This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer File: _ToehGW_xN9wCJQ3LQuYCOi2Keo.cer (raw, json) Hash identifier: PMpRsT2g9Rk8qALIdYtywaMU/6+DcvHtN9BpUW/V2Ac= Subject key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36BB76B45DD839A30A0B0F411E7127 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47692 AS: 211864 IP: 5.183.173.0 -- 5.183.175.255 IP: 45.155.244.0/22 IP: 77.244.240.0/20 IP: 81.173.80.0/23 IP: 83.137.112.0/21 IP: 84.242.8.0/21 IP: 92.42.136.0/21 IP: 146.255.56.0/21 IP: 192.166.241.0 -- 192.166.243.255 IP: 212.232.24.0/21 IP: 217.74.8.0/21 IP: 2a02:1b8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:bb:76:b4:5d:d8:39:a3:0a:0b:0f:41:1e:71:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:76:cf:7b:5d:af:3d:4a:42:2d:96:98:c8: 54:de:ee:a0:e6:f8:bb:10:e9:e2:d2:4f:30:32:3c: b3:fd:57:5e:27:f0:41:81:f0:43:e4:b4:0b:c7:62: 9b:31:2f:19:1d:56:10:86:c2:cc:6d:7e:0c:1e:d5: 57:e5:51:2d:50:2f:27:a1:f3:f5:95:2a:a3:07:26: e9:98:c0:4d:c6:a5:4c:00:67:5e:ac:5e:6a:86:e0: 89:f3:1b:49:a3:ef:2d:e6:03:cc:0e:30:cf:e5:05: 58:a8:be:80:cb:30:56:8c:e2:3f:91:ea:4f:ee:4c: 1f:03:16:85:54:d0:e1:15:71:98:14:b1:5c:65:d0: 3d:f1:6d:3d:ac:81:7b:d8:41:b0:b3:57:c6:e4:eb: c0:4c:90:96:82:be:2f:19:4f:df:fa:bf:0f:dc:16: 61:79:37:e2:94:cf:0c:1a:46:94:63:c6:32:d6:33: 36:76:5f:c0:6d:d3:ad:e3:da:97:98:28:88:c5:d6: 58:1d:8c:a4:fb:93:5f:26:08:02:99:2e:00:6d:0a: ab:d7:93:de:90:b7:46:5b:e4:b0:fd:58:60:1c:65: e7:d9:3b:f6:fe:c1:e9:75:05:d1:68:66:37:fa:1c: 6e:19:6b:c3:36:91:76:78:79:9e:41:b4:25:5c:1c: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.173.0-5.183.175.255 45.155.244.0/22 77.244.240.0/20 81.173.80.0/23 83.137.112.0/21 84.242.8.0/21 92.42.136.0/21 146.255.56.0/21 192.166.241.0-192.166.243.255 212.232.24.0/21 217.74.8.0/21 IPv6: 2a02:1b8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47692 211864 Signature Algorithm: sha256WithRSAEncryption 21:86:ca:6b:cb:13:b9:44:3f:90:0a:ee:15:81:7a:2b:1f:9b: 1b:fd:15:7d:3c:e4:4b:e0:41:13:fb:0a:33:bd:b9:32:34:9e: a9:4d:95:d1:a4:43:81:08:8a:cd:c6:ff:36:bb:d0:f6:14:ad: c1:01:6a:e5:f1:45:f9:91:bb:17:f5:87:80:e5:28:b6:fe:65: 90:57:06:e7:0a:2c:3d:fa:af:e4:cf:18:86:b2:ef:81:73:18: 9a:27:ce:b3:68:96:d6:1c:cc:d1:2c:63:42:d7:21:75:53:a8: 63:e5:80:57:bc:33:da:4d:bf:7c:e6:4f:01:9d:b1:dc:1f:33: 05:b4:bf:60:fa:17:96:6e:f1:fc:f3:b2:34:e0:25:46:06:f6: cf:71:78:bd:27:b7:4b:4f:07:5a:7d:f4:da:93:ae:76:52:86: 22:8e:6d:39:6e:39:6d:9b:ab:d4:56:4b:05:b1:19:6f:2a:7d: 24:53:16:70:f8:d2:5c:83:3a:ca:c1:d6:cd:72:3b:f7:ef:70: 26:89:f0:08:af:4e:7c:ea:3b:d3:62:31:f6:8f:64:9a:0e:36: 05:c3:9b:f0:f1:ef:ac:c0:2f:6c:5a:bb:89:65:60:1c:33:d1: 4a:ff:2e:7f:36:5a:7e:a4:ea:80:91:60:26:87:a6:fb:3f:da: 47:79:06:ab -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgISAZt7Nrt2tF3YOaMKCw9BHnEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDNhMWU4NDY1YmZjNGRmNzAwODk0MzcyZDBiOTgwOGU4YjYyOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8d2z3tdrz1KQi2WmMhU3u6g5vi7 EOni0k8wMjyz/VdeJ/BBgfBD5LQLx2KbMS8ZHVYQhsLMbX4MHtVX5VEtUC8nofP1 lSqjBybpmMBNxqVMAGderF5qhuCJ8xtJo+8t5gPMDjDP5QVYqL6AyzBWjOI/kepP 7kwfAxaFVNDhFXGYFLFcZdA98W09rIF72EGws1fG5OvATJCWgr4vGU/f+r8P3BZh eTfilM8MGkaUY8Yy1jM2dl/AbdOt49qXmCiIxdZYHYyk+5NfJggCmS4AbQqr15Pe kLdGW+Sw/VhgHGXn2Tv2/sHpdQXRaGY3+hxuGWvDNpF2eHmeQbQlXBxOowIDAQAB o4IDADCCAvwwHQYDVR0OBBYEFP06HoRlv8TfcAiUNy0LmAjotinqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzUxMzcz NC1hNDg1LTRjMjgtOGFhNi05NTU1ZDMwZjZmOGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNTEzNzM0 LWE0ODUtNGMyOC04YWE2LTk1NTVkMzBmNmY4Zi8xL19Ub2VoR1dfeE45d0NKUTNM UXVZQ09pMktlby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHoGCCsGAQUF BwEHAQH/BGswaTBYBAIAATBSMAwDBAAFt60DBAQFt6ADBAItm/QDBARN9PADBAFR rVADBANTiXADBANU8ggDBANcKogDBAOS/zgwDAMEAMCm8QMEAsCm8AMEA9ToGAME A9lKCDANBAIAAjAHAwUDKgIBuDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAukwC AwM7mDANBgkqhkiG9w0BAQsFAAOCAQEAIYbKa8sTuUQ/kAruFYF6Kx+bG/0VfTzk S+BBE/sKM725MjSeqU2V0aRDgQiKzcb/NrvQ9hStwQFq5fFF+ZG7F/WHgOUotv5l kFcG5wosPfqv5M8YhrLvgXMYmifOs2iW1hzM0SxjQtchdVOoY+WAV7wz2k2/fOZP AZ2x3B8zBbS/YPoXlm7x/POyNOAlRgb2z3F4vSe3S08HWn302pOudlKGIo5tOW45 bZur1FZLBbEZbyp9JFMWcPjSXIM6ysHWzXI79+9wJonwCK9OfOo702Ix9o9kmg42 BcOb8PHvrMAvbFq7iWVgHDPRSv8ufzZafqTqgJFgJoem+z/aR3kGqw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:06 2026 by rpki-client