This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer File: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer (raw, json) Hash identifier: 3jO5K6kCfRK1FgxMlJF9ufHiXAUPTipJF7w+VGnn58c= Subject key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA68C3396AECFFCF27F74C2727CCB3E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30933 IP: 85.118.232.0/21 IP: 185.83.128.0/22 IP: 193.151.124.0/22 IP: 194.110.250.0/24 IP: 2a01:50::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8c:33:96:ae:cf:fc:f2:7f:74:c2:72:7c:cb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:94:46:e0:96:77:33:40:3e:c1:88:1d:8d: 51:39:1f:94:2a:5e:0d:06:67:d2:fe:74:e2:9e:68: b4:4a:44:8f:d3:4c:50:55:10:c4:79:cc:c1:55:30: 53:8a:dc:ab:43:ff:88:f0:e3:92:7e:af:2f:29:29: 19:fa:0e:45:ab:5b:ce:9f:99:10:8d:76:02:ff:63: fc:22:e1:20:d4:ab:60:0b:d0:3c:90:14:dd:25:7c: aa:40:fb:d2:76:62:b4:a0:3c:6f:7c:12:37:54:26: 5c:f9:fe:5f:cd:0f:c8:ae:52:9c:73:b8:a8:4e:fe: 9a:14:30:6f:24:9a:b9:5a:f2:39:83:fd:f5:f3:e2: 8d:dc:f9:d6:fa:b2:39:76:d0:82:fc:44:ce:9b:53: dd:0e:dc:b7:78:eb:8d:b9:5e:3c:23:79:1b:fe:a4: 17:f9:0e:92:17:b1:94:d3:69:2e:17:b4:99:d4:90: 2b:92:80:c0:4d:d5:13:06:d8:d1:e8:14:49:af:77: 1e:54:82:ba:fc:3c:61:41:1d:1b:89:37:b5:9d:ea: 68:56:55:99:90:d3:d6:21:7e:f1:a1:1d:88:66:cb: 24:e7:35:f2:59:d4:36:b6:8d:fc:98:3a:54:46:48: 72:8d:3b:5c:3f:ab:01:ed:b0:c8:82:a3:32:f7:9f: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.118.232.0/21 185.83.128.0/22 193.151.124.0/22 194.110.250.0/24 IPv6: 2a01:50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30933 Signature Algorithm: sha256WithRSAEncryption 10:0d:cd:01:9c:84:d6:b5:6b:1e:d3:a2:36:6a:7d:d0:88:dc: e8:5a:a7:51:21:d2:d8:bc:ab:a3:97:66:ed:4f:6f:8f:55:b0: 3c:79:77:6d:ae:a4:61:2a:f8:d1:20:c1:7a:ec:07:29:10:04: 85:81:75:3f:cc:f3:f8:0b:c7:2a:51:5d:0d:0b:08:06:6a:cc: 8c:29:78:f8:0b:1e:45:99:10:75:b0:c3:f5:c3:d4:69:1b:fe: 25:eb:8d:6e:d6:e9:3d:3c:33:21:4f:8b:17:1b:bf:c7:24:cf: ca:63:46:25:2c:64:3a:ac:35:43:e9:a6:eb:5f:f3:f7:a3:49: 76:aa:35:0e:f4:3c:dd:2d:9b:5f:bb:4f:8e:97:31:62:30:a0: dd:fa:fb:75:91:00:78:d1:84:e0:60:90:25:2f:8d:df:f8:c6: 1d:8a:55:19:75:12:8b:8a:a6:92:f4:0f:37:9d:de:86:18:27: 6f:22:47:17:80:26:b1:9d:31:58:22:f2:da:3c:b4:c3:13:15: f7:3b:2a:f7:40:60:57:0f:ea:ee:93:bb:83:17:67:18:16:ce: dc:01:f0:57:11:9e:04:4c:d0:d8:c1:c5:32:c8:7c:94:a0:59: 66:79:ab:b2:fc:28:8b:84:ab:4e:75:9c:89:dd:13:be:86:fd: ca:4c:de:14 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt+powzlq7P/PJ/dMJyfMs+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjMyMWVlYmY0Zjk1YmU5ZjgxZjBmMjMzZjg5ZjM2MDJkMmYwMDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr6URuCWdzNAPsGIHY1ROR+UKl4N BmfS/nTinmi0SkSP00xQVRDEeczBVTBTityrQ/+I8OOSfq8vKSkZ+g5Fq1vOn5kQ jXYC/2P8IuEg1KtgC9A8kBTdJXyqQPvSdmK0oDxvfBI3VCZc+f5fzQ/IrlKcc7io Tv6aFDBvJJq5WvI5g/318+KN3PnW+rI5dtCC/ETOm1PdDty3eOuNuV48I3kb/qQX +Q6SF7GU02kuF7SZ1JArkoDATdUTBtjR6BRJr3ceVIK6/DxhQR0biTe1nepoVlWZ kNPWIX7xoR2IZssk5zXyWdQ2to38mDpURkhyjTtcP6sB7bDIgqMy959KpwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFLYyHuv0+Vvp+B8PIz+J82AtLwB0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzVjOTJk MS00MWU1LTQ0M2UtYTI1MC0wMWJhZjc4ZWM3M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNWM5MmQx LTQxZTUtNDQzZS1hMjUwLTAxYmFmNzhlYzczZi8xL3RqSWU2X1Q1Vy1uNEh3OGpQ NG56WUMwdkFIUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDVXboAwQCuVOAAwQCwZd8AwQAwm76MA0EAgAC MAcDBQAqAQBQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnjVMA0GCSqGSIb3DQEB CwUAA4IBAQAQDc0BnITWtWse06I2an3QiNzoWqdRIdLYvKujl2btT2+PVbA8eXdt rqRhKvjRIMF67AcpEASFgXU/zPP4C8cqUV0NCwgGasyMKXj4Cx5FmRB1sMP1w9Rp G/4l641u1uk9PDMhT4sXG7/HJM/KY0YlLGQ6rDVD6abrX/P3o0l2qjUO9DzdLZtf u0+OlzFiMKDd+vt1kQB40YTgYJAlL43f+MYdilUZdRKLiqaS9A83nd6GGCdvIkcX gCaxnTFYIvLaPLTDExX3Oyr3QGBXD+ruk7uDF2cYFs7cAfBXEZ4ETNDYwcUyyHyU oFlmeauy/CiLhKtOdZyJ3RO+hv3KTN4U -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:39 2026 by rpki-client