This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer (raw, json) Hash identifier: pK9htq1XgQqVtBAV10OYqKOoxGfmqxdYjIznS/rbg5g= Subject key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB6688A612496596F0795FF2D2620FCEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 24 Nov 2025 15:08:15 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 77.246.246.0/24 IP: 185.213.52.0/22 IP: 2a0b:8340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:68:8a:61:24:96:59:6f:07:95:ff:2d:26:20:fc:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 24 15:08:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4dd6d658e14571e839f7813da31f2217422818e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:73:5d:bc:d4:c5:1a:3a:8f:6b:81:40:2c: 63:92:04:39:17:8c:ec:91:2c:92:b3:11:9b:57:c8: 24:40:80:33:56:6c:1e:29:53:09:52:7d:cd:0e:d6: d0:e6:53:60:52:5c:df:23:d6:d4:ab:0c:c6:47:6e: 99:f3:f5:98:74:0e:f7:f8:9e:db:09:c1:13:fd:bb: 5b:aa:9f:df:5e:7d:a7:c4:98:94:e6:09:82:83:f2: cd:82:78:10:06:c6:a3:12:cf:af:7a:d4:09:f8:53: 58:dd:3e:ff:29:f3:8b:a2:a7:39:c5:e6:6d:c8:40: 3c:51:50:ef:f8:2e:e5:cb:57:34:5b:33:10:85:f3: 8a:92:65:fb:86:86:26:9b:15:e5:56:99:14:8b:a9: ff:0b:40:3d:eb:06:77:e6:66:e8:c8:37:62:d6:71: c2:59:92:bb:05:00:d3:75:78:ac:4b:eb:b1:fc:43: 66:17:18:74:9c:c1:fb:17:3c:d8:a0:38:3e:ae:4a: c2:31:bc:01:04:b9:d3:67:d0:c0:e8:d8:cb:e1:0b: f7:27:7f:80:2e:fa:dc:d5:99:b1:3d:54:8f:90:a9: d8:d8:db:c2:29:0a:27:2e:56:f8:2c:9c:b4:12:a3: a4:f6:9d:ba:5f:2d:7f:42:90:05:49:0d:a2:47:9e: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.246.0/24 185.213.52.0/22 IPv6: 2a0b:8340::/29 Signature Algorithm: sha256WithRSAEncryption 5f:11:de:f1:71:24:02:90:78:82:aa:e0:af:9a:07:71:07:a4: c7:42:2d:17:03:45:22:17:6b:e6:2b:31:e1:93:2f:cd:05:ca: fc:fe:c4:de:42:89:38:01:3c:5b:5e:7f:16:4a:a1:38:05:a2: 44:5d:55:01:ed:98:91:00:0f:31:d4:72:70:18:bf:22:a2:fe: ed:55:98:12:37:0e:40:5b:f8:4f:ac:7b:c9:d5:18:9b:d4:95: 0f:41:3d:4d:13:d3:52:57:b4:24:24:16:56:be:96:e5:ef:92: 7e:44:89:7a:15:09:e8:39:15:80:99:bd:32:c1:37:6d:6f:d7: 0f:21:62:2d:7d:43:8a:0a:d8:88:57:a1:4b:ae:d2:ae:a9:9d: 1a:a5:2d:12:4a:2b:d9:1f:c8:56:be:23:78:80:61:1a:7d:f9: 05:be:30:29:09:a4:c1:bb:e1:d0:bf:01:25:1d:01:50:57:08: 36:d0:2f:e8:66:27:be:06:e8:4d:7d:00:9b:ae:f9:0d:52:7f: 68:cc:de:64:71:18:6b:fe:dc:a7:d6:0f:7e:71:9b:85:e9:d4: e3:f7:e3:d4:32:80:78:fb:fb:79:62:b4:83:be:a5:dc:11:05: fe:ea:26:c3:02:52:20:fc:55:58:79:5b:90:72:e3:da:d9:9c: 38:89:67:c0 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZq2aIphJJZZbweV/y0mIPzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI0MTUwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGRkNmQ2NThlMTQ1NzFlODM5Zjc4MTNkYTMxZjIyMTc0MjI4MThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgBzXbzUxRo6j2uBQCxjkgQ5F4zs kSySsxGbV8gkQIAzVmweKVMJUn3NDtbQ5lNgUlzfI9bUqwzGR26Z8/WYdA73+J7b CcET/btbqp/fXn2nxJiU5gmCg/LNgngQBsajEs+vetQJ+FNY3T7/KfOLoqc5xeZt yEA8UVDv+C7ly1c0WzMQhfOKkmX7hoYmmxXlVpkUi6n/C0A96wZ35mboyDdi1nHC WZK7BQDTdXisS+ux/ENmFxh0nMH7FzzYoDg+rkrCMbwBBLnTZ9DA6NjL4Qv3J3+A Lvrc1ZmxPVSPkKnY2NvCKQonLlb4LJy0EqOk9p26Xy1/QpAFSQ2iR54cOwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFLTdbWWOFFceg594E9ox8iF0IoGOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzI2NDkz NC0yYTdmLTQyOGItYWZlNS04MWQyMTRlZGYyOTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvMjY0OTM0 LTJhN2YtNDI4Yi1hZmU1LTgxZDIxNGVkZjI5OC8xL3ROMXRaWTRVVng2RG4zZ1Qy akh5SVhRaWdZNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQATfb2AwQCudU0MA0EAgACMAcDBQMqC4NAMA0G CSqGSIb3DQEBCwUAA4IBAQBfEd7xcSQCkHiCquCvmgdxB6THQi0XA0UiF2vmKzHh ky/NBcr8/sTeQok4ATxbXn8WSqE4BaJEXVUB7ZiRAA8x1HJwGL8iov7tVZgSNw5A W/hPrHvJ1Rib1JUPQT1NE9NSV7QkJBZWvpbl75J+RIl6FQnoORWAmb0ywTdtb9cP IWItfUOKCtiIV6FLrtKuqZ0apS0SSivZH8hWviN4gGEaffkFvjApCaTBu+HQvwEl HQFQVwg20C/oZie+BuhNfQCbrvkNUn9ozN5kcRhr/tyn1g9+cZuF6dTj9+PUMoB4 +/t5YrSDvqXcEQX+6ibDAlIg/FVYeVuQcuPa2Zw4iWfA -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:31 2025 by rpki-client