: 5f:bb:28:d4:98:df:23:0b:7b:f5:b8:76:57:bc:52: ac:9d:9c:15:38:de:12:e5:15:f2:ba:19:c7:88:84: a2:83:25:52:10:af:4e:b2:dc:58:2c:6e:d0:e3:88: 9c:83:58:f0:03:e6:a3:bb:ca:65:6d:00:ca:c1:8a: 04:60:50:b9:de:33:51:e7:07:aa:d1:11:61:18:75: 8d:05:75:4f:5e:ac:77:83:e2:7d:a5:7c:57:04:52: 37:be:d6:41:cb:b9:64:95:e9:61:92:87:c6:7a:d3: 8d:e0:05:13:ac:7a:83:35:00:37:a6:e3:8e:d5:d9: 3c:cf:d0:22:a7:fd:c5:c8:fe:f7:31:6c:73:29:5b: 61:09:4d:b3:59:c1:65:4f:5e:2a:ad:79:0a:53:fb: 11:14:8e:e7:31:8e:9a:b1:57:15:07:03:f6:b7:1d: 33:2d:cd:91:1d:fb:2b:d1:24:ca:d6:de:b9:80:6c: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.251.0/24 91.209.14.0/24 91.209.21.0-91.209.22.255 94.247.72.0/21 195.114.224.0/20 212.104.210.0/24 IPv6: 2a02:ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8587 Signature Algorithm: sha256WithRSAEncryption 79:c7:f0:67:47:fb:b5:3c:03:63:18:70:ff:14:6f:e4:4a:af: dc:c9:40:16:79:1d:b3:c0:76:2c:dc:3b:15:5d:03:94:a1:96: 62:74:46:0c:02:76:38:d3:91:f3:8e:47:c2:ab:ec:a8:08:c3: f1:12:96:8b:ac:14:c4:2c:03:0a:da:58:ae:87:a0:9f:58:db: c4:eb:ed:b8:82:85:ff:ed:0d:2c:9e:53:7a:7d:fb:eb:bb:af: 4e:9c:1d:56:16:fd:ac:1f:7d:3c:7f:4a:ad:28:71:59:b3:23: 0e:03:65:ad:8c:a1:e6:79:0a:6f:ba:c2:13:89:48:01:81:85: ee:8b:a4:de:b9:c2:c6:7a:85:ff:26:ab:46:c9:ed:cc:49:36: 99:4a:a5:65:9e:1b:9b:06:02:68:49:b6:f8:fd:b9:e9:d4:f3: 61:f3:16:07:1f:fe:78:c2:55:01:1f:4b:fc:e4:ba:79:49:14: d3:98:c4:49:22:d5:fa:ba:7f:6d:05:82:65:c3:58:ce:55:d0: ac:13:84:05:27:1d:a5:f3:1a:36:7f:5c:5e:fd:e4:54:0e:e8: 72:65:ff:d7:8f:a4:da:4d:f6:53:c5:8e:cf:c6:fa:22:e8:ca: 2a:1d:dc:6b:c2:39:d2:d6:ae:59:d1:95:2e:97:ee:0b:b2:02: 43:70:9c:ad -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt+pRmCRNEDu/E0NORCYnW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDEzMTI4ODE1MTAzNTc0NDE3Y2E3YTcwNDEyZGEzYWIzYjg0NTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9fPO+vtuYEZ0UJAb9hWNWDOh1xl 3tMmTDAf/3YlWDoIXY6v2zelmVsURngP0TJwut0xuT/NnO6aCsa2PpfJFVPss0v6 xVq4Xi9fuyjUmN8jC3v1uHZXvFKsnZwVON4S5RXyuhnHiISigyVSEK9OstxYLG7Q 44icg1jwA+aju8plbQDKwYoEYFC53jNR5weq0RFhGHWNBXVPXqx3g+J9pXxXBFI3 vtZBy7lklelhkofGetON4AUTrHqDNQA3puOO1dk8z9Aip/3FyP73MWxzKVthCU2z WcFlT14qrXkKU/sRFI7nMY6asVcVBwP2tx0zLc2RHfsr0STK1t65gGy1UQIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFE0TEogVEDV0QXynpwQS2jqzuEURMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2ZhZmZj Mi05NTE3LTRkMTgtODk5My1mNTVlYTQ4Y2U3NWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvZmFmZmMy LTk1MTctNGQxOC04OTkzLWY1NWVhNDhjZTc1YS8xL1RSTVNpQlVRTlhSQmZLZW5C QkxhT3JPNFJSRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFQGCCsGAQUF BwEHAQH/BEUwQzAyBAIAATAsAwQAW9D7AwQAW9EOMAwDBABb0RUDBABb0RYDBANe 90gDBATDcuADBADUaNIwDQQCAAIwBwMFACoCDKAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICIYswDQYJKoZIhvcNAQELBQADggEBAHnH8GdH+7U8A2MYcP8Ub+RKr9zJ QBZ5HbPAdizcOxVdA5ShlmJ0RgwCdjjTkfOOR8Kr7KgIw/ESlousFMQsAwraWK6H oJ9Y28Tr7biChf/tDSyeU3p9++u7r06cHVYW/awffTx/Sq0ocVmzIw4DZa2MoeZ5 Cm+6whOJSAGBhe6LpN65wsZ6hf8mq0bJ7cxJNplKpWWeG5sGAmhJtvj9uenU82Hz Fgcf/njCVQEfS/zkunlJFNOYxEki1fq6f20FgmXDWM5V0KwThAUnHaXzGjZ/XF79 5FQO6HJl/9ePpNpN9lPFjs/G+iLoyiod3GvCOdLWrlnRlS6X7guyAkNwnK0= -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:50 2026 by rpki-client