This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tVG7qYKf51krGwLo1xyP18ziGrE.cer File: tVG7qYKf51krGwLo1xyP18ziGrE.cer (raw, json) Hash identifier: 7HR+G+ckgpLgYlSIZmalYvXPWs91SSbfqqToltbJ8dM= Subject key identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83743A1BBDDBF9F85753410E990CBC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 176.117.104.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:74:3a:1b:bd:db:f9:f8:57:53:41:0e:99:0c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b551bba9829fe7592b1b02e8d71c8fd7cce21ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:ef:a9:f1:f0:9b:c9:1d:78:fa:90:75:c8: 52:ad:4c:3b:91:15:7c:1a:ef:86:5d:af:9d:88:80: f0:44:de:30:36:11:f7:37:0b:98:9b:5e:be:a8:c9: 46:37:b4:53:7c:e1:83:84:e4:5a:1c:5c:09:a6:4f: fe:d7:5f:9e:8d:8c:7e:ce:21:16:80:40:49:be:a6: 14:d7:83:15:42:50:27:c7:da:c9:63:27:48:a2:b3: f4:b8:27:a6:00:22:9c:41:ec:01:97:3d:e9:a2:25: 39:20:31:b2:d0:42:22:3c:92:bc:0d:70:0d:8b:03: 44:5f:87:35:b6:06:6d:31:34:e4:02:3d:be:f1:c2: 9f:b3:0c:3a:1a:c6:8f:1c:62:8c:95:19:0d:de:55: a9:ad:fb:70:61:f5:ec:65:7e:67:e0:54:e1:49:aa: 52:b0:e2:4b:21:9e:cf:09:70:87:d8:4e:da:5f:60: 7f:5a:45:8c:10:86:3f:41:03:56:3e:91:27:36:79: 3e:39:bc:bb:1e:a6:7d:ba:38:7a:02:53:c8:c8:09: 16:4e:7c:1d:fa:8a:64:89:7f:9f:83:68:41:bf:7e: da:8e:44:26:77:d1:8b:13:c3:12:60:3b:48:7a:5a: 43:de:e5:15:0e:35:7d:b2:24:97:38:f6:bf:93:4f: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:51:BB:A9:82:9F:E7:59:2B:1B:02:E8:D7:1C:8F:D7:CC:E2:1A:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b5d955-c7f8-463f-815a-4eb9922860cd/1/tVG7qYKf51krGwLo1xyP18ziGrE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.104.0/24 Signature Algorithm: sha256WithRSAEncryption 70:36:a0:aa:65:de:d2:72:7a:1c:3c:c5:71:31:fc:81:5b:1b: 5b:5a:38:6d:31:16:bd:c9:7f:39:8b:3c:43:31:5a:30:eb:67: e7:a6:60:3e:ca:de:42:6c:49:a8:05:15:26:ed:02:57:ee:92: 86:21:a2:49:78:03:6e:eb:bc:2c:7c:de:a4:b6:d7:26:7e:26: bd:4a:fa:38:c5:28:ba:5c:c6:63:c3:09:45:c8:d6:06:1b:60: 7c:ac:8a:a5:d9:37:9d:1d:4b:6b:ab:c3:27:ef:87:6d:04:ac: c5:3d:34:1a:dc:ea:67:8d:57:75:ca:d6:1b:8b:f8:be:61:81: 61:af:17:e1:de:9a:16:af:db:49:67:97:a7:82:f0:7f:2f:45: 3a:e6:40:5c:68:41:44:9f:21:42:24:18:9a:b6:99:f7:b9:95: 82:fb:98:d4:e4:1b:d7:62:58:1f:ab:47:51:3b:78:61:b3:c7: 9b:53:f3:77:8b:ab:d5:23:1c:f9:fd:0d:4c:0a:4d:16:6f:3c: 4f:6a:1e:91:0d:63:a4:21:ad:7c:22:3a:1c:00:9c:fb:16:4b: 99:4f:bd:e3:6b:dc:c9:6e:22:71:11:1b:78:36:9e:f6:e7:34: 1b:fb:f7:e4:5f:c7:70:fc:a2:f5:c5:2e:5f:8d:66:0b:39:f7: 9f:01:6f:9a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/g3Q6G73b+fhXU0EOmQy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTUxYmJhOTgyOWZlNzU5MmIxYjAyZThkNzFjOGZkN2NjZTIxYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk3vqfHwm8kdePqQdchSrUw7kRV8 Gu+GXa+diIDwRN4wNhH3NwuYm16+qMlGN7RTfOGDhORaHFwJpk/+11+ejYx+ziEW gEBJvqYU14MVQlAnx9rJYydIorP0uCemACKcQewBlz3poiU5IDGy0EIiPJK8DXAN iwNEX4c1tgZtMTTkAj2+8cKfsww6GsaPHGKMlRkN3lWprftwYfXsZX5n4FThSapS sOJLIZ7PCXCH2E7aX2B/WkWMEIY/QQNWPpEnNnk+Oby7HqZ9ujh6AlPIyAkWTnwd +opkiX+fg2hBv37ajkQmd9GLE8MSYDtIelpD3uUVDjV9siSXOPa/k08qGQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLVRu6mCn+dZKxsC6Nccj9fM4hqxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4L2I1ZDk1 NS1jN2Y4LTQ2M2YtODE1YS00ZWI5OTIyODYwY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjVkOTU1 LWM3ZjgtNDYzZi04MTVhLTRlYjk5MjI4NjBjZC8xL3RWRzdxWUtmNTFrckd3TG8x eHlQMTh6aUdyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHVoMA0GCSqGSIb3DQEBCwUAA4IBAQBwNqCq Zd7ScnocPMVxMfyBWxtbWjhtMRa9yX85izxDMVow62fnpmA+yt5CbEmoBRUm7QJX 7pKGIaJJeANu67wsfN6kttcmfia9Svo4xSi6XMZjwwlFyNYGG2B8rIql2TedHUtr q8Mn74dtBKzFPTQa3OpnjVd1ytYbi/i+YYFhrxfh3poWr9tJZ5engvB/L0U65kBc aEFEnyFCJBiatpn3uZWC+5jU5BvXYlgfq0dRO3hhs8ebU/N3i6vVIxz5/Q1MCk0W bzxPah6RDWOkIa18IjocAJz7FkuZT73ja9zJbiJxERt4Np725zQb+/fkX8dw/KL1 xS5fjWYLOfefAW+a -----END CERTIFICATE-----Generated at Mon Jan 26 07:29:48 2026 by rpki-client