This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer (raw, json) Hash identifier: PKUYk3etIs/CgnugFimP54ww5Sdz85IjW8Me/OItiXI= Subject key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15B1CDF7014758F0E7210B197C2DC1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35781 IP: 194.88.150.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b1:cd:f7:01:47:58:f0:e7:21:0b:19:7c:2d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:88:fd:2b:ff:d7:e8:d0:cf:2a:60:00:0f: d5:71:45:c9:80:cd:1f:70:c7:e7:d4:13:99:cb:c7: 15:60:45:3e:ec:6d:54:30:0a:c0:af:f4:35:a3:a7: 88:4f:34:a9:3b:21:0b:11:8a:cd:89:69:dc:18:a7: a4:be:41:7d:ed:69:6b:21:fc:f5:bd:3e:5b:24:cf: 84:00:cb:7f:1e:1d:e1:a1:9a:67:b5:1e:d5:d2:94: 64:66:b2:00:0b:21:fe:a4:3d:a7:0f:05:fb:69:39: 8e:a8:2b:b3:ba:ed:8e:d7:31:3d:bc:de:b8:20:af: b4:dc:cf:c6:f8:24:77:d4:19:57:19:4b:5c:cb:b8: 0e:dd:a5:08:6c:83:18:d6:c6:1f:39:45:49:f7:9b: 60:a5:6e:53:5b:ca:c5:32:5e:1c:28:74:ea:c6:d0: 90:2d:ed:d6:a7:f3:bf:71:fd:6c:d3:0b:de:81:ce: e8:a4:ca:04:b0:4d:c7:32:77:64:e6:30:c2:d8:59: 76:2d:83:ee:a5:0f:86:bd:ad:95:79:ff:10:f7:38: fb:02:a7:87:5e:77:72:a1:2f:06:d5:a3:af:95:82: af:b2:74:5d:1c:d7:45:1f:c2:09:d6:71:a8:39:f2: 66:ed:29:45:bf:ef:3a:ba:7f:bf:45:7e:5a:d0:e9: ed:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.88.150.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35781 Signature Algorithm: sha256WithRSAEncryption 4f:7e:e8:bf:ee:e1:8d:2e:d9:6e:21:1f:47:de:61:e1:d3:16: b1:be:f8:ef:ee:7d:bc:91:7e:30:e1:6a:72:09:f4:c4:23:bc: 6c:e4:f6:33:48:f6:1f:86:22:aa:64:19:65:e5:98:d3:ff:db: 98:88:87:14:15:bc:84:58:f0:4d:30:62:17:41:5d:24:7f:91: e9:65:dd:58:4b:a4:bb:e1:e4:85:57:df:d8:b0:4a:49:b9:b7: cf:7e:84:48:25:a4:fb:ba:1c:10:06:43:f8:c3:3d:64:e6:94: 90:75:72:0e:b7:21:70:59:c8:05:41:5f:f3:5e:a5:eb:2b:0c: d0:3a:ad:d9:a1:49:55:ab:0e:e6:51:2f:43:af:ef:05:29:91: 74:84:76:07:f3:4c:14:e5:9d:5f:7e:90:62:63:ba:f1:4a:bf: 53:79:c2:b1:98:3b:c6:b6:76:15:45:d4:96:91:e3:2d:d5:c5: d5:63:49:4c:c7:57:8a:d2:03:f2:c8:e9:c5:bf:70:4c:73:2d: a3:52:4c:45:a4:4c:7f:bf:49:2f:d1:b8:d0:5e:22:b4:c6:58: b2:95:98:d8:3c:7f:1c:22:b6:73:a6:95:77:09:db:2f:33:b2: 72:e3:17:34:6e:fd:b6:88:1e:18:97:ee:eb:31:27:67:d6:b6: cf:f4:b0:e5 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/FbHN9wFHWPDnIQsZfC3BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWM3ZDgxZWM0YzQwNTVjNjczZmY1NzFjY2FkMDdjM2E2OTkxMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2iI/Sv/1+jQzypgAA/VcUXJgM0f cMfn1BOZy8cVYEU+7G1UMArAr/Q1o6eITzSpOyELEYrNiWncGKekvkF97WlrIfz1 vT5bJM+EAMt/Hh3hoZpntR7V0pRkZrIACyH+pD2nDwX7aTmOqCuzuu2O1zE9vN64 IK+03M/G+CR31BlXGUtcy7gO3aUIbIMY1sYfOUVJ95tgpW5TW8rFMl4cKHTqxtCQ Le3Wp/O/cf1s0wvegc7opMoEsE3HMndk5jDC2Fl2LYPupQ+Gva2Vef8Q9zj7AqeH XndyoS8G1aOvlYKvsnRdHNdFH8IJ1nGoOfJm7SlFv+86un+/RX5a0OntPQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLXH2B7ExAVcZz/1ccytB8OmmRBeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzY3MmEy Zi1hYzJiLTQ2MzEtYWIzZC1jMmJjMTQ1MWYyNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvNjcyYTJm LWFjMmItNDYzMS1hYjNkLWMyYmMxNDUxZjI3MS8xL3RjZllIc1RFQlZ4blBfVnh6 SzBIdzZhWkVGNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwliWMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCLxTANBgkqhkiG9w0BAQsFAAOCAQEAT37ov+7hjS7ZbiEfR95h4dMWsb747+59 vJF+MOFqcgn0xCO8bOT2M0j2H4YiqmQZZeWY0//bmIiHFBW8hFjwTTBiF0FdJH+R 6WXdWEuku+HkhVff2LBKSbm3z36ESCWk+7ocEAZD+MM9ZOaUkHVyDrchcFnIBUFf 816l6ysM0Dqt2aFJVasO5lEvQ6/vBSmRdIR2B/NMFOWdX36QYmO68Uq/U3nCsZg7 xrZ2FUXUlpHjLdXF1WNJTMdXitID8sjpxb9wTHMto1JMRaRMf79JL9G40F4itMZY spWY2Dx/HCK2c6aVdwnbLzOycuMXNG79togeGJfu6zEnZ9a2z/Sw5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:30 2026 by rpki-client