This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer File: TecEA8nS15Ys8RPZPEYvlJPYc2I.cer (raw, json) Hash identifier: 1qdGLIEkOHFdrclXD/EWEY+PB5bPTtV1QRBN7UAJj9Q= Subject key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA721491CB3D5757E0FCACB4D75D092 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.31.0.0/22 IP: 2a00:b5a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:21:49:1c:b3:d5:75:7e:0f:ca:cb:4d:75:d0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4de70403c9d2d7962cf113d93c462f9493d87362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:f4:a2:58:55:aa:47:e1:6b:ee:f9:ed:c5: 61:c4:bc:97:a5:4b:10:1b:47:8b:f1:16:0f:8b:ff: a1:5d:de:74:8a:be:3e:3e:b9:b6:8f:4b:a1:8a:15: 58:87:d4:67:af:c6:9e:67:11:83:7a:9a:fd:65:07: 49:d6:c6:fc:07:c3:0b:01:84:0d:8b:ef:89:07:99: 08:53:9e:09:e5:2e:b2:7d:cd:21:a4:b5:13:02:c4: d9:7b:cf:c6:ae:47:8a:59:95:39:7c:eb:3f:2e:13: c6:cf:b1:4c:f3:27:16:18:45:be:3c:c1:35:7c:b9: 93:3a:b1:c2:7e:d0:62:1f:73:5b:8d:60:c0:d6:0e: 7f:55:b6:02:37:d0:39:d2:11:20:ea:98:7b:93:fc: a1:1f:a4:aa:46:be:89:d8:9f:66:f6:a2:e1:1b:75: cb:c2:a1:8e:df:7b:e9:5a:40:bb:79:7a:24:53:4d: da:25:92:3f:6a:b4:ec:4f:4c:69:ff:9a:68:54:d7: 21:0d:0d:10:26:f0:7d:f4:31:77:4a:97:fe:cd:5f: 3f:0f:6d:a2:0e:d1:8d:c0:1a:b1:80:f6:29:84:43: 58:89:78:3f:33:66:5e:53:2b:34:96:f2:80:66:d4: b4:32:b2:22:86:14:18:99:32:fc:e4:6d:40:9e:bc: b0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.0.0/22 IPv6: 2a00:b5a0::/32 Signature Algorithm: sha256WithRSAEncryption 89:e9:29:05:9c:7f:5a:ce:61:e8:d0:f5:f0:97:92:da:38:09: 71:ea:6f:ab:a6:ad:33:9b:81:33:50:9e:44:84:69:34:0c:79: f4:5d:e5:1d:bb:3e:8f:9c:c3:de:2b:25:fc:6a:80:46:aa:15: c5:50:5e:9d:d1:a0:48:26:a8:2a:75:8c:a7:e3:f1:bb:ea:78: 32:33:b2:62:a1:20:03:96:70:0c:f1:fa:89:b8:84:8f:ba:10: 16:6b:80:44:b2:b2:1b:cd:e2:79:8f:08:e7:62:b9:cc:55:da: 21:a0:b8:89:0f:bb:a8:5c:a3:3e:e7:83:8e:38:45:92:72:50: 57:f7:62:c8:af:bd:b5:dc:0f:66:45:40:43:16:c1:97:0a:20: d1:6a:64:72:a8:f8:f8:66:b8:2b:67:36:03:62:d6:51:30:35: 42:40:4a:4b:50:40:97:65:1b:85:f6:97:27:24:c9:f3:6e:35: 18:f9:5a:db:c9:8f:58:49:c4:f5:09:af:f7:e4:7d:db:ce:a5: a8:c2:58:24:9a:6f:e9:6e:be:28:1e:79:b7:e6:d7:19:c7:17: 3d:11:89:72:4e:a5:8d:0d:e3:c5:4d:ea:f8:12:f3:03:91:70: c6:75:df:50:7e:2b:8b:69:2b:1b:15:47:6a:1f:67:43:74:e3: ee:04:95:30 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pyFJHLPVdX4PystNddCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGU3MDQwM2M5ZDJkNzk2MmNmMTEzZDkzYzQ2MmY5NDkzZDg3MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYP0olhVqkfha+757cVhxLyXpUsQ G0eL8RYPi/+hXd50ir4+Prm2j0uhihVYh9Rnr8aeZxGDepr9ZQdJ1sb8B8MLAYQN i++JB5kIU54J5S6yfc0hpLUTAsTZe8/GrkeKWZU5fOs/LhPGz7FM8ycWGEW+PME1 fLmTOrHCftBiH3NbjWDA1g5/VbYCN9A50hEg6ph7k/yhH6SqRr6J2J9m9qLhG3XL wqGO33vpWkC7eXokU03aJZI/arTsT0xp/5poVNchDQ0QJvB99DF3Spf+zV8/D22i DtGNwBqxgPYphENYiXg/M2ZeUys0lvKAZtS0MrIihhQYmTL85G1Anryw3wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFE3nBAPJ0teWLPET2TxGL5ST2HNiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhLzI1MDEy Ny04NWQ3LTQ2YjQtODg2NS1iZjBkYTVlOGNlN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMjUwMTI3 LTg1ZDctNDZiNC04ODY1LWJmMGRhNWU4Y2U3Zi8xL1RlY0VBOG5TMTVZczhSUFpQ RVl2bEpQWWMySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuR8AMA0EAgACMAcDBQAqALWgMA0GCSqGSIb3 DQEBCwUAA4IBAQCJ6SkFnH9azmHo0PXwl5LaOAlx6m+rpq0zm4EzUJ5EhGk0DHn0 XeUduz6PnMPeKyX8aoBGqhXFUF6d0aBIJqgqdYyn4/G76ngyM7JioSADlnAM8fqJ uISPuhAWa4BEsrIbzeJ5jwjnYrnMVdohoLiJD7uoXKM+54OOOEWSclBX92LIr721 3A9mRUBDFsGXCiDRamRyqPj4ZrgrZzYDYtZRMDVCQEpLUECXZRuF9pcnJMnzbjUY +VrbyY9YScT1Ca/35H3bzqWowlgkmm/pbr4oHnm35tcZxxc9EYlyTqWNDePFTer4 EvMDkXDGdd9QfiuLaSsbFUdqH2dDdOPuBJUw -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:52 2026 by rpki-client