This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer File: TiopnxgqH9UdSwNimXr3qq4Na-k.cer (raw, json) Hash identifier: CjJu5yk3kWH+HL8IFgkqGYq8VWS0X3UvowYJBymXCGY= Subject key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F9AC4AC128DCC0B45AE9C021A924B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199255 IP: 185.4.248.0/22 IP: 2a02:6840::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:9a:c4:ac:12:8d:cc:0b:45:ae:9c:02:1a:92:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f5:1e:35:63:0b:c0:c8:4b:5c:bc:c5:a6:33: 85:b4:f6:42:0f:12:2f:da:95:46:24:83:7d:a0:2c: e6:e0:1b:9d:75:49:30:24:5f:78:70:b5:09:7c:9b: 33:fd:97:27:b7:e8:e6:b2:9e:b8:c0:53:ce:af:70: e5:48:2e:90:89:d8:79:5b:55:c1:c3:22:95:e5:6c: c2:72:73:10:6e:8e:e9:0b:3d:4e:89:73:64:0e:57: 5a:0b:33:c7:8f:55:72:bc:f4:9f:30:1c:a7:27:9c: f2:70:77:96:b3:a4:a1:56:f9:cc:3f:a4:24:06:d5: 2a:83:2d:02:12:e5:27:d6:a4:9b:16:15:a8:7a:e4: fc:bc:e6:20:e8:ae:90:00:cb:f7:3b:1b:f8:2b:1e: f1:8f:36:ab:39:d7:79:62:51:fb:43:94:11:e4:ae: 33:fa:41:4c:ec:3e:47:73:c8:13:60:fe:db:aa:c6: 88:1e:8a:25:05:96:29:cc:20:9c:0f:89:06:ff:fb: d2:a2:05:9e:2d:f8:1b:2c:50:13:7c:ab:18:39:11: a4:bb:7d:4a:7e:69:86:4e:39:4c:52:8b:fb:b8:53: 6b:8b:d8:73:70:89:8c:6d:ce:ef:4d:14:fe:ce:36: ce:f0:70:f6:88:88:67:eb:69:f2:55:41:1c:24:2f: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.248.0/22 IPv6: 2a02:6840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199255 Signature Algorithm: sha256WithRSAEncryption 83:f5:49:7d:89:32:b6:6e:d0:bd:0c:dd:0e:e1:03:1c:34:0f: b5:48:2e:83:a8:fa:35:7e:94:46:3c:0c:5c:ba:d9:9a:59:1f: de:59:bc:2c:d0:fb:35:0b:05:e2:4e:b1:dd:11:9f:b0:b1:fa: 5f:77:85:35:a8:ac:97:eb:a4:b1:73:f4:10:16:4b:36:2a:dc: a5:bd:49:68:ec:c7:81:98:9d:81:bd:3d:39:0b:a3:97:de:02: 36:c1:7c:90:6b:85:dc:e1:02:a1:4a:ea:97:03:7c:6f:69:bd: d1:b7:7d:dd:b8:39:bd:1a:7c:66:de:ff:e4:54:fb:82:3d:2d: 9a:7b:e8:75:71:6f:af:3e:aa:9c:f1:0e:6b:cb:de:52:d7:23: e6:d6:dc:b1:0f:d9:6a:0b:fa:96:06:6c:1b:8c:2a:74:c0:25: d4:74:24:5a:9b:89:1c:61:ae:47:24:8a:8e:37:df:f6:5b:98: 49:cc:87:e6:35:d9:ca:02:2f:a8:29:34:bc:a9:c3:b2:7a:84: 69:97:af:52:c2:fa:be:52:49:74:39:b4:fa:ab:e8:24:65:ff: 24:78:93:af:cc:36:ca:38:49:ac:7b:06:e3:88:25:3b:0c:4b: 5c:18:00:13:ac:3e:af:06:bc:d3:6f:cb:5f:cb:25:f7:9a:f2: 6d:88:76:54 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f5rErBKNzAtFrpwCGpJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTJhMjk5ZjE4MmExZmQ1MWQ0YjAzNjI5OTdhZjdhYWFlMGQ2YmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/UeNWMLwMhLXLzFpjOFtPZCDxIv 2pVGJIN9oCzm4BuddUkwJF94cLUJfJsz/Zcnt+jmsp64wFPOr3DlSC6Qidh5W1XB wyKV5WzCcnMQbo7pCz1OiXNkDldaCzPHj1VyvPSfMBynJ5zycHeWs6ShVvnMP6Qk BtUqgy0CEuUn1qSbFhWoeuT8vOYg6K6QAMv3Oxv4Kx7xjzarOdd5YlH7Q5QR5K4z +kFM7D5Hc8gTYP7bqsaIHoolBZYpzCCcD4kG//vSogWeLfgbLFATfKsYORGku31K fmmGTjlMUov7uFNri9hzcImMbc7vTRT+zjbO8HD2iIhn62nyVUEcJC+cbwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFE4qKZ8YKh/VHUsDYpl696quDWvpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2QzZGYy Ni0zZGI1LTQ1MzktODAzMC1mMmNlNzdlMzE5MWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvZDNkZjI2 LTNkYjUtNDUzOS04MDMwLWYyY2U3N2UzMTkxZS8xL1Rpb3BueGdxSDlVZFN3Tmlt WHIzcXE0TmEtay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQT4MA0EAgACMAcDBQAqAmhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMKVzANBgkqhkiG9w0BAQsFAAOCAQEAg/VJfYkytm7Q vQzdDuEDHDQPtUgug6j6NX6URjwMXLrZmlkf3lm8LND7NQsF4k6x3RGfsLH6X3eF Naisl+uksXP0EBZLNircpb1JaOzHgZidgb09OQujl94CNsF8kGuF3OECoUrqlwN8 b2m90bd93bg5vRp8Zt7/5FT7gj0tmnvodXFvrz6qnPEOa8veUtcj5tbcsQ/Zagv6 lgZsG4wqdMAl1HQkWpuJHGGuRySKjjff9luYScyH5jXZygIvqCk0vKnDsnqEaZev UsL6vlJJdDm0+qvoJGX/JHiTr8w2yjhJrHsG44glOwxLXBgAE6w+rwa802/LX8sl 95rybYh2VA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:04 2026 by rpki-client