This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer (raw, json) Hash identifier: eaqkrcCN/N8b9ovbgc6PAHsLlpJFgXnyckeNhXucQeg= Subject key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA539A0E71BB58693B1F9F38B35D6F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 212.6.39.0/24 IP: 2a0d:dd40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:39:a0:e7:1b:b5:86:93:b1:f9:f3:8b:35:d6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b132e935a10f9ce216e0993ae4199c96f5273af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:73:ec:96:ce:e8:e4:63:d5:5f:ac:c1:10: a3:33:12:51:cb:d8:d2:85:de:af:7b:ed:32:06:99: 85:94:01:b8:0a:f4:39:57:4a:cf:65:19:36:d3:eb: 88:3a:42:f1:c2:8f:a5:4c:28:19:1a:f5:8e:6c:0c: 23:eb:e0:f0:59:6d:38:95:f4:f1:1c:5c:4d:17:47: a9:da:41:40:ef:ca:83:cd:d7:bc:27:ec:7a:7b:39: 87:dd:94:8b:83:b1:e1:31:89:7c:d7:cd:01:9d:e3: 30:78:68:5c:df:46:e2:30:e2:5f:0c:04:00:27:c2: de:36:e1:0c:ed:e5:e2:6b:e3:0f:64:47:1d:40:75: ad:b5:d4:4b:48:98:2d:f0:7b:d2:19:11:ca:33:cf: b4:79:fd:a8:55:23:f3:3c:7e:c2:37:51:f0:b2:d0: 6e:80:ec:41:10:84:1f:72:c8:b8:9f:41:53:5e:19: 4c:42:ab:d1:d8:4b:ee:00:3e:fe:48:8f:57:40:64: 80:a1:30:3d:72:e1:17:f8:06:c5:7e:30:65:7b:41: 1f:12:b0:df:fc:9d:bc:df:f9:d8:12:2a:2b:67:ab: b9:48:c8:04:e4:bb:c2:5a:ee:65:9e:e3:5a:5b:64: 3f:65:7d:28:76:5d:bb:1b:cc:19:23:c1:75:3f:6b: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.6.39.0/24 IPv6: 2a0d:dd40::/29 Signature Algorithm: sha256WithRSAEncryption a1:f4:45:31:bc:ce:10:c6:1a:cd:38:c9:d0:b0:0c:48:6f:92: 8f:e5:ef:11:a9:2d:31:8f:c4:b7:3c:e7:69:76:6e:25:2b:a7: 27:d6:5e:38:7a:4b:3e:88:ef:37:2e:ff:6a:f5:5c:9d:06:37: ba:cd:77:20:1d:92:de:1e:1a:d7:50:0c:a5:6c:a4:2d:fb:62: 0c:02:fc:c9:9f:89:18:33:26:98:b3:92:76:22:03:bc:2b:c0: e7:34:62:89:86:cd:d3:f7:01:eb:e7:a2:6b:62:54:d0:16:62: e9:77:e4:f7:65:1a:50:46:06:b5:62:a5:34:f7:b9:cd:1a:73: 07:f1:f8:2d:56:db:51:ac:aa:31:de:ce:7f:b0:45:f5:2e:0c: 8b:32:81:00:d1:1b:ab:d6:52:8d:8c:58:15:06:f1:ef:9c:24: d1:23:c1:61:e0:76:f3:ff:46:7d:c0:be:5e:40:8c:74:11:01: d2:ec:9e:a9:a4:db:63:ec:8e:15:31:c6:9d:ed:d9:9a:38:35: a3:be:67:e4:22:e4:66:9c:61:fd:59:2e:90:a7:94:47:82:b6: d3:1a:02:ed:b0:3e:ac:5c:f8:bf:e5:80:76:bd:7c:b0:13:9d: 21:2b:a9:db:ab:5f:a3:b4:78:49:fb:bc:dd:9c:d0:79:d3:31: 7d:dc:04:a5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pTmg5xu1hpOx+fOLNdbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTMyZTkzNWExMGY5Y2UyMTZlMDk5M2FlNDE5OWM5NmY1MjczYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfZz7JbO6ORj1V+swRCjMxJRy9jS hd6ve+0yBpmFlAG4CvQ5V0rPZRk20+uIOkLxwo+lTCgZGvWObAwj6+DwWW04lfTx HFxNF0ep2kFA78qDzde8J+x6ezmH3ZSLg7HhMYl8180BneMweGhc30biMOJfDAQA J8LeNuEM7eXia+MPZEcdQHWttdRLSJgt8HvSGRHKM8+0ef2oVSPzPH7CN1HwstBu gOxBEIQfcsi4n0FTXhlMQqvR2EvuAD7+SI9XQGSAoTA9cuEX+AbFfjBle0EfErDf /J283/nYEiorZ6u5SMgE5LvCWu5lnuNaW2Q/ZX0odl27G8wZI8F1P2twnwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLEy6TWhD5ziFuCZOuQZnJb1Jzr0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2IzODgy MS0yM2YyLTRlNWUtOTQxYy1hOGYwZWUwMGIyYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYjM4ODIx LTIzZjItNGU1ZS05NDFjLWE4ZjBlZTAwYjJhZC8xL3NUTHBOYUVQbk9JVzRKazY1 Qm1jbHZVbk92US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1AYnMA0EAgACMAcDBQMqDd1AMA0GCSqGSIb3 DQEBCwUAA4IBAQCh9EUxvM4QxhrNOMnQsAxIb5KP5e8RqS0xj8S3POdpdm4lK6cn 1l44eks+iO83Lv9q9VydBje6zXcgHZLeHhrXUAylbKQt+2IMAvzJn4kYMyaYs5J2 IgO8K8DnNGKJhs3T9wHr56JrYlTQFmLpd+T3ZRpQRga1YqU097nNGnMH8fgtVttR rKox3s5/sEX1LgyLMoEA0Rur1lKNjFgVBvHvnCTRI8Fh4Hbz/0Z9wL5eQIx0EQHS 7J6ppNtj7I4VMcad7dmaODWjvmfkIuRmnGH9WS6Qp5RHgrbTGgLtsD6sXPi/5YB2 vXywE50hK6nbq1+jtHhJ+7zdnNB50zF93ASl -----END CERTIFICATE-----Generated at Sun Jan 25 12:09:44 2026 by rpki-client