This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer File: TXfM16lEFd_GjMyodOlMLowiIC0.cer (raw, json) Hash identifier: zOvzWU3H+3YofJ0dMiur9UVzWPt0LHGOARZe852pvU0= Subject key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15CCE809A4AC2E93DC0AA608E1B43C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.74.24.0/21 IP: 185.184.152.0/22 IP: 2a00:fd80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cc:e8:09:a4:ac:2e:93:dc:0a:a6:08:e1:b4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:61:89:7c:e6:bf:88:36:3e:36:86:df:ab:e4: ad:43:ea:96:66:e3:bc:c5:d4:2b:f1:1b:3d:9a:2e: 82:2f:12:ad:fe:96:5e:8f:8d:22:0a:55:5e:d8:4d: 2e:30:c4:2c:5f:1e:60:3c:ad:20:90:ef:58:40:29: b3:e4:8b:74:41:f7:83:2e:ab:4a:cc:04:9f:09:d3: 0e:21:88:b5:96:ff:5f:f4:7c:de:b0:55:3a:03:01: eb:a7:f4:28:a6:1c:33:02:aa:a8:9c:ef:d1:c9:45: 06:f8:a8:90:0c:bf:23:ee:00:6e:1e:ed:ef:eb:cc: b3:e8:3f:cb:03:0e:16:1d:ba:89:a6:4b:c1:a8:a8: 1e:11:41:98:83:d0:64:b1:10:c8:e4:70:2e:8e:f0: ba:9d:cd:15:d9:08:74:a4:7c:9d:44:b7:1f:66:85: 3c:d5:88:25:14:d2:0e:e6:ed:22:25:52:11:e0:f2: 56:3f:5f:89:01:4a:e9:c2:a9:7b:7a:70:41:f1:05: 8a:ae:b1:51:f2:ff:3f:8d:04:04:16:b9:bd:cf:a8: 03:5c:24:93:25:b1:26:1c:9e:ba:d4:eb:ac:e8:bc: 6a:ea:6c:71:e3:10:cc:01:46:81:71:fb:d3:ff:39: 7a:56:7a:1d:27:af:06:ad:98:35:78:b2:7c:06:8b: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.74.24.0/21 185.184.152.0/22 IPv6: 2a00:fd80::/32 Signature Algorithm: sha256WithRSAEncryption 53:1f:58:de:c9:35:d3:a4:0d:cd:09:54:04:cb:4e:2c:89:18: ee:74:2b:21:76:18:9a:fc:81:2d:9d:cd:c8:23:ef:70:45:e4: 36:0c:94:d4:d6:71:87:22:12:b4:af:d4:39:a2:d6:09:cd:5f: 57:78:2b:43:67:53:dd:b0:65:e4:f9:6d:87:aa:3c:a7:55:94: 21:c5:33:ae:36:88:8d:e1:f3:a2:13:17:3c:e5:7e:f7:2d:ea: cc:cb:1b:a0:48:41:4e:13:68:08:9f:f3:f8:3e:47:d9:2a:e8: d4:da:c1:cd:b9:e3:d1:2b:8b:94:d5:4d:a7:f0:91:48:56:96: 04:dc:f1:aa:6a:d0:f0:aa:b5:42:c5:b4:f4:81:14:52:17:37: 6e:a7:9e:ee:20:cc:c9:6e:d2:99:7f:55:70:04:49:51:13:07: 03:41:0a:a6:ab:42:66:3d:8c:4e:ed:24:bd:13:f9:2b:80:fd: a8:03:e8:41:9a:6b:8e:b9:b9:b2:22:18:1d:23:2d:7e:5e:76: 90:ac:c2:71:a9:6b:53:04:79:7e:64:26:d0:68:05:a2:a8:89: a8:39:36:05:61:49:41:c6:e9:73:2d:a6:dd:35:05:af:c0:c4: be:79:db:f1:1e:aa:3b:1b:c7:66:93:df:d4:52:19:c1:3b:eb: 0d:b1:ce:97 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt/FczoCaSsLpPcCqYI4bQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDc3Y2NkN2E5NDQxNWRmYzY4Y2NjYTg3NGU5NGMyZThjMjIyMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WGJfOa/iDY+Nobfq+StQ+qWZuO8 xdQr8Rs9mi6CLxKt/pZej40iClVe2E0uMMQsXx5gPK0gkO9YQCmz5It0QfeDLqtK zASfCdMOIYi1lv9f9HzesFU6AwHrp/QophwzAqqonO/RyUUG+KiQDL8j7gBuHu3v 68yz6D/LAw4WHbqJpkvBqKgeEUGYg9BksRDI5HAujvC6nc0V2Qh0pHydRLcfZoU8 1YglFNIO5u0iJVIR4PJWP1+JAUrpwql7enBB8QWKrrFR8v8/jQQEFrm9z6gDXCST JbEmHJ661Ous6Lxq6mxx4xDMAUaBcfvT/zl6VnodJ68GrZg1eLJ8Bou1TwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFE13zNepRBXfxozMqHTpTC6MIiAtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlL2Q2MDhi OC01MDFmLTQ5MWYtYTJmMi0xMGU1N2Y1NmExN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvZDYwOGI4 LTUwMWYtNDkxZi1hMmYyLTEwZTU3ZjU2YTE3YS8xL1RYZk0xNmxFRmRfR2pNeW9k T2xNTG93aUlDMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDsEoYAwQCubiYMA0EAgACMAcDBQAqAP2AMA0G CSqGSIb3DQEBCwUAA4IBAQBTH1jeyTXTpA3NCVQEy04siRjudCshdhia/IEtnc3I I+9wReQ2DJTU1nGHIhK0r9Q5otYJzV9XeCtDZ1PdsGXk+W2HqjynVZQhxTOuNoiN 4fOiExc85X73LerMyxugSEFOE2gIn/P4PkfZKujU2sHNuePRK4uU1U2n8JFIVpYE 3PGqatDwqrVCxbT0gRRSFzdup57uIMzJbtKZf1VwBElREwcDQQqmq0JmPYxO7SS9 E/krgP2oA+hBmmuOubmyIhgdIy1+XnaQrMJxqWtTBHl+ZCbQaAWiqImoOTYFYUlB xulzLabdNQWvwMS+edvxHqo7G8dmk9/UUhnBO+sNsc6X -----END CERTIFICATE-----Generated at Sun Jan 25 18:11:40 2026 by rpki-client