This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer File: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer (raw, json) Hash identifier: DzitfH7qJqKjm4I0mmIvSwW9KZ8nacp6zD/iob/eKQ0= Subject key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78352B8F92EBDBD10D29055B7D5CABF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206013 IP: 80.89.160.0/20 IP: 80.94.208.0/20 IP: 88.83.128.0/19 IP: 2a00:6e80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2b:8f:92:eb:db:d1:0d:29:05:5b:7d:5c:ab:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:7f:80:a7:f3:42:30:1f:7e:8f:34:75:03: 0a:c5:8f:d1:0e:d3:87:f6:39:f0:57:32:32:d4:0d: ce:32:17:6f:6b:98:df:2a:bb:6a:cf:89:c0:85:a6: dc:28:b5:85:11:cf:f5:e4:11:2e:0c:14:d0:cb:97: ad:99:83:7c:b0:97:8a:ba:ac:61:f7:ef:6c:8b:b7: a0:28:17:33:73:ac:cd:4e:71:a9:2b:15:85:94:9e: 24:8c:49:96:16:20:c6:91:34:97:9a:cb:e7:98:73: e5:00:c2:5c:30:75:a5:0d:16:31:76:ef:54:0a:c3: 4d:19:52:92:60:31:28:2d:16:e8:30:51:c2:fe:3e: 3c:aa:0f:d1:2c:c4:c7:05:bc:1e:8c:92:26:aa:5e: 02:c6:78:82:d0:df:58:cb:15:b7:3d:69:88:f3:9d: 98:c7:d4:c3:50:bd:36:00:41:4b:22:73:7f:6a:fe: 10:03:8e:79:34:a1:1d:be:41:5b:d7:00:fd:e9:9f: 0c:5c:f5:12:d5:24:0f:e6:00:6b:4b:90:15:2d:04: 60:2f:8f:6d:a2:8f:65:f0:89:ce:35:04:6b:23:51: 3d:62:7b:21:ec:bf:10:f1:03:b6:56:3c:0e:10:e6: 8a:6b:ad:29:df:91:bd:be:10:7b:76:e2:c9:57:03: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.89.160.0/20 80.94.208.0/20 88.83.128.0/19 IPv6: 2a00:6e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206013 Signature Algorithm: sha256WithRSAEncryption ab:41:02:fd:10:6e:ee:4b:34:3b:b7:c7:74:07:31:24:fa:fd: 88:d6:01:dc:bf:f1:6e:41:0c:92:8d:7b:81:fb:0d:73:e5:c4: f9:a1:37:b1:16:8f:00:9a:8b:78:fd:69:f6:cc:45:ca:7d:f1: c8:39:bb:43:3c:da:41:99:2a:3b:f5:1c:99:6b:23:53:5b:c9: 12:04:86:7c:e0:63:6d:8a:15:f1:1e:4e:62:d8:8b:04:c4:0c: 0c:81:4f:e8:6e:4d:09:0d:62:5f:a1:23:a2:70:c7:93:6e:35: c3:30:53:0a:7a:59:b0:30:3b:95:88:8f:bd:49:f5:d8:4b:b0: 23:1f:a1:92:78:f9:48:b6:4e:9a:a8:91:2b:06:68:b8:e5:a2: e9:c5:2d:f9:19:5d:95:b5:d1:b8:9f:18:de:3a:71:94:9f:9b: 0b:7e:fe:8b:ac:5b:82:c8:17:2f:fe:82:df:a0:c0:98:56:96: fb:de:f6:09:18:9b:89:1d:04:33:e0:a3:59:f8:61:12:9b:53: 8c:78:c2:0a:9b:b2:2c:37:d8:44:5c:60:40:20:dc:d4:b6:15: 75:49:47:ec:05:a7:3a:9a:db:a5:83:69:11:58:43:7e:27:41: 1b:1f:a6:f7:d7:50:f2:bc:a7:ef:63:91:a3:d6:df:3d:16:0f: 31:2d:cc:ff -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt4NSuPkuvb0Q0pBVt9XKv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTY5YjQwMmI2N2Q3NTkzNmY0NWRjOGJjNTRiODY4MTRlMDYzNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbl/gKfzQjAffo80dQMKxY/RDtOH 9jnwVzIy1A3OMhdva5jfKrtqz4nAhabcKLWFEc/15BEuDBTQy5etmYN8sJeKuqxh 9+9si7egKBczc6zNTnGpKxWFlJ4kjEmWFiDGkTSXmsvnmHPlAMJcMHWlDRYxdu9U CsNNGVKSYDEoLRboMFHC/j48qg/RLMTHBbwejJImql4CxniC0N9YyxW3PWmI852Y x9TDUL02AEFLInN/av4QA455NKEdvkFb1wD96Z8MXPUS1SQP5gBrS5AVLQRgL49t oo9l8InONQRrI1E9Ynsh7L8Q8QO2VjwOEOaKa60p35G9vhB7duLJVwNwYwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFE5ptAK2fXWTb0Xci8VLhoFOBja6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzY4OWFi NS0zMGQyLTQ2YTMtOGM1NC0xNmI0MTk2ZmEyOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvNjg5YWI1 LTMwZDItNDZhMy04YzU0LTE2YjQxOTZmYTI5NC8xL1RtbTBBclo5ZFpOdlJkeUx4 VXVHZ1U0R05yby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEUFmgAwQEUF7QAwQFWFOAMA0EAgACMAcDBQAq AG6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkvTANBgkqhkiG9w0BAQsFAAOC AQEAq0EC/RBu7ks0O7fHdAcxJPr9iNYB3L/xbkEMko17gfsNc+XE+aE3sRaPAJqL eP1p9sxFyn3xyDm7QzzaQZkqO/UcmWsjU1vJEgSGfOBjbYoV8R5OYtiLBMQMDIFP 6G5NCQ1iX6EjonDHk241wzBTCnpZsDA7lYiPvUn12EuwIx+hknj5SLZOmqiRKwZo uOWi6cUt+RldlbXRuJ8Y3jpxlJ+bC37+i6xbgsgXL/6C36DAmFaW+972CRibiR0E M+CjWfhhEptTjHjCCpuyLDfYRFxgQCDc1LYVdUlH7AWnOprbpYNpEVhDfidBGx+m 99dQ8ryn72ORo9bfPRYPMS3M/w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:38 2026 by rpki-client