This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer File: tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer (raw, json) Hash identifier: N3+yXnqr9wPRbSRrXn1TC4NpjGqtjKu847aCJK1P/Yk= Subject key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8AF52A816E96E88C9B527DCC904A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.39.144.0/20 IP: 194.32.48.0 -- 194.32.66.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:af:52:a8:16:e9:6e:88:c9:b5:27:dc:c9:04:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b573d2dda93e420409163da59e7414ee91a2eef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:56:2f:eb:95:26:71:bf:dc:9f:01:4f:7a: 62:82:5d:46:75:a8:87:ce:d7:1a:85:92:6d:28:23: c5:09:b6:4a:e3:d9:5c:8c:e0:40:85:4f:1e:1c:95: e0:d5:a1:bd:8e:dc:ed:50:50:d3:2c:98:24:fd:a3: 72:d3:20:1e:0e:68:51:0c:aa:b1:da:93:f5:b0:09: 76:13:d9:d9:12:80:63:9e:69:ca:4e:44:0c:e3:cb: 92:af:b9:17:4b:9f:c4:1d:ee:13:a0:cb:d5:dc:d5: b4:af:c9:54:b3:79:8e:76:80:aa:fc:62:97:5b:c8: 25:f9:11:41:17:6a:58:29:3e:1a:f2:b1:66:d5:4a: 0b:b5:39:4a:f9:52:2f:37:6b:85:b3:94:ce:84:c0: 6a:5d:a6:81:44:a1:8d:d1:e1:16:7e:51:a4:98:36: 95:27:86:23:29:da:11:b8:e9:12:e9:62:fa:69:ee: e4:0f:09:0c:e9:48:aa:dd:66:cb:55:0e:b0:11:fc: 1a:db:54:99:35:69:59:36:04:28:d2:7d:8a:8a:81: f8:0d:08:6e:9e:db:9e:13:5b:7a:29:20:b1:07:b1: b8:c4:9e:8c:eb:54:c1:a0:9a:5c:94:a8:58:09:4e: 8d:09:5b:28:85:b3:e3:e2:2a:a6:1f:a3:7e:99:15: 48:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.144.0/20 194.32.48.0-194.32.66.255 Signature Algorithm: sha256WithRSAEncryption 44:38:8f:f5:8d:ce:e1:b4:44:9e:e5:ed:55:8b:6c:ac:ff:e4: 6e:df:f7:4e:51:d0:c5:d2:70:49:e1:81:90:66:2e:49:fa:9a: 31:7c:69:e8:31:51:86:db:8b:29:9a:08:27:9b:73:75:74:79: ca:40:ac:72:13:39:20:45:10:00:c8:2c:6e:8e:e3:83:98:9e: a7:b4:20:fa:5c:61:ac:6e:36:a5:f9:41:ae:dc:5d:29:fa:49: e3:6f:4c:cf:65:1d:94:ff:87:3c:5d:fd:4a:25:77:0d:a2:83: 47:c9:3f:4d:d1:68:0d:73:88:17:c2:3f:13:b8:bf:d7:a7:a2: e1:95:82:34:e5:4d:93:c3:e4:c9:0c:34:89:f5:10:e0:58:34: 72:00:bd:d7:92:7d:e6:8f:9d:95:b0:78:38:9d:fd:8a:b6:ed: 8d:41:57:73:d8:33:9b:ed:68:bd:29:b7:50:cf:20:0d:80:38: 8c:23:40:40:1e:33:0e:8f:f3:5a:f2:e3:da:80:c2:1b:d3:b4: 6b:d2:4e:3f:c3:b7:eb:d1:23:da:cd:16:32:5d:5b:65:2f:37: 3d:c5:7e:1e:10:60:78:32:54:c4:93:06:26:1f:65:dd:b5:86: b6:07:2a:7c:97:10:84:f3:b2:32:0f:cd:2f:b8:33:cd:0a:c5: e6:45:87:8e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt6yK9SqBbpbojJtSfcyQSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTczZDJkZGE5M2U0MjA0MDkxNjNkYTU5ZTc0MTRlZTkxYTJlZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlVWL+uVJnG/3J8BT3pigl1GdaiH ztcahZJtKCPFCbZK49lcjOBAhU8eHJXg1aG9jtztUFDTLJgk/aNy0yAeDmhRDKqx 2pP1sAl2E9nZEoBjnmnKTkQM48uSr7kXS5/EHe4ToMvV3NW0r8lUs3mOdoCq/GKX W8gl+RFBF2pYKT4a8rFm1UoLtTlK+VIvN2uFs5TOhMBqXaaBRKGN0eEWflGkmDaV J4YjKdoRuOkS6WL6ae7kDwkM6Uiq3WbLVQ6wEfwa21SZNWlZNgQo0n2KioH4DQhu ntueE1t6KSCxB7G4xJ6M61TBoJpclKhYCU6NCVsohbPj4iqmH6N+mRVImwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFLVz0t2pPkIECRY9pZ50FO6Rou7yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzJmNjcy Yi0yMzZjLTQwZmItYWFmNi0wOGQwZjRiZDJjMjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMmY2NzJi LTIzNmMtNDBmYi1hYWY2LTA4ZDBmNGJkMmMyOC8xL3RYUFMzYWstUWdRSkZqMmxu blFVN3BHaTd2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUAwQEwSeQMAwDBATCIDADBADCIEIwDQYJKoZIhvcN AQELBQADggEBAEQ4j/WNzuG0RJ7l7VWLbKz/5G7f905R0MXScEnhgZBmLkn6mjF8 aegxUYbbiymaCCebc3V0ecpArHITOSBFEADILG6O44OYnqe0IPpcYaxuNqX5Qa7c XSn6SeNvTM9lHZT/hzxd/Uoldw2ig0fJP03RaA1ziBfCPxO4v9enouGVgjTlTZPD 5MkMNIn1EOBYNHIAvdeSfeaPnZWweDid/Yq27Y1BV3PYM5vtaL0pt1DPIA2AOIwj QEAeMw6P81ry49qAwhvTtGvSTj/Dt+vRI9rNFjJdW2UvNz3Ffh4QYHgyVMSTBiYf Zd21hrYHKnyXEITzsjIPzS+4M80KxeZFh44= -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:54 2026 by rpki-client