This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer File: TXCvGpmIbJEB0TX1S9K97zWLJm4.cer (raw, json) Hash identifier: AeKLOOsMxgRCtoqFO95SIYsUN1TRY84qSRfutIphAZw= Subject key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80D12D10980341CFB75CD5D94D9DBD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8751 IP: 37.156.71.0/24 IP: 84.247.22.0/24 IP: 85.204.224.0 -- 85.204.232.255 IP: 85.204.234.0 -- 85.204.239.255 IP: 86.105.164.0/22 IP: 86.107.224.0/20 IP: 86.107.246.0/23 IP: 93.113.0.0/20 IP: 185.85.200.0/22 IP: 188.215.112.0/21 IP: 2001:67c:2580::/48 IP: 2a03:7420::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d1:2d:10:98:03:41:cf:b7:5c:d5:d9:4d:9d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d70af1a99886c9101d135f54bd2bdef358b266e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:dc:b9:fa:7f:17:d0:8d:ee:25:d7:2a:b3: e7:9f:62:f5:d7:da:d1:d0:38:19:ac:08:f3:85:24: 53:61:07:f1:8a:61:27:e8:b2:17:cd:db:ef:a9:d1: f6:30:d1:7a:32:d0:c3:ee:6b:37:3e:44:d7:68:87: 13:93:f7:60:d8:a1:38:05:d0:2e:a4:6e:79:4b:d8: 5e:7f:15:ab:cd:43:77:5e:7c:67:75:0e:9a:14:52: ee:7a:93:68:b8:70:67:ee:bd:80:74:bd:09:59:43: 48:b6:50:22:f9:46:8c:98:e1:9d:05:00:c0:f7:ea: 8f:93:46:3e:c2:cd:be:ec:c5:22:b7:8d:07:2c:48: 8a:7c:ad:b4:a3:bc:85:ed:1b:22:4c:32:77:51:4b: 5c:08:09:26:ad:de:f3:97:35:5a:c8:10:cf:f3:06: 60:0a:ea:10:cc:bf:b0:02:4e:6f:a9:e8:03:bf:72: d1:e8:19:5c:c9:3f:07:3a:d1:fe:29:92:38:a1:cc: df:52:42:dd:84:8b:38:e1:1e:b9:0d:97:47:a7:e0: 58:e1:dd:ec:e9:a8:6c:b0:4a:d4:cb:51:59:02:9d: 50:21:80:6c:11:69:51:64:81:3b:be:ba:32:33:14: 6a:f1:8d:05:a3:e8:0f:79:9f:05:07:4c:e3:fe:7e: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.71.0/24 84.247.22.0/24 85.204.224.0-85.204.232.255 85.204.234.0-85.204.239.255 86.105.164.0/22 86.107.224.0/20 86.107.246.0/23 93.113.0.0/20 185.85.200.0/22 188.215.112.0/21 IPv6: 2001:67c:2580::/48 2a03:7420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8751 Signature Algorithm: sha256WithRSAEncryption 1b:87:7e:12:d3:cb:bb:29:2f:23:83:97:9d:57:84:eb:1a:3e: 35:76:8f:9b:73:a3:46:f3:6a:87:ac:d6:da:87:75:3f:77:2a: 8b:0b:bf:70:cf:eb:f1:d4:27:a5:cf:42:72:ce:b7:12:0a:2d: 00:43:c8:74:5b:95:9b:65:dd:ca:b5:48:e4:d8:10:e3:1d:da: 68:2a:4a:d5:4a:01:2c:74:db:88:ee:4a:ca:a8:e6:83:5f:f9: 8d:dc:4d:7a:05:ce:f1:81:2a:f3:f7:3a:d4:44:46:14:99:0f: ba:56:d1:bd:aa:d1:aa:fa:e2:75:23:b7:6b:69:33:1c:32:d0: 6a:5c:b2:56:cc:d1:dc:f0:7b:e1:23:38:e5:35:2d:c6:31:74: 96:41:f3:a1:e4:27:1e:7d:d0:05:92:02:95:8f:ca:27:0a:0c: 2b:1d:3e:02:ad:fd:04:ec:23:d7:30:e5:0b:76:b4:aa:bb:cd: ad:88:36:c8:0e:ec:34:8b:79:fe:cd:18:52:5e:65:89:63:d7: b9:ca:47:ef:3c:f0:7d:5e:10:fc:57:b5:42:c8:94:c0:3d:fd: 7d:68:30:4c:21:46:11:5b:2e:44:73:0b:93:5d:78:e7:c7:29: a0:18:a1:23:3d:14:fb:3d:5f:04:bc:3a:cc:9c:6a:a5:5b:e2: d5:69:e6:59 -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISAZt8gNEtEJgDQc+3XNXZTZ29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDcwYWYxYTk5ODg2YzkxMDFkMTM1ZjU0YmQyYmRlZjM1OGIyNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucfcufp/F9CN7iXXKrPnn2L119rR 0DgZrAjzhSRTYQfximEn6LIXzdvvqdH2MNF6MtDD7ms3PkTXaIcTk/dg2KE4BdAu pG55S9hefxWrzUN3XnxndQ6aFFLuepNouHBn7r2AdL0JWUNItlAi+UaMmOGdBQDA 9+qPk0Y+ws2+7MUit40HLEiKfK20o7yF7RsiTDJ3UUtcCAkmrd7zlzVayBDP8wZg CuoQzL+wAk5vqegDv3LR6BlcyT8HOtH+KZI4oczfUkLdhIs44R65DZdHp+BY4d3s 6ahssErUy1FZAp1QIYBsEWlRZIE7vroyMxRq8Y0Fo+gPeZ8FB0zj/n4fTQIDAQAB o4IC/TCCAvkwHQYDVR0OBBYEFE1wrxqZiGyRAdE19UvSve81iyZuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2E5OGZj Ny03OTM1LTRlYWUtOTYyYS00NjFhYjBlY2VlMDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvYTk4ZmM3 LTc5MzUtNGVhZS05NjJhLTQ2MWFiMGVjZWUwMS8xL1RYQ3ZHcG1JYkpFQjBUWDFT OUs5N3pXTEptNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH0GCCsGAQUF BwEHAQH/BG4wbDBSBAIAATBMAwQAJZxHAwQAVPcWMAwDBAVVzOADBABVzOgwDAME AVXM6gMEBFXM4AMEAlZppAMEBFZr4AMEAVZr9gMEBF1xAAMEArlVyAMEA7zXcDAW BAIAAjAQAwcAIAEGfCWAAwUAKgN0IDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIi LzANBgkqhkiG9w0BAQsFAAOCAQEAG4d+EtPLuykvI4OXnVeE6xo+NXaPm3OjRvNq h6zW2od1P3cqiwu/cM/r8dQnpc9Ccs63EgotAEPIdFuVm2XdyrVI5NgQ4x3aaCpK 1UoBLHTbiO5Kyqjmg1/5jdxNegXO8YEq8/c61ERGFJkPulbRvarRqvridSO3a2kz HDLQalyyVszR3PB74SM45TUtxjF0lkHzoeQnHn3QBZIClY/KJwoMKx0+Aq39BOwj 1zDlC3a0qrvNrYg2yA7sNIt5/s0YUl5liWPXucpH7zzwfV4Q/Fe1QsiUwD39fWgw TCFGEVsuRHMLk11458cpoBihIz0U+z1fBLw6zJxqpVvi1WnmWQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:04 2026 by rpki-client