This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer File: TzvVbotU5tonu-ZiLaxny_Aqgeo.cer (raw, json) Hash identifier: 8J7cHvfX6kmgjUK6Ic+0TvR2mfiORUCho+k6k2stpCQ= Subject key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA40A27D178D3B3371166A42AFA7D99 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202401 IP: 194.39.204.0/22 IP: 2a0c:8fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:0a:27:d1:78:d3:b3:37:11:66:a4:2a:fa:7d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:5c:1c:f3:ba:65:96:be:12:24:e9:6c:00: a6:2c:57:f8:73:58:4e:72:2b:25:f9:7d:01:e0:71: cd:0b:16:1c:1e:c1:f9:02:46:58:83:a9:16:a3:d9: 3f:67:3e:55:30:8d:cf:72:53:32:5f:d5:80:54:b7: 0e:04:96:86:f1:58:ff:16:9f:8b:08:d2:86:ce:bf: 57:17:cf:71:01:96:9e:1d:a1:40:3b:0b:19:c9:8b: 0a:b2:85:0f:1b:cd:91:d8:1b:4e:43:8f:f4:82:54: 8f:7a:32:5c:79:92:41:13:c2:47:79:e3:c2:0d:07: b7:b4:15:60:48:3d:75:fe:16:dd:f1:d3:a4:fe:b0: 1a:28:f4:c9:72:87:d7:d6:34:3b:29:6d:3d:b0:8e: e1:92:a2:c6:c4:06:51:0f:a1:f1:a6:ef:9a:7b:e9: f9:ff:30:a1:0a:68:83:e7:e1:7f:e2:be:12:cf:a0: b9:c9:62:26:9a:e1:d2:21:3a:6c:c2:9d:2c:b7:22: 2d:5f:5b:99:2d:19:65:9f:73:f9:75:9e:c3:66:74: d1:f6:06:44:45:e6:e1:44:8e:ff:2e:6b:28:70:39: 6a:55:d4:b7:5c:90:2f:dc:34:1d:49:4a:55:27:c3: a7:9b:c0:d1:aa:31:43:8c:fd:4a:59:ee:ab:d4:6a: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.204.0/22 IPv6: 2a0c:8fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202401 Signature Algorithm: sha256WithRSAEncryption 63:80:50:fd:56:ac:9c:73:60:ef:14:ec:7c:ca:4b:61:3a:8a: cf:c3:c0:0e:6d:68:01:c4:97:84:95:f9:08:91:9a:0a:9b:7b: 8a:95:43:5d:dc:02:f1:e1:10:74:bb:81:cc:20:30:4a:89:91: 0d:b6:06:28:f8:21:5b:1e:b2:3d:48:46:b0:6b:32:c1:a9:c7: 90:89:63:3f:5f:68:f3:cc:f1:20:fa:57:16:9e:5d:ba:8c:cd: 15:fe:e8:89:e9:b5:0c:08:f9:6b:26:7e:ee:b4:ae:ec:0d:16: 8e:81:67:36:a7:d8:47:e6:22:a2:fe:77:a9:29:1b:64:0e:e1: a6:f4:2b:8e:34:39:62:a9:62:c4:21:3b:49:b9:bf:3a:40:36: 44:e9:29:07:e8:40:83:0a:f5:92:0d:f9:06:bb:1e:f0:cb:44: c9:4b:d6:bb:0b:a8:bf:2b:20:4b:59:28:56:1b:65:87:74:07: 28:01:3f:50:48:bf:71:a0:e7:13:dc:45:37:a6:af:5d:16:e3: 94:e5:bc:f4:82:2a:24:e4:6c:27:2e:8d:5d:73:01:15:fb:03: 63:66:9c:d1:5c:cc:00:be:2d:0c:44:e1:5f:00:c6:b6:25:f5: 6a:01:83:2f:d4:b3:c1:20:45:eb:4d:4a:36:cf:8b:a7:a5:80: 8f:70:f0:fd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7pAon0XjTszcRZqQq+n2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjNiZDU2ZThiNTRlNmRhMjdiYmU2NjIyZGFjNjdjYmYwMmE4MWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RBcHPO6ZZa+EiTpbACmLFf4c1hO cisl+X0B4HHNCxYcHsH5AkZYg6kWo9k/Zz5VMI3PclMyX9WAVLcOBJaG8Vj/Fp+L CNKGzr9XF89xAZaeHaFAOwsZyYsKsoUPG82R2BtOQ4/0glSPejJceZJBE8JHeePC DQe3tBVgSD11/hbd8dOk/rAaKPTJcofX1jQ7KW09sI7hkqLGxAZRD6Hxpu+ae+n5 /zChCmiD5+F/4r4Sz6C5yWImmuHSITpswp0styItX1uZLRlln3P5dZ7DZnTR9gZE RebhRI7/LmsocDlqVdS3XJAv3DQdSUpVJ8Onm8DRqjFDjP1KWe6r1GpBsQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFE871W6LVObaJ7vmYi2sZ8vwKoHqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzZmZTE0 OS04YTcyLTQ3ZmQtODczNS03ZGM1YmRkZjkxYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNmZlMTQ5 LThhNzItNDdmZC04NzM1LTdkYzViZGRmOTFiNS8xL1R6dlZib3RVNXRvbnUtWmlM YXhueV9BcWdlby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwifMMA0EAgACMAcDBQMqDI/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWoTANBgkqhkiG9w0BAQsFAAOCAQEAY4BQ/VasnHNg 7xTsfMpLYTqKz8PADm1oAcSXhJX5CJGaCpt7ipVDXdwC8eEQdLuBzCAwSomRDbYG KPghWx6yPUhGsGsywanHkIljP19o88zxIPpXFp5duozNFf7oiem1DAj5ayZ+7rSu 7A0WjoFnNqfYR+Yiov53qSkbZA7hpvQrjjQ5YqlixCE7Sbm/OkA2ROkpB+hAgwr1 kg35Brse8MtEyUvWuwuovysgS1koVhtlh3QHKAE/UEi/caDnE9xFN6avXRbjlOW8 9IIqJORsJy6NXXMBFfsDY2ac0VzMAL4tDEThXwDGtiX1agGDL9SzwSBF601KNs+L p6WAj3Dw/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:44 2026 by rpki-client