This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer File: ta_Rv-OIQKaf9WcdWb89siuY3eI.cer (raw, json) Hash identifier: DvYfgm+1YP/6ChgtQn7ackJ+5nY0eSX1ntqur2QJdys= Subject key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D9EBF38C1463BF57A2B4F15DAAA3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214189 IP: 2001:67c:2dd4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d9:eb:f3:8c:14:63:bf:57:a2:b4:f1:5d:aa:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:c1:5b:33:c9:8c:1d:89:66:83:81:d1:88: 98:8d:3e:8c:3d:32:a6:1d:b6:6c:84:be:8c:38:7e: a6:c3:55:4b:f9:c2:8b:4d:ce:7c:43:92:67:8b:a3: c3:be:54:15:17:21:3e:92:3d:cb:f9:20:a9:6a:06: d0:7f:e5:ac:30:a9:1c:2f:c0:f1:dd:54:05:33:c4: 88:e1:f6:fe:d9:f7:24:d7:34:69:03:bf:50:27:af: 5f:9c:94:8e:a0:f4:2a:0e:3e:30:50:97:47:1c:2a: 02:82:3c:29:97:c8:e1:13:5f:a0:1a:33:0c:d8:43: 1b:f8:54:c0:de:8b:b3:53:08:46:46:80:a1:64:d7: dd:5a:9d:f1:5d:53:fc:2e:f7:e3:79:9f:ca:ad:4f: c3:b2:6c:f4:f1:11:25:ee:a1:02:7f:c8:8a:23:9a: 0d:67:ab:e2:60:c9:b6:7a:49:1f:18:80:dc:8f:e7: 61:54:e1:d4:82:26:ca:3b:fe:2c:2a:b9:38:45:5f: 25:37:69:1f:18:f5:1a:a6:cd:bf:56:09:f6:35:63: 02:b7:76:f3:42:c6:25:cb:4e:b9:5d:f5:7b:6f:9a: b3:eb:93:0e:9d:9e:01:40:74:b7:ff:15:62:5c:da: b9:af:44:00:9b:4e:ca:8c:e2:71:b4:c8:16:2f:fb: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2dd4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214189 Signature Algorithm: sha256WithRSAEncryption 26:71:e7:2b:3b:61:b2:ff:38:f4:18:21:03:06:3d:b6:fa:dd: 4e:83:d8:93:d5:3d:84:7e:1a:aa:8b:3f:63:75:b9:b0:b7:56: 52:c0:e8:f9:e8:87:01:30:b7:03:51:17:69:35:12:ba:df:14: 59:7c:55:52:56:a6:57:dc:90:13:eb:59:68:59:f3:70:84:6a: 45:0c:aa:f1:1c:d3:bf:21:2e:17:30:20:73:ce:d0:04:2e:c1: 32:73:5b:0a:c1:52:95:6f:86:53:67:5c:9a:78:55:cd:37:82: e8:f8:81:bd:6f:bb:12:59:6d:9a:af:5d:3e:ad:61:dc:31:9e: 3f:57:93:7f:8c:82:e8:6f:60:16:05:a7:50:ea:c9:43:82:f8: 7f:fe:e1:9a:b1:6e:67:83:26:d7:ce:39:a7:9b:6e:2a:c4:7f: 0f:3e:bb:56:3c:b2:ce:b3:97:11:68:62:07:93:ce:95:e5:08: 28:cc:f7:af:b1:ad:ad:83:16:29:4f:ec:3e:fa:00:7d:f6:58: 86:9c:60:38:b8:22:09:c0:ee:e7:b1:fa:11:96:2b:b9:bc:4d: 78:1c:9f:6d:88:89:49:6d:63:e3:23:c4:03:52:0f:e5:28:00: e4:99:01:3e:61:9f:2c:1b:f6:09:14:37:27:d4:78:56:ba:c9: b2:ab:43:40 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt/Fdnr84wUY79XorTxXaqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWFmZDFiZmUzODg0MGE2OWZmNTY3MWQ1OWJmM2RiMjJiOThkZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsXBWzPJjB2JZoOB0YiYjT6MPTKm HbZshL6MOH6mw1VL+cKLTc58Q5Jni6PDvlQVFyE+kj3L+SCpagbQf+WsMKkcL8Dx 3VQFM8SI4fb+2fck1zRpA79QJ69fnJSOoPQqDj4wUJdHHCoCgjwpl8jhE1+gGjMM 2EMb+FTA3ouzUwhGRoChZNfdWp3xXVP8LvfjeZ/KrU/Dsmz08REl7qECf8iKI5oN Z6viYMm2ekkfGIDcj+dhVOHUgibKO/4sKrk4RV8lN2kfGPUaps2/Vgn2NWMCt3bz QsYly065XfV7b5qz65MOnZ4BQHS3/xViXNq5r0QAm07KjOJxtMgWL/tOdwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFLWv0b/jiECmn/VnHVm/PbIrmN3iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhjL2U3NDg0 OC05YzgyLTQ4NTUtYThhOS0zN2VmOTJkMDcxMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvZTc0ODQ4 LTljODItNDg1NS1hOGE5LTM3ZWY5MmQwNzEyMy8xL3RhX1J2LU9JUUthZjlXY2RX Yjg5c2l1WTNlSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC3UMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNErTANBgkqhkiG9w0BAQsFAAOCAQEAJnHnKzthsv849BghAwY9tvrdToPY k9U9hH4aqos/Y3W5sLdWUsDo+eiHATC3A1EXaTUSut8UWXxVUlamV9yQE+tZaFnz cIRqRQyq8RzTvyEuFzAgc87QBC7BMnNbCsFSlW+GU2dcmnhVzTeC6PiBvW+7Ellt mq9dPq1h3DGeP1eTf4yC6G9gFgWnUOrJQ4L4f/7hmrFuZ4Mm1845p5tuKsR/Dz67 VjyyzrOXEWhiB5POleUIKMz3r7GtrYMWKU/sPvoAffZYhpxgOLgiCcDu57H6EZYr ubxNeByfbYiJSW1j4yPEA1IP5SgA5JkBPmGfLBv2CRQ3J9R4VrrJsqtDQA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:53:34 2026 by rpki-client