This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TyKDTEeXR7CovQphKfn-ZfgwJtA.cer File: TyKDTEeXR7CovQphKfn-ZfgwJtA.cer (raw, json) Hash identifier: mOs5MFOzSwHcRTJfUnSibv5YZ+HUCjwB9t0qUls/CGk= Subject key identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78348E125222AC1EA61D439AC85330BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214592 IP: 2001:678:60c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8e:12:52:22:ac:1e:a6:1d:43:9a:c8:53:30:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f22834c479747b0a8bd0a6129f9fe65f83026d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:a2:9e:73:b4:4b:04:a8:82:4d:94:81:cc: 35:9a:b0:70:c4:1e:81:b5:41:30:40:c6:9a:c2:42: fe:11:13:26:13:29:cb:d2:4a:fa:d7:9e:05:25:1c: a4:68:df:41:8a:46:1f:77:96:81:42:3c:6b:9a:a5: 84:a7:e6:7e:69:bb:ff:e9:04:6f:f4:92:db:0b:9a: e7:76:6f:c4:cd:9c:b0:73:b2:96:bf:cc:87:7d:13: bf:5b:06:70:12:f2:dd:05:05:cd:20:5b:c2:1f:3c: ac:d0:5a:4c:4f:b1:b9:96:73:a8:01:86:86:bd:81: f5:b4:e0:e3:12:9f:67:16:25:b0:c7:86:ba:8f:4c: fe:fe:40:40:cb:b9:67:ac:61:80:af:dd:a5:aa:1b: d2:ba:ec:c9:6c:34:9a:46:45:20:76:be:8b:31:76: 14:6e:39:9d:bb:91:f1:84:a3:e5:10:48:2d:c4:5d: 90:b1:2c:ea:6a:26:a1:24:5b:b8:d7:4d:ba:ec:ef: c2:30:2b:1a:b9:a4:62:85:54:3f:aa:26:0d:fe:f4: 7e:8f:97:65:88:dd:a0:7d:6c:7f:2a:23:1b:56:59: d0:99:24:3e:9e:10:d7:c6:44:52:a3:eb:ac:5d:a4: cf:3b:eb:6d:e9:56:50:ef:6a:fe:ec:10:9f:18:85: 8d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:22:83:4C:47:97:47:B0:A8:BD:0A:61:29:F9:FE:65:F8:30:26:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b9a050-7726-4eb5-b403-7bf724056153/1/TyKDTEeXR7CovQphKfn-ZfgwJtA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:60c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214592 Signature Algorithm: sha256WithRSAEncryption 48:e4:f5:81:68:58:98:92:30:31:b7:c5:82:59:ff:e0:37:e3: d5:2c:ff:cd:70:7d:13:fc:51:45:6c:06:99:76:44:11:f3:1f: 7c:ed:31:b1:e8:3d:b2:07:97:44:26:72:05:9b:59:ba:1e:f5: 57:f0:fb:b0:42:27:55:70:9d:9c:84:79:32:a5:4f:57:07:60: 6d:99:7d:7a:72:8b:31:6a:a9:54:db:b7:77:c8:02:58:7c:df: b7:04:ba:6c:30:58:60:6d:10:c9:c7:ee:16:0a:a2:60:19:d9: 33:0d:d8:23:cc:7b:f4:f9:f4:57:ad:41:46:06:34:65:7e:6a: d5:04:2c:ed:0a:95:7b:3a:2d:68:27:10:20:2a:b2:fa:e2:16: a6:8f:ed:57:93:6f:57:1e:51:34:42:3a:ca:9d:5a:bc:17:9c: a8:c4:30:57:1f:05:ad:65:1c:2e:72:9f:06:e6:96:39:11:3c: ed:48:cc:8f:ea:93:ac:0c:0b:f8:a2:ce:1f:d8:59:c6:a4:8b: f9:7e:65:21:1b:c6:e7:05:0f:42:82:ca:44:9e:b3:b5:00:ff: cb:14:10:24:d2:2d:5b:ad:84:54:ff:d4:76:6e:8a:af:98:66: b7:22:27:7b:08:f6:29:69:53:06:f4:ca:10:fb:05:cc:7f:b4: bc:25:65:fa -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt4NI4SUiKsHqYdQ5rIUzC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjIyODM0YzQ3OTc0N2IwYThiZDBhNjEyOWY5ZmU2NWY4MzAyNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovminnO0SwSogk2Ugcw1mrBwxB6B tUEwQMaawkL+ERMmEynL0kr6154FJRykaN9BikYfd5aBQjxrmqWEp+Z+abv/6QRv 9JLbC5rndm/EzZywc7KWv8yHfRO/WwZwEvLdBQXNIFvCHzys0FpMT7G5lnOoAYaG vYH1tODjEp9nFiWwx4a6j0z+/kBAy7lnrGGAr92lqhvSuuzJbDSaRkUgdr6LMXYU bjmdu5HxhKPlEEgtxF2QsSzqaiahJFu410267O/CMCsauaRihVQ/qiYN/vR+j5dl iN2gfWx/KiMbVlnQmSQ+nhDXxkRSo+usXaTPO+tt6VZQ72r+7BCfGIWNoQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFE8ig0xHl0ewqL0KYSn5/mX4MCbQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2I5YTA1 MC03NzI2LTRlYjUtYjQwMy03YmY3MjQwNTYxNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYjlhMDUw LTc3MjYtNGViNS1iNDAzLTdiZjcyNDA1NjE1My8xL1R5S0RURWVYUjdDb3ZRcGhL Zm4tWmZnd0p0QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAYMMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNGQDANBgkqhkiG9w0BAQsFAAOCAQEASOT1gWhYmJIwMbfFgln/4Dfj1Sz/ zXB9E/xRRWwGmXZEEfMffO0xseg9sgeXRCZyBZtZuh71V/D7sEInVXCdnIR5MqVP VwdgbZl9enKLMWqpVNu3d8gCWHzftwS6bDBYYG0QycfuFgqiYBnZMw3YI8x79Pn0 V61BRgY0ZX5q1QQs7QqVezotaCcQICqy+uIWpo/tV5NvVx5RNEI6yp1avBecqMQw Vx8FrWUcLnKfBuaWORE87UjMj+qTrAwL+KLOH9hZxqSL+X5lIRvG5wUPQoLKRJ6z tQD/yxQQJNItW62EVP/Udm6Kr5hmtyInewj2KWlTBvTKEPsFzH+0vCVl+g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:59 2026 by rpki-client