This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer File: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer (raw, json) Hash identifier: KtioaaHEmQihPyARCNAMiwQYyr7gLeRmt5gDos6QViE= Subject key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3649FC93D027D9472BEE1BFB67D5CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.8.128.0/23 IP: 193.134.32.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:49:fc:93:d0:27:d9:47:2b:ee:1b:fb:67:d5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:db:30:c2:89:6c:33:22:71:a7:db:3a:df: 32:a0:08:03:60:40:dd:cb:57:ff:28:03:92:0a:32: 8d:9b:45:2b:24:0d:52:92:55:7b:0e:09:fc:ba:8e: 53:18:de:5b:0d:ac:75:e7:96:36:99:b9:3d:93:69: d4:9a:e4:6a:6e:00:10:ea:ed:de:2d:a0:63:31:be: b3:d2:04:76:82:2a:04:d1:69:02:a7:79:d8:95:0e: 8f:94:e0:19:df:88:f0:03:09:a9:9b:8a:d7:91:39: 8a:8c:4b:ff:25:aa:a7:71:9b:18:6e:4a:84:1d:11: e6:df:dd:9b:15:1d:52:44:83:f1:f6:8e:31:f2:2e: 29:3b:e0:d5:47:ad:bc:60:82:7d:f2:48:9a:50:60: ef:0f:95:54:f1:b3:d9:2b:2b:6e:57:28:e5:b4:c4: d1:ec:9b:b5:1a:e5:f7:13:e4:5b:75:6a:1d:de:06: d4:1f:2e:42:c3:5e:58:19:9c:53:56:2e:d0:35:77: ae:83:b0:09:0b:9a:ea:a9:6d:34:ba:36:21:7c:a4: 2f:c3:93:e9:8d:2d:e0:ea:99:ea:7a:0e:95:f7:3f: f7:58:e3:d6:42:3c:1e:0f:a3:23:49:c0:ce:92:18: 63:19:a6:54:d7:61:a3:8b:bd:d6:9a:23:5a:63:d3: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.128.0/23 193.134.32.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:8a:d6:98:7d:19:f7:3c:6e:1d:1f:a8:35:92:6b:a7:f7:ee: b2:f9:13:f9:28:d2:71:57:40:eb:e6:58:15:c5:07:89:28:43: 0b:20:94:47:8e:8e:2d:55:04:3a:2f:b5:76:07:92:80:42:88: af:a3:6c:05:23:b5:e2:ed:21:b2:77:e8:98:53:b0:25:ce:88: 0b:dd:54:60:20:5e:80:23:f3:9b:ba:7c:c6:83:a3:3f:28:86: 01:f1:c9:b2:3e:74:c6:f0:a0:88:0e:9c:c4:76:ae:00:a2:fb: db:6c:8a:76:2c:fa:0b:b4:8d:b5:6d:27:1e:5b:57:06:e4:12: fc:96:59:db:61:58:2f:ce:f9:f0:5e:97:96:3f:d7:cd:e7:e8: 67:20:58:ff:00:06:60:8e:98:cc:1a:0b:4d:e6:d2:4a:b2:00: 60:14:e2:0b:21:2a:38:01:89:8a:8b:2b:95:eb:38:92:1c:e8: 9f:04:1b:4f:64:ce:38:88:8b:3c:9b:5d:4a:35:15:71:cc:f6: 53:d1:9c:f5:2b:1f:53:08:a2:0c:ed:38:b7:4a:fc:e6:4a:f4: 20:0b:e8:aa:f4:0a:ef:42:a9:0f:0d:60:0f:72:e1:01:54:6b: 75:66:d8:58:ba:be:d4:cc:22:07:58:45:d2:29:96:a9:cf:9d: 17:ba:61:84 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt7Nkn8k9An2Ucr7hv7Z9XOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGJlMzFiNmJlZGM1MWYyYWEyZWMwYTY0NTNmMmU0MzVlODA4ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1djbMMKJbDMicafbOt8yoAgDYEDd y1f/KAOSCjKNm0UrJA1SklV7Dgn8uo5TGN5bDax155Y2mbk9k2nUmuRqbgAQ6u3e LaBjMb6z0gR2gioE0WkCp3nYlQ6PlOAZ34jwAwmpm4rXkTmKjEv/JaqncZsYbkqE HRHm392bFR1SRIPx9o4x8i4pO+DVR628YIJ98kiaUGDvD5VU8bPZKytuVyjltMTR 7Ju1GuX3E+RbdWod3gbUHy5Cw15YGZxTVi7QNXeug7AJC5rqqW00ujYhfKQvw5Pp jS3g6pnqeg6V9z/3WOPWQjweD6MjScDOkhhjGaZU12Gji73WmiNaY9N5xQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFE2+Mba+3FHyqi7ApkU/LkNegI+1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzFkMjc4 OC1kYTQwLTQzMWEtOTdkMC1mYmQ0NmQ5Y2EzNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvMWQyNzg4 LWRhNDAtNDMxYS05N2QwLWZiZDQ2ZDljYTM3Mi8xL1RiNHh0cjdjVWZLcUxzQ21S VDh1UTE2QWo3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwQiAAwQCwYYgMA0GCSqGSIb3DQEBCwUAA4IB AQBvitaYfRn3PG4dH6g1kmun9+6y+RP5KNJxV0Dr5lgVxQeJKEMLIJRHjo4tVQQ6 L7V2B5KAQoivo2wFI7Xi7SGyd+iYU7AlzogL3VRgIF6AI/ObunzGg6M/KIYB8cmy PnTG8KCIDpzEdq4AovvbbIp2LPoLtI21bSceW1cG5BL8llnbYVgvzvnwXpeWP9fN 5+hnIFj/AAZgjpjMGgtN5tJKsgBgFOILISo4AYmKiyuV6ziSHOifBBtPZM44iIs8 m11KNRVxzPZT0Zz1Kx9TCKIM7Ti3SvzmSvQgC+iq9ArvQqkPDWAPcuEBVGt1ZthY ur7UzCIHWEXSKZapz50XumGE -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:40 2026 by rpki-client