This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TrwmqzTIMZdDMt05mo5W6aqbe4U.cer File: TrwmqzTIMZdDMt05mo5W6aqbe4U.cer (raw, json) Hash identifier: padS5u8II07Z5xot9QJ5TyJ1Gnm6dZokH1K8bpiW3Cs= Subject key identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF103CDC5CC39A295CFC8036FE593 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210812 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f1:03:cd:c5:cc:39:a2:95:cf:c8:03:6f:e5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ebc26ab34c831974332dd399a8e56e9aa9b7b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:d4:22:8a:15:19:27:5f:f8:91:72:eb:57: 47:2e:14:9f:51:9d:20:b3:5c:22:10:d2:b5:46:b9: 42:35:01:dd:7d:58:ff:d6:ca:48:84:c6:18:b7:e0: dd:79:7b:3c:19:9e:25:ba:e2:a6:c0:2d:8a:a4:67: b0:72:07:fe:af:30:b5:2b:f7:86:ef:54:31:56:61: 2f:d8:b5:8e:09:5b:e9:19:61:94:01:16:53:16:7b: 9b:35:fe:f1:31:88:00:60:f9:bf:ca:e0:cc:43:2a: 3e:f3:85:ac:63:08:78:b1:72:78:af:44:b6:64:06: f9:2e:61:de:14:44:0d:39:09:36:cc:0d:56:ef:d8: 9b:f5:dc:1b:80:99:0f:3f:59:91:55:3a:03:fe:62: 22:de:ca:b4:f0:d0:4e:c9:4c:02:e8:10:35:5f:39: 24:9a:60:dd:74:52:30:ed:b5:b7:68:e4:dc:63:c7: 78:a8:58:c5:26:d6:b4:23:17:60:5d:32:27:25:b6: ff:13:bb:11:f3:ab:7d:48:ef:0b:37:e7:ac:0c:9b: b9:0c:e6:2b:db:07:3e:0c:ae:4b:f1:a7:db:bb:07: 08:c7:87:25:33:65:18:a0:4d:d7:3e:93:5d:0f:bf: 7c:11:c1:15:a8:74:c2:62:f6:6a:e0:a2:86:cd:87: 4b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BC:26:AB:34:C8:31:97:43:32:DD:39:9A:8E:56:E9:AA:9B:7B:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/92c497-6f23-4ca9-9974-beb790da5b4f/1/TrwmqzTIMZdDMt05mo5W6aqbe4U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210812 Signature Algorithm: sha256WithRSAEncryption 93:56:f5:3f:17:73:4e:b2:06:53:3e:c0:2c:c2:87:80:93:40: c0:87:31:66:21:02:c3:00:30:a5:64:5b:f6:7a:d6:83:28:23: 81:c2:d8:5b:c7:82:90:53:e3:4a:fb:83:a3:ea:57:27:d3:b7: 8b:cf:a1:34:0f:15:ce:7c:0c:32:d3:42:6a:1e:f1:4b:b5:e1: 54:85:f3:51:bd:05:ad:fd:2f:be:21:56:e4:53:ac:b8:98:f5: 53:73:42:07:d8:a7:e2:eb:48:5a:a2:2c:42:68:e0:f8:d8:ce: e1:af:2a:ba:f4:6c:4f:ae:76:64:87:6a:ce:5c:14:3b:3b:dd: 5d:5d:9e:a5:8d:a7:25:3a:fc:5a:42:0f:f7:a3:ca:a7:9c:cd: 17:6a:58:7c:10:69:e7:dc:87:d3:88:8a:32:ae:d6:37:47:35: 24:4e:4a:9b:05:b0:b7:ae:57:06:cc:8d:3a:72:ff:a1:24:48: 24:8a:11:7f:b6:18:81:3f:93:bf:8f:96:36:0b:de:7a:52:a5: 9c:a6:d7:f5:23:80:39:b7:15:7d:31:17:1c:83:ac:8e:8f:d2: ec:b3:c3:a7:aa:82:32:ed:56:d9:89:7b:f5:16:18:b3:d7:a3: 0c:11:8d:37:75:9c:ae:22:cd:7c:31:bc:48:ff:53:c4:4d:64: 0c:65:a6:16 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fvEDzcXMOaKVz8gDb+WTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWJjMjZhYjM0YzgzMTk3NDMzMmRkMzk5YThlNTZlOWFhOWI3Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOHUIooVGSdf+JFy61dHLhSfUZ0g s1wiENK1RrlCNQHdfVj/1spIhMYYt+DdeXs8GZ4luuKmwC2KpGewcgf+rzC1K/eG 71QxVmEv2LWOCVvpGWGUARZTFnubNf7xMYgAYPm/yuDMQyo+84WsYwh4sXJ4r0S2 ZAb5LmHeFEQNOQk2zA1W79ib9dwbgJkPP1mRVToD/mIi3sq08NBOyUwC6BA1Xzkk mmDddFIw7bW3aOTcY8d4qFjFJta0IxdgXTInJbb/E7sR86t9SO8LN+esDJu5DOYr 2wc+DK5L8afbuwcIx4clM2UYoE3XPpNdD798EcEVqHTCYvZq4KKGzYdLjQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFE68Jqs0yDGXQzLdOZqOVumqm3uFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzkyYzQ5 Ny02ZjIzLTRjYTktOTk3NC1iZWI3OTBkYTViNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvOTJjNDk3 LTZmMjMtNGNhOS05OTc0LWJlYjc5MGRhNWI0Zi8xL1Ryd21xelRJTVpkRE10MDVt bzVXNmFxYmU0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM3fDANBgkqhkiG9w0BAQsFAAOCAQEAk1b1PxdzTrIG Uz7ALMKHgJNAwIcxZiECwwAwpWRb9nrWgygjgcLYW8eCkFPjSvuDo+pXJ9O3i8+h NA8VznwMMtNCah7xS7XhVIXzUb0Frf0vviFW5FOsuJj1U3NCB9in4utIWqIsQmjg +NjO4a8quvRsT652ZIdqzlwUOzvdXV2epY2nJTr8WkIP96PKp5zNF2pYfBBp59yH 04iKMq7WN0c1JE5KmwWwt65XBsyNOnL/oSRIJIoRf7YYgT+Tv4+WNgveelKlnKbX 9SOAObcVfTEXHIOsjo/S7LPDp6qCMu1W2Yl79RYYs9ejDBGNN3WcriLNfDG8SP9T xE1kDGWmFg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:30:49 2026 by rpki-client