This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer File: TdA6WGuXinCqqC4JWKkBUucmedk.cer (raw, json) Hash identifier: r1Mo8RbLDg94e+WLNYXdI1aQWRyKL4ecAaXnkOTUNtE= Subject key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA549EBD2FD5E72BF7A88ABAF3AD777 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198468 IP: 2001:67c:e98::/48 IP: 2001:67c:1330::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:49:eb:d2:fd:5e:72:bf:7a:88:ab:af:3a:d7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:e8:b7:08:61:e0:a1:f8:db:5c:1a:ab:08: f5:3e:1a:62:dd:88:ac:dc:38:4b:69:f9:3c:17:6f: 04:97:2a:9f:77:eb:a0:53:0f:8a:18:61:d9:46:6e: 5c:66:f9:12:99:39:7d:db:51:68:3b:3b:62:fa:78: 7c:97:b9:a6:fb:2a:40:95:92:ee:8c:d3:99:50:32: b9:0b:18:ab:17:d9:e0:1c:8d:07:b0:74:08:0d:24: 72:49:77:38:fc:41:58:10:30:4d:c8:14:40:55:e4: 85:1f:56:e1:d6:5c:0e:ea:05:2d:d7:86:0e:8e:3f: dd:56:58:90:1a:3d:9a:6f:db:b4:a5:fd:84:3b:a0: e1:ba:58:74:91:68:76:1c:09:c2:12:4a:8e:1f:de: 72:af:56:00:9f:8b:ec:b8:d6:e9:5e:dc:85:2a:1f: e9:cb:9e:d5:34:96:2f:d6:3d:77:91:ed:76:f1:1d: eb:e4:21:4a:b8:93:9f:41:d2:8c:3f:37:cc:41:d6: 75:ab:f8:bf:b6:f8:bd:3f:46:d0:be:5b:b4:60:6e: e0:06:1a:a1:d5:07:a5:7b:33:4f:e5:89:3a:be:ff: de:ff:8e:9a:dd:92:b1:87:f8:5c:f8:c0:65:0e:2a: d1:a9:2b:f4:81:99:62:55:d3:7b:b2:33:55:47:a4: 01:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e98::/48 2001:67c:1330::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198468 Signature Algorithm: sha256WithRSAEncryption 73:9d:5a:bc:9a:84:71:2d:56:ab:e7:8d:d4:b3:63:45:d1:1a: 8f:ee:52:02:15:27:4b:4f:e3:d1:e5:86:34:84:46:ba:09:8e: bc:d7:a7:75:d5:8a:be:9b:d9:47:59:ef:37:22:1f:f6:6f:21: f6:b4:b2:5e:46:23:82:e9:2f:17:bb:d5:c5:75:40:7f:d7:55: d0:8d:2c:c5:fc:05:07:cf:20:76:f4:7c:62:3f:8b:b8:3b:bd: 46:9f:9f:7f:20:6b:87:4a:20:67:73:f2:57:da:e8:8a:2a:07: f7:c2:3e:63:44:80:f5:f7:d2:ed:82:26:c8:90:d7:35:d6:ab: 93:44:f0:fa:6d:47:43:12:29:00:2f:05:65:45:22:fc:63:42: 53:44:52:bc:c6:a0:ed:1a:56:58:c1:e2:54:7b:b9:f7:7b:cd: 15:25:53:7e:fb:f8:f2:42:1f:b9:75:0a:35:5e:c7:11:aa:73: ce:b8:58:e2:e9:82:ce:48:6a:2f:86:89:77:54:44:ba:0c:f6: bd:9b:1a:97:de:0e:53:2c:c6:85:64:71:11:1c:5b:66:32:1f: 50:3f:95:00:f7:ab:ef:0a:dc:22:35:cb:c4:60:40:8c:36:0f: a2:3b:b3:f8:aa:d3:ab:cf:f4:ee:bd:89:ea:b7:fe:6e:6a:04: d4:6d:9e:8c -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt+pUnr0v1ecr96iKuvOtd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGQwM2E1ODZiOTc4YTcwYWFhODJlMDk1OGE5MDE1MmU3MjY3OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xjotwhh4KH421waqwj1Phpi3Yis 3DhLafk8F28Elyqfd+ugUw+KGGHZRm5cZvkSmTl921FoOzti+nh8l7mm+ypAlZLu jNOZUDK5CxirF9ngHI0HsHQIDSRySXc4/EFYEDBNyBRAVeSFH1bh1lwO6gUt14YO jj/dVliQGj2ab9u0pf2EO6Dhulh0kWh2HAnCEkqOH95yr1YAn4vsuNbpXtyFKh/p y57VNJYv1j13ke128R3r5CFKuJOfQdKMPzfMQdZ1q/i/tvi9P0bQvlu0YG7gBhqh 1QelezNP5Yk6vv/e/46a3ZKxh/hc+MBlDirRqSv0gZliVdN7sjNVR6QBIQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFE3QOlhrl4pwqqguCVipAVLnJnnZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2M5ZDUy My0wYmI5LTQ1NzMtOTU5NS03NmEzYTEwYTI2ZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvYzlkNTIz LTBiYjktNDU3My05NTk1LTc2YTNhMTBhMjZmMi8xL1RkQTZXR3VYaW5DcXFDNEpX S2tCVXVjbWVkay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfA6YAwcAIAEGfBMwMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMHRDANBgkqhkiG9w0BAQsFAAOCAQEAc51avJqEcS1Wq+eN 1LNjRdEaj+5SAhUnS0/j0eWGNIRGugmOvNenddWKvpvZR1nvNyIf9m8h9rSyXkYj gukvF7vVxXVAf9dV0I0sxfwFB88gdvR8Yj+LuDu9Rp+ffyBrh0ogZ3PyV9roiioH 98I+Y0SA9ffS7YImyJDXNdark0Tw+m1HQxIpAC8FZUUi/GNCU0RSvMag7RpWWMHi VHu593vNFSVTfvv48kIfuXUKNV7HEapzzrhY4umCzkhqL4aJd1REugz2vZsal94O UyzGhWRxERxbZjIfUD+VAPer7wrcIjXLxGBAjDYPojuz+KrTq8/07r2J6rf+bmoE 1G2ejA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:36 2026 by rpki-client