This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer File: TS-f1cihTNyfMcRYXNYNtXz_tMI.cer (raw, json) Hash identifier: zHx/+8U86hU+vLe+CWaaSVg/R2K0K8c7Z8XFp6Xo/HI= Subject key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791142304A429A592757797AA1494235 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34022 IP: 193.17.195.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:42:30:4a:42:9a:59:27:57:79:7a:a1:49:42:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:de:63:e3:cf:2e:84:88:21:1a:63:51:26: 88:c4:b5:d6:0c:a5:05:5b:81:55:1c:02:32:a0:ca: 87:d4:75:36:37:01:3e:97:4e:8e:f4:f2:21:78:91: bb:2d:77:3b:a9:9f:2a:49:e0:8f:cd:66:06:d5:c4: 9f:a7:3e:25:89:eb:48:b2:3e:63:7a:e3:5e:d3:64: 71:36:4b:f0:00:21:98:3c:cb:e8:a2:38:86:ec:b2: 7f:f7:61:68:22:49:5e:0a:3b:d9:9b:f6:22:6b:26: e8:b0:a2:ac:bc:b3:75:75:91:38:be:6c:06:c0:42: 6b:75:fb:24:c9:72:da:29:ae:91:49:c7:56:ce:77: ef:a2:bc:5f:02:25:18:c1:2a:9e:0a:70:87:e1:6f: 3b:25:45:14:3c:c1:80:2b:32:6c:e3:3d:40:15:87: b2:1d:53:d5:a9:db:90:6e:cd:9e:75:18:d2:1d:b7: ee:3c:6e:7a:10:b8:ea:d1:57:3a:fe:ba:34:5b:28: 8f:05:78:9a:e9:f7:90:4c:6e:23:ac:e9:42:95:17: 70:88:a0:84:47:ce:bf:22:0a:d9:86:a2:97:84:7c: ae:7d:4d:2d:25:17:a3:22:4a:72:e0:da:4a:5c:f1: 93:5b:05:44:93:7f:fb:78:f3:a4:fc:7a:05:24:d7: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.195.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34022 Signature Algorithm: sha256WithRSAEncryption 5c:25:de:73:c2:0d:f2:a5:fa:5b:7c:b8:10:d1:bb:5e:5a:9e: ec:a8:1d:cd:db:3e:ba:f9:d6:2f:04:24:6f:a8:5a:bd:a7:a5: 0e:b9:fd:6c:77:3f:1a:4c:7f:77:93:c8:39:69:9a:36:06:40: 24:4e:4a:ac:49:32:3a:56:f5:9b:8c:fe:7a:c0:05:df:89:84: 1f:60:01:4b:2d:88:a4:82:fb:0f:47:2d:49:c9:b9:6a:45:de: 30:1d:82:6d:67:3b:da:f8:7f:80:5e:34:60:37:cb:f3:bb:43: b1:f5:47:2b:c9:45:48:37:96:95:c9:a2:2c:99:30:a8:70:21: 18:02:7d:81:44:69:77:11:d1:68:bc:cd:c8:cc:2f:70:24:b0: 93:c3:2a:9b:4c:87:6d:95:75:70:dd:9e:e6:d9:35:dc:05:16: e9:2a:80:1b:50:22:75:0a:d1:50:03:b4:29:1b:94:03:57:4b: 6f:d6:2f:33:88:d0:d2:ae:cb:f9:2d:96:6e:4f:4e:62:5e:04: f3:b7:b2:b2:55:66:c4:35:92:86:7c:b0:90:9c:09:77:8d:7b: de:e7:07:cd:ce:e6:ed:27:9e:2f:3a:bc:de:7d:dd:11:ef:b3: a6:73:31:2c:f1:c6:8f:b7:b0:a7:9c:0f:6a:06:1e:2e:28:95: ba:8f:2d:4c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5EUIwSkKaWSdXeXqhSUI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDJmOWZkNWM4YTE0Y2RjOWYzMWM0NTg1Y2Q2MGRiNTdjZmZiNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt33eY+PPLoSIIRpjUSaIxLXWDKUF W4FVHAIyoMqH1HU2NwE+l06O9PIheJG7LXc7qZ8qSeCPzWYG1cSfpz4lietIsj5j euNe02RxNkvwACGYPMvoojiG7LJ/92FoIkleCjvZm/YiaybosKKsvLN1dZE4vmwG wEJrdfskyXLaKa6RScdWznfvorxfAiUYwSqeCnCH4W87JUUUPMGAKzJs4z1AFYey HVPVqduQbs2edRjSHbfuPG56ELjq0Vc6/ro0WyiPBXia6feQTG4jrOlClRdwiKCE R86/IgrZhqKXhHyufU0tJRejIkpy4NpKXPGTWwVEk3/7ePOk/HoFJNcsdwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE0vn9XIoUzcnzHEWFzWDbV8/7TCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2RhNGU0 Ni0yYTkzLTQ0YTQtYjhlMy1jMjEzM2RkODFiNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZGE0ZTQ2 LTJhOTMtNDRhNC1iOGUzLWMyMTMzZGQ4MWI1Ni8xL1RTLWYxY2loVE55Zk1jUllY TllOdFh6X3RNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRHDMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCE5jANBgkqhkiG9w0BAQsFAAOCAQEAXCXec8IN8qX6W3y4ENG7Xlqe7Kgdzds+ uvnWLwQkb6havaelDrn9bHc/Gkx/d5PIOWmaNgZAJE5KrEkyOlb1m4z+esAF34mE H2ABSy2IpIL7D0ctScm5akXeMB2CbWc72vh/gF40YDfL87tDsfVHK8lFSDeWlcmi LJkwqHAhGAJ9gURpdxHRaLzNyMwvcCSwk8Mqm0yHbZV1cN2e5tk13AUW6SqAG1Ai dQrRUAO0KRuUA1dLb9YvM4jQ0q7L+S2Wbk9OYl4E87eyslVmxDWShnywkJwJd417 3ucHzc7m7SeeLzq83n3dEe+zpnMxLPHGj7ewp5wPagYeLiiVuo8tTA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:48:07 2026 by rpki-client