This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer File: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer (raw, json) Hash identifier: JBIU5z9AsA9ehij3CEF2qGP1cdbP++xRWI7NNhZKZlo= Subject key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B365873C36A329A55D03B3FD71089BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44789 AS: 50181 AS: 202243 IP: 31.24.184.0/21 IP: 45.10.92.0/22 IP: 77.74.204.0/22 IP: 81.94.240.0/20 IP: 88.132.224.0 -- 88.132.243.255 IP: 92.63.240.0/20 IP: 109.110.128.0/19 IP: 185.45.196.0/22 IP: 185.119.180.0/22 IP: 185.143.200.0/22 IP: 2a00:9860::/32 IP: 2a01:7d60::/32 IP: 2a01:9b80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:58:73:c3:6a:32:9a:55:d0:3b:3f:d7:10:89:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e4:2b:d2:4e:d3:22:4e:3d:ad:b7:bb:2c:b4: 5b:56:1b:80:e4:9c:f8:90:d4:84:41:71:29:81:5a: 16:3e:9e:a9:b6:63:8e:aa:3b:37:29:be:60:30:82: 6b:06:0b:55:db:6d:e0:fa:0a:b9:7f:88:70:a4:fc: 55:c7:94:77:78:44:f1:2c:a5:c8:1d:3a:71:91:b0: a9:50:d0:66:85:67:76:14:84:b6:50:7a:67:34:45: 63:5f:23:88:43:8d:d1:93:fc:10:f6:c2:6c:7c:dc: fc:15:9f:93:40:2c:99:2d:05:b7:cd:47:41:53:ff: 20:7e:c6:f6:55:28:6f:d5:94:14:52:82:b9:22:79: 67:54:5d:95:49:15:0c:5b:e1:c9:06:e9:1e:fe:c6: a6:b2:03:d9:38:9e:83:0f:b4:db:6c:14:43:38:42: c1:37:c6:35:11:a2:ac:4d:c0:81:41:40:2e:ff:d2: 8e:72:d4:82:92:a1:e9:8e:e8:42:a8:ea:fb:3a:5b: ca:02:4b:33:ac:ac:36:3e:4d:d6:8a:ef:e8:20:03: d1:a3:05:e2:8d:e6:2b:fb:9b:6e:33:57:a8:85:74: 2e:ab:b1:82:54:26:0b:ee:71:2d:c6:08:99:ce:55: 21:99:a9:14:c1:58:fc:81:86:6c:27:c3:0b:72:72: 37:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.184.0/21 45.10.92.0/22 77.74.204.0/22 81.94.240.0/20 88.132.224.0-88.132.243.255 92.63.240.0/20 109.110.128.0/19 185.45.196.0/22 185.119.180.0/22 185.143.200.0/22 IPv6: 2a00:9860::/32 2a01:7d60::/32 2a01:9b80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44789 50181 202243 Signature Algorithm: sha256WithRSAEncryption 32:4c:95:ef:d4:30:de:87:00:cc:1c:fe:92:65:24:17:e4:b3: ec:2a:55:f1:aa:a3:67:54:39:fb:58:60:84:a7:b2:79:4a:ab: 54:54:49:23:66:4b:9c:15:31:88:3b:23:2a:d5:f9:11:e2:df: 96:bf:3b:ff:33:64:1d:09:9f:7c:dc:b3:81:ff:d7:34:88:aa: e8:ce:6b:8a:34:ec:f1:72:14:9d:82:f2:74:24:2a:c8:f6:1f: 5a:41:95:90:96:1e:08:07:42:f9:fe:29:c2:84:5a:3d:ef:5e: fb:89:3a:d9:50:f1:58:87:af:b0:5a:5c:6f:e7:d9:9a:96:4f: ba:b1:95:be:8f:23:5b:48:a2:16:45:10:35:7f:83:d1:3a:c8: 10:58:dd:20:b2:df:b2:25:1d:22:17:bb:80:1d:3f:06:bb:2a: 61:08:ba:49:1c:8d:d1:ab:b8:aa:1d:d4:8d:62:c4:62:f7:6e: e4:06:e5:f9:54:f0:87:24:18:e6:e3:3b:43:7d:30:d5:69:28: 5e:d9:1c:5b:d0:36:5f:33:7a:ac:c3:02:eb:b2:a9:07:ce:99: 05:64:33:3a:ea:89:0c:1b:b2:f9:59:f2:ac:94:15:0b:7e:38: ac:47:b4:21:f2:b3:c0:2a:90:d2:1f:24:66:ae:d1:43:53:74: 5a:96:e9:4c -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZt7Nlhzw2oymlXQOz/XEIm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWNhMTA1Y2U0YWY2YzIxY2Q0MjllOTkyZDA2ZWE3ZDA2ZDhhNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+Qr0k7TIk49rbe7LLRbVhuA5Jz4 kNSEQXEpgVoWPp6ptmOOqjs3Kb5gMIJrBgtV223g+gq5f4hwpPxVx5R3eETxLKXI HTpxkbCpUNBmhWd2FIS2UHpnNEVjXyOIQ43Rk/wQ9sJsfNz8FZ+TQCyZLQW3zUdB U/8gfsb2VShv1ZQUUoK5InlnVF2VSRUMW+HJBuke/samsgPZOJ6DD7TbbBRDOELB N8Y1EaKsTcCBQUAu/9KOctSCkqHpjuhCqOr7OlvKAkszrKw2Pk3Wiu/oIAPRowXi jeYr+5tuM1eohXQuq7GCVCYL7nEtxgiZzlUhmakUwVj8gYZsJ8MLcnI3ywIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFE7KEFzkr2whzUKemS0G6n0G2KVtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2MzYTg1 ZC05ZDBiLTQ1NjItOTIzOC00NmVlMGNkN2ZjYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYzNhODVk LTlkMGItNDU2Mi05MjM4LTQ2ZWUwY2Q3ZmNiYS8xL1Rzb1FYT1N2YkNITlFwNlpM UWJxZlFiWXBXMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHoGCCsGAQUF BwEHAQH/BGswaTBKBAIAATBEAwQDHxi4AwQCLQpcAwQCTUrMAwQEUV7wMAwDBAVY hOADBAJYhPADBARcP/ADBAVtboADBAK5LcQDBAK5d7QDBAK5j8gwGwQCAAIwFQMF ACoAmGADBQAqAX1gAwUAKgGbgDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMArvUC AwDEBQIDAxYDMA0GCSqGSIb3DQEBCwUAA4IBAQAyTJXv1DDehwDMHP6SZSQX5LPs KlXxqqNnVDn7WGCEp7J5SqtUVEkjZkucFTGIOyMq1fkR4t+Wvzv/M2QdCZ983LOB /9c0iKrozmuKNOzxchSdgvJ0JCrI9h9aQZWQlh4IB0L5/inChFo97177iTrZUPFY h6+wWlxv59malk+6sZW+jyNbSKIWRRA1f4PROsgQWN0gst+yJR0iF7uAHT8Guyph CLpJHI3Rq7iqHdSNYsRi927kBuX5VPCHJBjm4ztDfTDVaShe2Rxb0DZfM3qswwLr sqkHzpkFZDM66okMG7L5WfKslBULfjisR7Qh8rPAKpDSHyRmrtFDU3RalulM -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:14 2026 by rpki-client