This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer (raw, json) Hash identifier: ev6aSehk5aJQdyex47lSTwL8GGa5VzCJETVQV43nXHg= Subject key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AC1F444A956B84CF72259BDEF14C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.224.230.0/23 IP: 185.97.204.0/22 IP: 193.34.32.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c1:f4:44:a9:56:b8:4c:f7:22:59:bd:ef:14:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d1527d1839bf830360d71590134354e6d904697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:b1:a4:a7:71:63:68:5d:cd:b9:c3:ad:f8: db:3f:fd:11:17:4e:d1:7c:74:00:8c:a8:a4:b1:d2: a0:ad:32:e3:77:7d:9c:f0:06:77:81:d0:c4:b6:d6: 34:bc:60:25:e8:95:a2:64:e4:39:bd:5c:21:e9:60: 41:c6:2e:b1:9f:ba:bc:0e:06:fb:b6:37:67:bd:ed: 3a:3a:61:56:4f:fe:2d:ab:95:4c:d0:bc:53:74:ab: 0c:82:06:1f:30:f5:80:92:99:e5:63:04:c0:9b:5a: 1b:4d:a8:35:9f:7f:79:1b:74:f5:f7:38:2f:35:c6: a8:cf:34:42:c4:cd:0b:ef:25:6f:e8:45:00:78:2a: 9c:59:d6:62:90:a9:27:73:01:30:20:e8:3d:af:2a: 07:0f:5c:3e:2b:01:51:fe:31:12:c3:5a:02:01:a0: 42:b4:c2:29:55:e7:cf:3c:3c:3f:45:87:54:93:95: 96:20:5a:dd:95:e7:c9:1b:22:41:0d:44:cf:be:f1: df:ea:20:55:ae:68:85:b8:4c:ce:9f:93:f0:8b:14: 40:28:f8:92:1e:c6:41:8a:ed:4e:de:36:fe:d0:ef: e6:54:24:00:38:d3:d3:84:30:3d:6d:be:e3:53:10: 35:9c:74:b8:6c:9d:5f:d9:88:44:0b:f2:e7:82:03: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.230.0/23 185.97.204.0/22 193.34.32.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:a3:84:e2:10:d6:22:b4:81:e1:1c:68:7b:63:21:bd:e3:84: 7f:16:48:00:de:34:8c:f2:1a:a3:ba:02:ea:d2:55:f4:8d:12: 86:f4:c0:05:05:8f:53:96:17:da:af:64:07:ab:b8:77:c6:5c: 46:8d:0f:8a:7b:f8:e3:e6:e8:d1:80:71:82:22:92:ef:b1:7b: 3f:b3:53:d6:0f:1a:3f:52:a9:e9:b5:f8:5c:e4:d5:c7:92:e5: f7:d2:e8:4c:88:07:52:27:44:79:ef:a1:4c:bc:45:6a:6c:3c: 25:8f:ee:d7:4c:c5:5e:21:55:9a:0f:7d:4f:fa:e0:5e:68:bb: 84:86:33:97:5f:42:75:c1:12:ad:d4:b9:f0:1e:90:97:fb:c2: 52:b4:10:55:a5:33:2f:5d:51:ae:f5:96:85:4e:09:b9:49:32: 3a:67:fb:a5:b0:02:73:a8:b0:50:05:4a:b7:a5:80:84:60:97: fc:57:fa:d8:d4:2b:fe:01:e9:c8:21:d2:8c:ec:b6:34:29:56: 32:e6:3a:00:a5:e6:c4:be:5a:6b:1b:28:5f:1d:a9:5b:99:e7: 2f:6a:58:c5:9b:5e:5a:c2:f5:a3:f4:a1:1d:02:35:c6:fd:a2: 90:16:8a:c9:63:6b:ed:44:76:bc:d8:54:ae:ba:a1:30:f2:91: 90:e2:6f:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt6WsH0RKlWuEz3Ilm97xTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDE1MjdkMTgzOWJmODMwMzYwZDcxNTkwMTM0MzU0ZTZkOTA0Njk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0expKdxY2hdzbnDrfjbP/0RF07R fHQAjKiksdKgrTLjd32c8AZ3gdDEttY0vGAl6JWiZOQ5vVwh6WBBxi6xn7q8Dgb7 tjdnve06OmFWT/4tq5VM0LxTdKsMggYfMPWAkpnlYwTAm1obTag1n395G3T19zgv NcaozzRCxM0L7yVv6EUAeCqcWdZikKkncwEwIOg9ryoHD1w+KwFR/jESw1oCAaBC tMIpVefPPDw/RYdUk5WWIFrdlefJGyJBDUTPvvHf6iBVrmiFuEzOn5PwixRAKPiS HsZBiu1O3jb+0O/mVCQAONPThDA9bb7jUxA1nHS4bJ1f2YhEC/LnggOHpQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFE0VJ9GDm/gwNg1xWQE0NU5tkEaXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzMwOWQz Ni1jNDIwLTQzMjEtOTU0MC1mM2RmNjczZWE1OGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMzA5ZDM2 LWM0MjAtNDMyMS05NTQwLWYzZGY2NzNlYTU4Yy8xL1RSVW4wWU9iLURBMkRYRlpB VFExVG0yUVJwYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQBW+DmAwQCuWHMAwQCwSIgMA0GCSqGSIb3DQEB CwUAA4IBAQANo4TiENYitIHhHGh7YyG944R/FkgA3jSM8hqjugLq0lX0jRKG9MAF BY9Tlhfar2QHq7h3xlxGjQ+Ke/jj5ujRgHGCIpLvsXs/s1PWDxo/Uqnptfhc5NXH kuX30uhMiAdSJ0R576FMvEVqbDwlj+7XTMVeIVWaD31P+uBeaLuEhjOXX0J1wRKt 1LnwHpCX+8JStBBVpTMvXVGu9ZaFTgm5STI6Z/ulsAJzqLBQBUq3pYCEYJf8V/rY 1Cv+AenIIdKM7LY0KVYy5joApebEvlprGyhfHalbmecvaljFm15awvWj9KEdAjXG /aKQForJY2vtRHa82FSuuqEw8pGQ4m/N -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:11 2026 by rpki-client