This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer File: TkwTiahJ713MuDA3A7iYyR5j0U8.cer (raw, json) Hash identifier: u+0MaQQoK+4G0b9p/7LMgU/Re6COPIhJ+KdjKzqnEW0= Subject key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38C3E16F210BD8A4A9852684B88D19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 152.89.220.0/22 IP: 2a04:e340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c3:e1:6f:21:0b:d8:a4:a9:85:26:84:b8:8d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:e3:a4:88:f6:3b:66:6c:c4:85:e8:38:5f: f4:f2:c5:60:0f:31:72:a9:4a:4f:2e:02:57:0a:3e: 1a:1e:30:f2:5c:0f:7a:22:9f:96:5c:d4:9a:ee:69: 54:5e:0d:80:ad:bb:81:4b:a8:0f:9e:fd:6e:2d:56: 9f:f1:b1:b8:39:84:b7:4d:d9:bb:31:7b:91:4e:0a: 3e:f6:50:a8:ff:ac:34:56:1e:a3:a8:0f:73:2b:4d: 0d:d5:45:b7:77:99:6b:e6:25:ab:5f:a5:c2:4b:31: 7e:6d:35:f3:99:08:aa:58:66:ce:b3:ce:e7:ad:c0: cc:a4:2d:7c:34:04:11:98:7d:c0:09:81:12:d1:f4: d3:c8:7f:e7:cb:d0:f3:fe:41:8f:7e:db:7c:5c:de: 88:ff:f3:dd:81:a9:e6:69:c1:f6:6b:02:8a:f3:38: 9e:03:e1:56:e7:cb:05:98:5e:f4:02:f3:8a:d1:03: a2:46:e9:78:cb:3d:45:72:26:29:ea:37:bd:bb:2e: 14:ca:5a:f2:d0:92:bb:fa:fa:d9:18:54:fc:ed:d2: 0e:e0:b3:27:f8:8c:41:8b:79:0d:0c:7c:70:11:a0: 3e:21:93:a3:56:1a:4b:1d:fc:16:f0:33:92:0e:3e: b6:41:24:7f:9a:0f:a2:bc:3f:93:65:36:a1:9a:69: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.220.0/22 IPv6: 2a04:e340::/29 Signature Algorithm: sha256WithRSAEncryption 81:a1:57:ca:2b:fb:d9:a3:43:aa:fd:72:e4:a1:2d:25:40:75: 9e:e5:8c:29:90:0b:13:b3:04:7c:ee:fa:1e:8c:8e:cc:f9:9f: e3:3d:d2:04:16:e8:9e:ae:b1:46:73:6f:93:9d:20:2e:20:d8: c7:e9:74:57:c8:6c:77:3c:53:21:d6:0d:3f:80:26:dd:ac:71: 93:15:21:09:69:84:e1:a8:47:a4:90:18:e3:ae:ca:33:80:15: 1a:d2:9b:d0:cb:59:e1:38:27:77:fe:71:d4:20:27:85:fa:e9: 8b:bb:51:8c:c6:fb:0d:de:d9:01:e5:e5:9c:58:d2:df:5f:bc: 34:cc:f0:fb:f4:74:e9:55:b9:af:b0:80:a2:9d:f6:21:00:06: df:97:fc:cb:aa:f3:92:04:5f:81:78:b4:96:08:c8:13:d0:d3: 4d:57:8c:5a:7e:6b:e4:a2:33:d7:16:54:52:70:0a:18:6a:2e: 77:07:76:e2:56:86:0d:2e:bc:1b:44:15:f6:ca:8a:b2:9e:a7: 2c:58:22:55:d5:81:c9:af:21:33:21:22:8c:24:95:a6:15:0a: 78:29:66:4a:8c:58:51:04:38:db:d8:cd:ec:c9:a2:30:0b:54: b9:e3:4f:20:07:63:f2:5e:7d:e3:fa:be:ac:b6:57:af:ae:eb: 70:ec:f2:8f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OMPhbyEL2KSphSaEuI0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTRjMTM4OWE4NDllZjVkY2NiODMwMzcwM2I4OThjOTFlNjNkMTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunfjpIj2O2ZsxIXoOF/08sVgDzFy qUpPLgJXCj4aHjDyXA96Ip+WXNSa7mlUXg2ArbuBS6gPnv1uLVaf8bG4OYS3Tdm7 MXuRTgo+9lCo/6w0Vh6jqA9zK00N1UW3d5lr5iWrX6XCSzF+bTXzmQiqWGbOs87n rcDMpC18NAQRmH3ACYES0fTTyH/ny9Dz/kGPftt8XN6I//PdganmacH2awKK8zie A+FW58sFmF70AvOK0QOiRul4yz1FciYp6je9uy4Uylry0JK7+vrZGFT87dIO4LMn +IxBi3kNDHxwEaA+IZOjVhpLHfwW8DOSDj62QSR/mg+ivD+TZTahmmm72QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFE5ME4moSe9dzLgwNwO4mMkeY9FPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzM5NjVi MC1mZWU5LTQ5YmYtYTU0ZC1hOGQ4Mzg0MzhkOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvMzk2NWIw LWZlZTktNDliZi1hNTRkLWE4ZDgzODQzOGQ4YS8xL1Rrd1RpYWhKNzEzTXVEQTNB N2lZeVI1ajBVOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCmFncMA0EAgACMAcDBQMqBONAMA0GCSqGSIb3 DQEBCwUAA4IBAQCBoVfKK/vZo0Oq/XLkoS0lQHWe5YwpkAsTswR87voejI7M+Z/j PdIEFuierrFGc2+TnSAuINjH6XRXyGx3PFMh1g0/gCbdrHGTFSEJaYThqEekkBjj rsozgBUa0pvQy1nhOCd3/nHUICeF+umLu1GMxvsN3tkB5eWcWNLfX7w0zPD79HTp VbmvsICinfYhAAbfl/zLqvOSBF+BeLSWCMgT0NNNV4xafmvkojPXFlRScAoYai53 B3biVoYNLrwbRBX2yoqynqcsWCJV1YHJryEzISKMJJWmFQp4KWZKjFhRBDjb2M3s yaIwC1S5408gB2PyXn3j+r6stlevrutw7PKP -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:52 2026 by rpki-client