This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer File: tLC71kRVeO28e6a1v3ypNo0kF78.cer (raw, json) Hash identifier: wS/g9JB+ilPjuF7CfW6R0EtQSzI5wlVkYQUHZcJ+Q70= Subject key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8153BE372C63943913DBA945FDD409 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.113.42.0/23 IP: 194.113.54.0/23 IP: 2a0f:f640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:53:be:37:2c:63:94:39:13:db:a9:45:fd:d4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:02:8f:c4:d7:82:0c:79:db:ec:d1:e8:eb: 21:08:d4:a1:30:6d:1d:dc:37:b6:6d:10:fd:70:79: 4c:08:de:e2:42:3f:86:f8:3b:b2:f3:58:92:ad:e4: 00:15:84:c2:99:8d:11:82:59:dd:c2:a3:bd:21:c7: 04:43:7d:63:1f:4b:74:47:69:9a:bb:e7:cd:94:0e: 33:92:a3:e2:9c:7a:8e:a9:5e:40:87:ff:c1:9c:8a: 00:05:57:e4:00:38:6f:ad:34:11:46:fc:14:18:57: a8:88:6e:4d:cc:a9:06:da:8a:9b:7c:bd:84:cc:fd: 2c:51:ea:16:2e:65:31:68:36:5b:5b:31:0a:b8:79: 4c:f4:ac:6c:24:fc:bb:9d:96:15:c0:12:f7:2b:8a: cd:13:4f:5f:62:87:7f:2c:85:6f:f3:6f:cf:1d:2c: 74:1f:bd:78:49:fd:52:3e:fd:44:7e:bb:54:c2:40: a5:c8:16:94:0f:a7:44:22:82:0f:6a:dd:5c:e6:ed: 19:46:49:79:3f:d9:66:56:a8:02:68:8b:a5:be:6f: 08:5a:84:50:da:1a:0e:e4:ca:3a:aa:f2:c5:71:74: 41:f9:73:4e:ba:95:f6:29:1e:7b:ab:63:31:bd:da: f0:f1:1a:f5:db:4b:37:9d:c0:af:eb:71:7b:ba:f1: 25:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.42.0/23 194.113.54.0/23 IPv6: 2a0f:f640::/29 Signature Algorithm: sha256WithRSAEncryption 83:d7:ea:95:6b:a6:40:60:0b:c5:17:1d:cb:da:73:4b:31:39: b4:94:04:9a:41:f9:ff:c5:23:d6:f2:b5:62:86:ad:b0:61:85: 0e:7f:b7:d5:8d:6a:dd:ac:2a:f1:9b:ac:da:6d:29:69:c1:5c: 05:95:de:e6:a8:d8:da:95:49:e0:5a:eb:b1:df:72:3a:f4:58: 5a:17:01:de:a9:6b:c6:f1:0c:fa:80:55:7c:d4:89:77:f1:83: 04:97:91:bf:76:1f:f5:f3:d9:16:44:95:c7:e5:3b:b9:35:b2: 60:bb:c5:0a:9a:4c:d9:f0:5b:af:39:a3:2b:c6:a2:ec:43:a0: f4:4d:89:af:a9:96:d6:e4:a0:c5:6d:7c:ea:3e:27:bf:cb:5f: 33:25:b7:31:86:34:c6:be:98:13:e4:d7:dd:8d:d2:39:1c:31: 95:ec:9f:43:f3:64:26:30:4e:66:84:20:ae:43:e8:bc:ee:48: 73:57:e2:b9:d8:75:ea:ec:a0:b0:70:de:cf:9f:cf:ae:f6:aa: 94:bb:da:e6:76:1c:ab:09:a2:cf:8c:25:df:61:e6:57:94:04: 14:95:ea:95:47:c4:02:7b:aa:07:8c:52:07:28:00:41:30:ca: 38:87:65:c5:02:40:95:63:cd:a3:c9:20:59:57:6f:18:f9:f4: a2:ff:7d:69 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt/gVO+NyxjlDkT26lF/dQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGIwYmJkNjQ0NTU3OGVkYmM3YmE2YjViZjdjYTkzNjhkMjQxN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEYCj8TXggx52+zR6OshCNShMG0d 3De2bRD9cHlMCN7iQj+G+Duy81iSreQAFYTCmY0RglndwqO9IccEQ31jH0t0R2ma u+fNlA4zkqPinHqOqV5Ah//BnIoABVfkADhvrTQRRvwUGFeoiG5NzKkG2oqbfL2E zP0sUeoWLmUxaDZbWzEKuHlM9KxsJPy7nZYVwBL3K4rNE09fYod/LIVv82/PHSx0 H714Sf1SPv1EfrtUwkClyBaUD6dEIoIPat1c5u0ZRkl5P9lmVqgCaIulvm8IWoRQ 2hoO5Mo6qvLFcXRB+XNOupX2KR57q2Mxvdrw8Rr120s3ncCv63F7uvElbwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFLSwu9ZEVXjtvHumtb98qTaNJBe/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzM1MDJm Yy1kOWY3LTRmYTgtYmFmNi03N2Q1MjliZTUzZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvMzUwMmZj LWQ5ZjctNGZhOC1iYWY2LTc3ZDUyOWJlNTNkNy8xL3RMQzcxa1JWZU8yOGU2YTF2 M3lwTm8wa0Y3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwnEqAwQBwnE2MA0EAgACMAcDBQMqD/ZAMA0G CSqGSIb3DQEBCwUAA4IBAQCD1+qVa6ZAYAvFFx3L2nNLMTm0lASaQfn/xSPW8rVi hq2wYYUOf7fVjWrdrCrxm6zabSlpwVwFld7mqNjalUngWuux33I69FhaFwHeqWvG 8Qz6gFV81Il38YMEl5G/dh/189kWRJXH5Tu5NbJgu8UKmkzZ8FuvOaMrxqLsQ6D0 TYmvqZbW5KDFbXzqPie/y18zJbcxhjTGvpgT5NfdjdI5HDGV7J9D82QmME5mhCCu Q+i87khzV+K52HXq7KCwcN7Pn8+u9qqUu9rmdhyrCaLPjCXfYeZXlAQUleqVR8QC e6oHjFIHKABBMMo4h2XFAkCVY82jySBZV28Y+fSi/31p -----END CERTIFICATE-----Generated at Sun Jan 25 21:43:00 2026 by rpki-client