This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer File: TsJJt68-5pxbvfPH9MvuHqrsSU8.cer (raw, json) Hash identifier: kibGiGSaDOUdXgwPsxzc5HwXJRu/pgn0A8aYZjj1Gu4= Subject key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A32E707B4162D5E68D1A6AC26B2D68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216299 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2e:70:7b:41:62:d5:e6:8d:1a:6a:c2:6b:2d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:23:4b:f4:f0:31:69:62:b7:c5:97:83:e9: 62:fb:bb:79:c3:50:33:41:9e:d6:83:0e:22:62:a2: 8c:eb:e3:ec:f0:60:9f:e7:cb:1b:54:63:15:ae:65: 38:5c:f0:0a:d0:62:4a:d2:3b:9a:bd:c1:f6:46:62: 97:df:31:c1:29:45:0c:68:ea:ef:09:70:bd:73:9d: 62:ae:e9:36:22:28:dd:df:8f:b7:c6:28:83:31:be: c2:0d:a9:83:b8:05:d1:ef:29:48:b5:e1:8f:cf:2c: 5f:85:ed:59:2f:eb:33:bc:21:39:af:47:3c:2d:3a: c2:1a:37:66:bc:08:32:ac:86:4d:9f:bb:9a:29:f9: 02:89:9f:05:5d:1d:af:3a:66:52:35:88:34:c1:15: 84:17:42:cd:1a:9a:29:30:ab:ce:6c:c0:bc:2d:d2: a7:21:9f:29:5c:1f:16:ad:76:fb:b4:82:82:07:82: b7:da:b5:9e:29:be:63:c7:a0:77:f3:09:b8:aa:92: 98:4b:e9:50:b3:68:6d:ea:d7:81:62:53:01:f8:f8: b8:55:1c:92:98:d3:1c:31:97:44:10:c9:fe:f1:c3: 95:86:3f:66:5f:09:cf:d5:95:ac:63:2c:0e:25:ca: d9:5a:1a:fc:6c:d0:25:ce:fc:37:5c:67:3e:46:45: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216299 Signature Algorithm: sha256WithRSAEncryption 52:d0:87:64:ed:4a:7c:f5:f5:58:87:03:ae:2f:a2:6d:ca:68: de:41:df:a8:fc:77:d4:9d:88:94:64:4e:57:ec:e1:23:15:bd: cf:d5:b3:cf:6b:b1:6a:8c:8a:c1:ae:bf:c2:ac:8e:53:86:15: 75:9f:d0:39:8e:e4:e0:8f:66:8d:0d:dd:31:25:f2:b6:6b:43: 31:04:45:19:50:0f:dd:5e:d8:c3:07:85:e8:d2:96:96:4c:c4: 84:b0:ed:a1:d6:4b:2e:44:e4:b4:f9:55:90:bf:5e:ac:68:42: c7:34:b0:ec:d2:ad:36:d2:c4:89:b4:f1:82:77:76:0e:07:b5: a6:ae:3d:8d:f3:70:39:73:de:81:33:d2:e5:fd:c3:7b:38:11: 55:5c:e6:5c:b2:e9:04:4f:92:11:82:1d:96:ca:72:93:77:c3: d0:8a:d5:c2:97:df:0c:a3:37:5e:5f:0b:60:1a:30:0e:80:fb: 6b:57:56:86:93:38:ad:2b:2e:db:70:8c:84:99:44:db:c5:9d: a2:e3:07:a0:e1:92:15:b8:ac:33:34:5b:66:e1:cb:8f:66:19: 36:9b:e9:e4:d7:95:0c:ee:34:5e:87:93:f8:4a:5c:31:d5:9c: 91:df:fb:0d:21:a3:e6:56:8a:dd:09:3e:13:55:16:b1:fb:d5: 12:df:03:5e -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt4oy5we0Fi1eaNGmrCay1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWMyNDliN2FmM2VlNjljNWJiZGYzYzdmNGNiZWUxZWFhZWM0OTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzUjS/TwMWlit8WXg+li+7t5w1Az QZ7Wgw4iYqKM6+Ps8GCf58sbVGMVrmU4XPAK0GJK0juavcH2RmKX3zHBKUUMaOrv CXC9c51iruk2Iijd34+3xiiDMb7CDamDuAXR7ylIteGPzyxfhe1ZL+szvCE5r0c8 LTrCGjdmvAgyrIZNn7uaKfkCiZ8FXR2vOmZSNYg0wRWEF0LNGpopMKvObMC8LdKn IZ8pXB8WrXb7tIKCB4K32rWeKb5jx6B38wm4qpKYS+lQs2ht6teBYlMB+Pi4VRyS mNMcMZdEEMn+8cOVhj9mXwnP1ZWsYywOJcrZWhr8bNAlzvw3XGc+RkX0hwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFE7CSbevPuacW73zx/TL7h6q7ElPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUyYjg0 MTU2LTk1OTctNDRiNC1iZDI0LTY1ZGUyYzM1NWVmYy8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTJi ODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1ZWZjLzEvNEVDMjQ5QjdBRjNF RTY5QzVCQkRGM0M3RjRDQkVFMUVBQUVDNDk0Ri5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDTOsw DQYJKoZIhvcNAQELBQADggEBAFLQh2TtSnz19ViHA64vom3KaN5B36j8d9SdiJRk Tlfs4SMVvc/Vs89rsWqMisGuv8KsjlOGFXWf0DmO5OCPZo0N3TEl8rZrQzEERRlQ D91e2MMHhejSlpZMxISw7aHWSy5E5LT5VZC/XqxoQsc0sOzSrTbSxIm08YJ3dg4H taauPY3zcDlz3oEz0uX9w3s4EVVc5lyy6QRPkhGCHZbKcpN3w9CK1cKX3wyjN15f C2AaMA6A+2tXVoaTOK0rLttwjISZRNvFnaLjB6DhkhW4rDM0W2bhy49mGTab6eTX lQzuNF6Hk/hKXDHVnJHf+w0ho+ZWit0JPhNVFrH71RLfA14= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:36 2026 by rpki-client