This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer File: TphKWkt4CLtOoy0xC90H7MlXURM.cer (raw, json) Hash identifier: bgJi7PEebQi5ntOWjzE5lrkAhqEbBjg/Z9ZuhCVV8FM= Subject key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834DB6E32A306BFBC6FECCF8DB60EF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21162 IP: 5.157.88.0/21 IP: 46.231.248.0/21 IP: 178.248.168.0/21 IP: 185.44.136.0/22 IP: 2a02:bd0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:db:6e:32:a3:06:bf:bc:6f:ec:cf:8d:b6:0e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:99:12:e6:53:c2:f5:c2:61:2e:b5:12:f1: 0e:e3:a6:d0:bf:d6:e5:36:d6:7a:36:19:e5:6c:9e: 66:d3:f1:4f:41:3f:ac:a8:84:1b:ae:90:6f:cd:0c: d3:2d:18:be:19:e7:47:bb:92:c7:fd:80:a6:cd:a9: 67:df:3b:72:39:21:8a:97:0f:9b:23:b4:b7:05:24: 16:7e:01:1d:db:aa:aa:3e:f8:6c:bf:c2:68:da:90: 18:98:23:52:15:ea:bc:67:4b:95:9d:d5:14:57:11: d4:c6:59:79:e4:b1:f7:f9:e2:fd:4d:a5:3a:41:c6: 9d:77:0d:dd:bd:e0:d6:46:04:68:1f:e2:54:e1:d8: 59:e0:b4:52:f3:dc:72:67:76:6c:dd:96:e2:43:89: 05:37:63:cc:3e:38:b2:f4:84:38:7c:20:ac:ef:66: e9:96:2b:d4:a1:52:a1:56:fa:fd:2e:89:b8:07:8c: 51:48:71:67:29:e8:5b:ea:ba:48:a4:17:eb:ed:2f: 17:51:56:cd:ed:07:1a:fc:ba:ef:dd:5a:ef:bd:9b: c4:19:24:60:8f:ad:f1:26:6d:b9:c8:48:76:19:46: 73:c8:3f:30:90:02:f0:bd:af:b2:57:4c:10:81:6f: de:35:6b:f0:00:1b:e1:05:13:14:21:14:27:0d:4c: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.88.0/21 46.231.248.0/21 178.248.168.0/21 185.44.136.0/22 IPv6: 2a02:bd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21162 Signature Algorithm: sha256WithRSAEncryption a7:e6:70:bc:65:70:12:6f:61:6a:71:b6:c5:14:d8:80:88:f1: d0:bb:94:b6:5f:4e:82:e5:da:d2:5a:14:0e:e2:21:83:f1:bf: 36:78:1e:f6:fd:b1:14:23:3d:48:f6:97:65:f7:fe:a8:28:06: 75:a3:e9:62:b0:7a:59:98:ff:59:7c:f2:89:1d:33:bd:e2:64: 0c:fe:30:51:0f:ef:ea:9b:2d:70:f4:9f:42:83:ce:a0:4b:cb: 31:68:11:93:32:3e:8d:9f:23:e2:bc:7c:26:6f:8d:6c:4b:aa: 7e:85:d2:34:42:e1:30:e8:90:ec:10:2b:ae:4f:6b:a5:8a:6b: 24:5f:92:fd:5e:da:29:2a:56:4e:8e:a8:65:d3:1e:3c:d6:75: 8d:32:97:f0:1c:39:e0:c6:cb:a0:45:dd:29:c6:aa:22:4f:3f: 8d:f1:3d:8e:3a:b5:ac:7f:21:29:c1:19:a3:b3:f9:df:9b:f8: fe:d9:c8:fe:86:87:02:a2:61:70:c9:37:56:5b:b4:64:52:1f: 74:83:4b:a5:26:35:ee:15:df:85:da:ce:7b:be:5d:24:2b:ff: ee:ef:f3:60:36:a7:18:54:72:30:d9:a3:ed:6d:13:ab:e7:67: fd:ed:90:97:6f:f9:ad:5d:3f:07:4f:74:4e:3e:ea:8a:7e:a1: 6b:2c:2d:6e -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt4NNtuMqMGv7xv7M+Ntg7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTk4NGE1YTRiNzgwOGJiNGVhMzJkMzEwYmRkMDdlY2M5NTc1MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcCZEuZTwvXCYS61EvEO46bQv9bl NtZ6NhnlbJ5m0/FPQT+sqIQbrpBvzQzTLRi+GedHu5LH/YCmzaln3ztyOSGKlw+b I7S3BSQWfgEd26qqPvhsv8Jo2pAYmCNSFeq8Z0uVndUUVxHUxll55LH3+eL9TaU6 Qcaddw3dveDWRgRoH+JU4dhZ4LRS89xyZ3Zs3ZbiQ4kFN2PMPjiy9IQ4fCCs72bp livUoVKhVvr9Lom4B4xRSHFnKehb6rpIpBfr7S8XUVbN7Qca/Lrv3VrvvZvEGSRg j63xJm25yEh2GUZzyD8wkALwva+yV0wQgW/eNWvwABvhBRMUIRQnDUwMnQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFE6YSlpLeAi7TqMtMQvdB+zJV1ETMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzQxZGVj MS0xZWIxLTQ5YzctOWQ1MC1jYTU5NWUzNGQ1YWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvNDFkZWMx LTFlYjEtNDljNy05ZDUwLWNhNTk1ZTM0ZDVhYy8xL1RwaEtXa3Q0Q0x0T295MHhD OTBIN01sWFVSTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBZ1YAwQDLuf4AwQDsvioAwQCuSyIMA0EAgAC MAcDBQAqAgvQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlKqMA0GCSqGSIb3DQEB CwUAA4IBAQCn5nC8ZXASb2FqcbbFFNiAiPHQu5S2X06C5drSWhQO4iGD8b82eB72 /bEUIz1I9pdl9/6oKAZ1o+lisHpZmP9ZfPKJHTO94mQM/jBRD+/qmy1w9J9Cg86g S8sxaBGTMj6NnyPivHwmb41sS6p+hdI0QuEw6JDsECuuT2ulimskX5L9XtopKlZO jqhl0x481nWNMpfwHDngxsugRd0pxqoiTz+N8T2OOrWsfyEpwRmjs/nfm/j+2cj+ hocComFwyTdWW7RkUh90g0ulJjXuFd+F2s57vl0kK//u7/NgNqcYVHIw2aPtbROr 52f97ZCXb/mtXT8HT3ROPuqKfqFrLC1u -----END CERTIFICATE-----Generated at Sun Jan 25 22:56:50 2026 by rpki-client