This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer File: tTAFYZaI77r_0G4QikO98gZD4NY.cer (raw, json) Hash identifier: gvKov0OL1u0PkO/8K1owS1i+69f+qk6XC0tIV2TY15Y= Subject key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ECE1485B56CF47A08B2B6AD892614 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39759 IP: 89.186.32.0/19 IP: 2a03:8b00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ce:14:85:b5:6c:f4:7a:08:b2:b6:ad:89:26:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b53005619688efbaffd06e108a43bdf20643e0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:22:e2:49:6e:b4:32:a6:a4:08:5d:55:2a: 5e:f5:b6:6b:6a:71:d4:af:8f:71:c0:88:f5:0f:fe: 34:f3:89:66:34:0e:bf:35:75:3b:e9:b1:e5:29:ee: 31:55:cb:ee:38:d8:a4:44:1e:e7:82:4c:1a:79:38: 9e:8f:01:49:d4:89:25:5e:0b:55:0a:55:60:58:bb: c7:e2:eb:2c:43:48:a1:10:78:21:07:71:e7:7d:2c: 8f:87:d1:3c:d0:8b:d4:a8:b9:b5:b6:f0:fd:e4:08: ab:41:1a:4a:11:74:a2:bc:da:af:05:a3:62:a3:20: 64:28:f7:cf:19:eb:a8:58:34:cf:13:16:7f:33:7d: 5e:01:9c:00:04:eb:de:c1:eb:46:5f:0e:dc:35:64: 79:b7:f4:58:d0:a6:7a:af:3d:3f:cf:3c:f7:44:04: e9:eb:c0:8e:b9:61:4f:63:63:1d:8b:6e:11:da:fc: 44:ca:72:4a:22:16:19:cf:bf:9a:4e:93:ad:8c:63: f5:f0:c6:13:92:5e:ca:2e:82:92:1a:88:4b:52:f0: 6d:89:63:d3:03:ff:b1:59:e9:f9:cf:b6:af:96:9b: 4d:9f:b2:9c:e1:65:ff:f4:8f:4f:79:ad:97:85:24: 14:27:f4:b2:52:4b:ea:a3:be:f9:a1:ea:b5:1d:82: 43:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.186.32.0/19 IPv6: 2a03:8b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39759 Signature Algorithm: sha256WithRSAEncryption 8b:c3:a0:fe:07:fa:c6:d8:55:4a:42:a2:b9:19:fd:96:df:65: ba:fe:cc:fb:d7:c2:46:e2:78:09:60:11:f7:aa:d9:1a:6d:cc: 1a:0b:20:3e:88:d0:c7:a4:a0:12:1c:ac:e8:44:34:12:58:4c: a5:f7:1b:ee:dc:26:d1:f5:da:e1:d0:c7:d8:2a:4e:a0:9b:15: 67:f0:ea:33:39:90:d7:da:b1:7f:af:01:c5:1d:52:b3:35:c3: a3:0d:86:16:3e:a2:6d:93:93:83:06:8f:c5:5e:a9:bf:ba:ef: c0:98:77:b5:d6:18:d8:14:1f:ea:c4:45:15:c6:28:c2:db:b6: 8f:07:d4:cb:14:95:b0:2a:14:55:26:47:cf:c3:fa:56:7b:f0: cc:a4:55:fe:2a:2f:b5:9d:55:fc:55:bc:fe:33:00:80:39:1b: 1e:94:4a:f4:2a:80:37:d2:27:f7:70:fd:ac:ab:bf:81:ae:7b: 54:80:e5:a3:bd:d3:07:7a:61:20:73:e8:bb:6a:77:92:0c:8d: 3d:bc:b9:f1:eb:f0:20:df:02:c0:fe:06:07:9d:42:79:cc:10: f6:6e:e8:b6:75:e1:db:ea:f9:96:71:a2:cb:8c:ed:97:90:fe: 21:54:a8:16:2a:7b:d4:99:63:e9:ab:99:a7:04:ea:ab:76:cf: 02:78:3e:f4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fs4UhbVs9HoIsratiSYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTMwMDU2MTk2ODhlZmJhZmZkMDZlMTA4YTQzYmRmMjA2NDNlMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi98i4klutDKmpAhdVSpe9bZranHU r49xwIj1D/4084lmNA6/NXU76bHlKe4xVcvuONikRB7ngkwaeTiejwFJ1IklXgtV ClVgWLvH4ussQ0ihEHghB3HnfSyPh9E80IvUqLm1tvD95AirQRpKEXSivNqvBaNi oyBkKPfPGeuoWDTPExZ/M31eAZwABOvewetGXw7cNWR5t/RY0KZ6rz0/zzz3RATp 68COuWFPY2Mdi24R2vxEynJKIhYZz7+aTpOtjGP18MYTkl7KLoKSGohLUvBtiWPT A/+xWen5z7avlptNn7Kc4WX/9I9Pea2XhSQUJ/SyUkvqo775oeq1HYJDUwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLUwBWGWiO+6/9BuEIpDvfIGQ+DWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3Lzk5NWZi ZC05MWZiLTQzYmItOGYyNi1jZDRiZDQ0Mjc1YzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvOTk1ZmJk LTkxZmItNDNiYi04ZjI2LWNkNGJkNDQyNzVjNS8xL3RUQUZZWmFJNzdyXzBHNFFp a085OGdaRDROWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFWbogMA0EAgACMAcDBQAqA4sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCbTzANBgkqhkiG9w0BAQsFAAOCAQEAi8Og/gf6xthV SkKiuRn9lt9luv7M+9fCRuJ4CWAR96rZGm3MGgsgPojQx6SgEhys6EQ0ElhMpfcb 7twm0fXa4dDH2CpOoJsVZ/DqMzmQ19qxf68BxR1SszXDow2GFj6ibZOTgwaPxV6p v7rvwJh3tdYY2BQf6sRFFcYowtu2jwfUyxSVsCoUVSZHz8P6VnvwzKRV/iovtZ1V /FW8/jMAgDkbHpRK9CqAN9In93D9rKu/ga57VIDlo73TB3phIHPou2p3kgyNPby5 8evwIN8CwP4GB51CecwQ9m7otnXh2+r5lnGiy4ztl5D+IVSoFip71Jlj6auZpwTq q3bPAng+9A== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:19 2026 by rpki-client