This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.cer (raw, json) Hash identifier: XA2XHOzDP0vZbkFW8GsdjXj06u3YZ0AhV/ORgPI1HkU= Subject key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3D9E75F1B0ED31ACEF7037077798 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.12.104.0/22 IP: 45.86.52.0/22 IP: 45.143.8.0/22 IP: 94.143.225.0/24 IP: 194.147.220.0/24 IP: 2a07:6d00::/29 IP: 2a12:3f80::/29 IP: 2a12:6d80::/29 IP: 2a13:c540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3d:9e:75:f1:b0:ed:31:ac:ef:70:37:07:77:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff44dbaca56dac319401f68a50d917f5424611ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:e6:d6:09:6b:46:8a:bd:9e:50:3d:87:63: 68:d6:d3:89:ef:80:a6:3f:79:4c:ae:d7:19:7c:08: 5e:7b:0b:9c:e5:02:4c:92:c4:a9:d2:6c:7f:fa:67: 86:5d:31:ec:76:0b:ea:17:b6:74:a1:7f:88:2c:74: cd:b6:b4:b3:49:34:57:e0:95:6e:24:08:3f:b6:6a: b2:a2:82:84:26:3c:09:ed:22:9f:da:33:68:b4:8a: a4:1e:2f:ac:f1:c6:e7:c0:bb:b5:e5:57:8d:24:70: ce:90:32:17:a6:5e:85:66:a9:af:75:97:bb:e4:54: 83:8c:de:01:d0:2e:e5:78:ba:02:e6:0e:c3:d3:69: a7:c6:01:9f:d4:ef:90:33:8d:b3:32:5a:cd:2b:ed: c3:8f:7b:f5:32:13:6b:c9:61:ca:48:2f:b3:25:f4: d6:ae:51:f1:a0:f4:b4:c6:d8:d3:ef:72:83:e4:8e: 72:b5:7f:97:f0:3b:fc:b9:ba:1b:62:af:3c:11:73: cd:63:fb:7b:f1:a9:cf:85:a9:a3:4a:7a:4c:e5:25: e7:63:a4:9c:3f:65:75:88:ff:5d:34:dc:67:a5:c2: 4b:96:41:0e:d3:c0:61:5b:3d:6e:dd:cd:f1:fc:d8: f7:5b:f4:fe:54:18:56:6e:90:50:42:37:7a:dd:28: 4e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.104.0/22 45.86.52.0/22 45.143.8.0/22 94.143.225.0/24 194.147.220.0/24 IPv6: 2a07:6d00::/29 2a12:3f80::/29 2a12:6d80::/29 2a13:c540::/29 Signature Algorithm: sha256WithRSAEncryption 82:0d:bd:c8:f2:f5:9d:5a:cd:22:a9:47:dc:aa:a0:76:33:b1: 69:01:16:8b:9b:86:45:f4:42:ee:21:e4:83:f8:ea:a5:df:06: 9d:46:2e:58:08:b6:6e:32:c5:05:7d:98:71:ab:ae:ff:80:4e: 75:09:e8:39:0d:07:66:a4:1b:0e:fb:07:7c:fe:44:dc:03:0a: 6c:a6:b2:5a:3d:fb:fb:fd:b6:a9:af:2e:76:d8:22:19:31:92: b4:3c:cf:b8:1a:85:27:26:de:5a:e2:5c:c6:66:94:fa:74:e9: 1d:01:4f:1a:1d:84:e4:2a:93:05:fc:b9:97:3c:b8:bb:1e:19: 8e:a1:17:5d:8c:09:8f:57:67:27:82:5e:ba:ff:ed:66:52:d5: 56:5a:cb:08:5f:ac:18:15:fc:8e:be:5f:c4:96:ce:b8:c4:dc: 11:9b:da:d4:ea:60:bf:19:45:09:aa:db:d7:47:5f:8f:b0:30: 27:28:cb:13:e1:37:91:de:1c:65:2f:b9:6d:28:d7:4e:93:73: b1:4c:08:2a:d6:4d:c8:c2:93:d1:38:eb:a4:56:97:a6:56:5f: ef:a7:88:92:2b:ae:1d:09:4b:3d:47:0f:b5:6f:0e:7b:a6:3c: cc:b6:79:f9:1c:c6:81:ff:79:e8:c4:00:f0:da:ed:39:f5:d5: 3c:3d:1b:b0 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt57T2edfGw7TGs73A3B3eYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjQ0ZGJhY2E1NmRhYzMxOTQwMWY2OGE1MGQ5MTdmNTQyNDYxMWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTHm1glrRoq9nlA9h2No1tOJ74Cm P3lMrtcZfAheewuc5QJMksSp0mx/+meGXTHsdgvqF7Z0oX+ILHTNtrSzSTRX4JVu JAg/tmqyooKEJjwJ7SKf2jNotIqkHi+s8cbnwLu15VeNJHDOkDIXpl6FZqmvdZe7 5FSDjN4B0C7leLoC5g7D02mnxgGf1O+QM42zMlrNK+3Dj3v1MhNryWHKSC+zJfTW rlHxoPS0xtjT73KD5I5ytX+X8Dv8ubobYq88EXPNY/t78anPhamjSnpM5SXnY6Sc P2V1iP9dNNxnpcJLlkEO08BhWz1u3c3x/Nj3W/T+VBhWbpBQQjd63ShOyQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFP9E26ylbawxlAH2ilDZF/VCRhGtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzUzYTk0 Ny1mZDAzLTQwMTQtOTgyNy1jNWQ4OTUwODE4ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvNTNhOTQ3 LWZkMDMtNDAxNC05ODI3LWM1ZDg5NTA4MThlYy8xL18wVGJyS1Z0ckRHVUFmYUtV TmtYOVVKR0VhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAkBAIAATAeAwQCLQxoAwQCLVY0AwQCLY8IAwQAXo/hAwQAwpPc MCIEAgACMBwDBQMqB20AAwUDKhI/gAMFAyoSbYADBQMqE8VAMA0GCSqGSIb3DQEB CwUAA4IBAQCCDb3I8vWdWs0iqUfcqqB2M7FpARaLm4ZF9ELuIeSD+Oql3wadRi5Y CLZuMsUFfZhxq67/gE51Ceg5DQdmpBsO+wd8/kTcAwpsprJaPfv7/bapry522CIZ MZK0PM+4GoUnJt5a4lzGZpT6dOkdAU8aHYTkKpMF/LmXPLi7HhmOoRddjAmPV2cn gl66/+1mUtVWWssIX6wYFfyOvl/Els64xNwRm9rU6mC/GUUJqtvXR1+PsDAnKMsT 4TeR3hxlL7ltKNdOk3OxTAgq1k3IwpPROOukVpemVl/vp4iSK64dCUs9Rw+1bw57 pjzMtnn5HMaB/3noxADw2u059dU8PRuw -----END CERTIFICATE-----Generated at Mon Jan 26 06:04:33 2026 by rpki-client