This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TVg7b1bPCSco3lk62VKuoZzjGIY.cer File: TVg7b1bPCSco3lk62VKuoZzjGIY.cer (raw, json) Hash identifier: ldx5p72Q1uzvYewMcTgkC1cVbGiC+RtNwJ/hateUhaY= Subject key identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BE4B6222C65D71B9B374E4F5FCCD0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210298 IP: 37.9.184.0/21 IP: 88.214.12.0/22 IP: 95.156.197.0/24 IP: 95.156.200.0 -- 95.156.202.255 IP: 95.156.214.0/23 IP: 109.230.201.0 -- 109.230.202.255 IP: 185.119.32.0/22 IP: 2a02:2dc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e4:b6:22:2c:65:d7:1b:9b:37:4e:4f:5f:cc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d583b6f56cf092728de593ad952aea19ce31886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:ab:c4:16:b4:19:e7:9b:d5:7d:b7:9a:74: 5b:00:1e:3d:70:7d:60:34:eb:b2:8f:41:e9:5d:f2: 15:9a:75:b0:f2:3f:db:25:e4:5b:54:30:d6:77:9d: 26:d6:8e:8f:6c:26:35:65:44:19:73:4e:e1:3b:95: 7f:a5:a4:17:35:a5:f0:d2:da:f5:bb:2f:33:67:a9: 44:e7:87:5b:7b:ae:8e:f2:0c:7c:74:3f:eb:b7:52: 4e:29:86:da:36:8c:f6:76:e9:02:d6:39:ba:6f:9c: 5e:e1:f2:0b:31:97:3a:04:d2:0b:30:18:67:98:c6: 88:41:aa:1f:fa:26:0d:12:24:f1:30:31:ef:72:99: 51:8c:8d:8f:86:db:59:a8:70:2f:77:7b:70:2e:d4: 7f:a6:01:3b:fc:80:62:32:d4:1f:13:a2:1e:f5:de: cb:21:51:b1:d5:44:3d:ba:f0:f9:08:c1:e6:54:3e: da:81:ec:3c:8b:23:67:12:dc:9e:1b:4b:3c:54:f2: aa:c2:c5:c5:f6:7a:74:6f:f8:d8:3d:ba:95:ec:d8: 77:ba:3d:e4:3d:99:6c:c3:e2:2c:69:db:4d:c1:36: 91:67:dd:48:d3:91:b1:d9:42:09:a4:56:00:bf:47: d8:5d:7a:fd:0b:af:73:2e:36:62:7d:34:69:d6:6f: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:58:3B:6F:56:CF:09:27:28:DE:59:3A:D9:52:AE:A1:9C:E3:18:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7358bd-c72f-4d9b-bb0d-0b4f717aa363/1/TVg7b1bPCSco3lk62VKuoZzjGIY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.9.184.0/21 88.214.12.0/22 95.156.197.0/24 95.156.200.0-95.156.202.255 95.156.214.0/23 109.230.201.0-109.230.202.255 185.119.32.0/22 IPv6: 2a02:2dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210298 Signature Algorithm: sha256WithRSAEncryption 0b:fe:68:c0:16:10:1c:2b:1b:82:48:94:a6:d2:0c:f9:16:93: 35:2f:8e:50:2f:ef:bf:9b:80:b9:dc:f9:0d:a3:61:f2:d7:97: 43:4d:20:fd:9a:41:a1:14:ca:99:62:b8:5c:7b:14:b6:b4:94: 8c:76:8f:8a:af:de:e8:44:39:b3:31:66:a8:61:87:80:a4:c1: c3:31:a2:27:02:30:26:52:fc:57:c0:b4:53:21:05:21:63:df: bd:1a:ef:a3:58:ec:9e:17:2a:7f:9b:d0:69:ad:d9:5b:fe:9b: d0:34:51:b3:08:02:9d:36:32:41:74:66:cc:09:ef:3b:1e:e5: f0:53:76:9b:89:95:29:9a:15:9f:c0:f0:01:11:97:b6:11:93: 5e:2b:6f:6b:b9:66:75:e1:a2:b3:c3:54:50:0e:76:64:55:80: e9:05:88:d6:02:a4:d5:5c:dc:77:3d:04:af:ae:25:9e:75:ad: d8:9b:86:0e:65:37:75:a4:f0:2f:a7:3b:3a:a6:69:a7:b3:4a: a7:5a:ec:d0:48:d7:f9:93:1f:55:3d:6f:1e:98:ca:36:52:eb: 58:d6:0b:73:a1:13:a2:4d:81:3e:ac:3c:a8:25:4e:8f:54:07: 99:10:1c:e7:25:67:4c:b2:73:71:2c:bd:06:39:97:d4:d6:5b: 3f:ca:ae:ce -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt9W+S2Iixl1xubN05PX8zQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDU4M2I2ZjU2Y2YwOTI3MjhkZTU5M2FkOTUyYWVhMTljZTMxODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt82rxBa0Geeb1X23mnRbAB49cH1g NOuyj0HpXfIVmnWw8j/bJeRbVDDWd50m1o6PbCY1ZUQZc07hO5V/paQXNaXw0tr1 uy8zZ6lE54dbe66O8gx8dD/rt1JOKYbaNoz2dukC1jm6b5xe4fILMZc6BNILMBhn mMaIQaof+iYNEiTxMDHvcplRjI2PhttZqHAvd3twLtR/pgE7/IBiMtQfE6Ie9d7L IVGx1UQ9uvD5CMHmVD7agew8iyNnEtyeG0s8VPKqwsXF9np0b/jYPbqV7Nh3uj3k PZlsw+IsadtNwTaRZ91I05Gx2UIJpFYAv0fYXXr9C69zLjZifTRp1m8KcQIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFE1YO29WzwknKN5ZOtlSrqGc4xiGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzczNThi ZC1jNzJmLTRkOWItYmIwZC0wYjRmNzE3YWEzNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvNzM1OGJk LWM3MmYtNGQ5Yi1iYjBkLTBiNGY3MTdhYTM2My8xL1RWZzdiMWJQQ1NjbzNsazYy Vkt1b1p6akdJWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF BwEHAQH/BFMwUTBABAIAATA6AwQDJQm4AwQCWNYMAwQAX5zFMAwDBANfnMgDBABf nMoDBAFfnNYwDAMEAG3myQMEAG3mygMEArl3IDANBAIAAjAHAwUAKgItwDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMDNXowDQYJKoZIhvcNAQELBQADggEBAAv+aMAW EBwrG4JIlKbSDPkWkzUvjlAv77+bgLnc+Q2jYfLXl0NNIP2aQaEUypliuFx7FLa0 lIx2j4qv3uhEObMxZqhhh4CkwcMxoicCMCZS/FfAtFMhBSFj370a76NY7J4XKn+b 0Gmt2Vv+m9A0UbMIAp02MkF0ZswJ7zse5fBTdpuJlSmaFZ/A8AERl7YRk14rb2u5 ZnXhorPDVFAOdmRVgOkFiNYCpNVc3Hc9BK+uJZ51rdibhg5lN3Wk8C+nOzqmaaez Sqda7NBI1/mTH1U9bx6YyjZS61jWC3OhE6JNgT6sPKglTo9UB5kQHOclZ0yyc3Es vQY5l9TWWz/Krs4= -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:49 2026 by rpki-client