This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer File: tp0ot9AoyruWhKgOFLqvFcpv0vY.cer (raw, json) Hash identifier: 5iYQ+ih6FvwcowiYQPD9+7bDIOcSd4UUtGAdMtW6kQ0= Subject key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC1BBA53C54BFC458C55F4B5BF8C74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.144.60.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1b:ba:53:c5:4b:fc:45:8c:55:f4:b5:bf:8c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:59:73:2a:ea:71:de:2c:48:e4:d8:91:50: 03:36:c3:78:2f:dd:2f:71:2e:56:5f:bb:2c:49:eb: 47:50:2b:1a:4f:c7:c0:60:79:70:d9:1b:a9:5b:bf: ce:1e:f1:c0:f1:a1:ad:6e:06:36:d5:30:bf:db:29: a2:e7:a7:92:8e:44:e9:c6:5b:ec:67:e3:ca:ee:21: 25:e4:43:e7:05:d5:a8:42:21:35:ff:97:ce:c6:80: 30:b6:58:f3:5e:fc:92:d3:f5:1f:7f:b4:f3:5f:6b: 56:ee:8f:7d:25:c6:78:d6:7c:1f:80:20:9e:a9:86: fb:38:77:07:f2:a8:8d:fc:3e:a3:ac:93:18:b6:17: b6:95:21:0a:2b:76:13:8c:b0:dd:ce:73:56:fb:ca: f6:cd:39:fe:aa:99:93:8a:ad:a2:3a:49:67:5d:a3: db:b8:5f:5d:08:39:38:3c:ee:6a:af:60:b2:35:48: 36:31:63:da:1d:c3:fe:ea:f5:2c:33:a1:52:c3:d9: 32:a1:31:50:b1:03:11:b8:e5:b2:b1:33:f3:ea:a8: 3c:59:be:b2:ca:26:44:7b:65:38:59:45:80:0c:fd: 70:ab:13:ff:b7:78:0e:b8:90:99:95:db:c3:e3:95: 0a:ff:f6:1a:d0:5d:78:10:2e:9f:43:79:1b:3e:f7: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.60.0/22 Signature Algorithm: sha256WithRSAEncryption 03:1e:db:55:7e:ce:e8:51:ef:6c:c1:d2:55:d4:2e:c8:61:df: e4:f2:54:c0:3b:b0:fb:66:f7:95:35:47:d3:4d:aa:1d:fc:e5: 8f:c4:d3:1b:f9:45:4f:8a:44:bc:71:84:35:f8:37:00:ce:cc: be:b7:18:34:af:ca:c7:47:57:c8:75:73:00:e6:66:48:c4:7c: 81:00:1c:32:1c:dc:a4:91:f8:80:be:bf:5a:64:53:53:c3:e0: 75:29:36:a3:f6:40:26:ca:ee:19:45:f1:4b:2b:04:ba:e3:bc: 89:07:62:59:ba:88:ef:88:ce:ed:42:99:85:f5:dc:ce:b3:d9: 04:45:f6:05:1d:53:1e:e6:6f:a5:7b:2b:ff:f1:d1:30:5f:6a: b6:79:fb:08:63:61:3d:b4:87:26:84:dc:00:1c:97:34:f0:55: 82:a5:fe:ca:c3:1f:11:29:fc:d3:74:07:a3:15:5f:f3:e0:3e: ef:cd:62:2b:24:7b:80:66:f7:9f:b7:a4:34:9e:a7:e7:00:c2: 2f:35:bc:60:74:e3:0c:41:b6:11:9e:06:6c:ee:1c:3f:13:bd: b3:9d:83:dc:31:10:cf:02:25:6c:9d:66:d1:7b:0e:89:d6:e8: 6b:ba:ed:d8:a4:46:fb:88:ed:ba:10:d2:db:58:50:f0:f0:2c: 8a:d3:e7:6d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57Bu6U8VL/EWMVfS1v4x0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjlkMjhiN2QwMjhjYWJiOTY4NGE4MGUxNGJhYWYxNWNhNmZkMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo9Zcyrqcd4sSOTYkVADNsN4L90v cS5WX7ssSetHUCsaT8fAYHlw2RupW7/OHvHA8aGtbgY21TC/2ymi56eSjkTpxlvs Z+PK7iEl5EPnBdWoQiE1/5fOxoAwtljzXvyS0/Uff7TzX2tW7o99JcZ41nwfgCCe qYb7OHcH8qiN/D6jrJMYthe2lSEKK3YTjLDdznNW+8r2zTn+qpmTiq2iOklnXaPb uF9dCDk4PO5qr2CyNUg2MWPaHcP+6vUsM6FSw9kyoTFQsQMRuOWysTPz6qg8Wb6y yiZEe2U4WUWADP1wqxP/t3gOuJCZldvD45UK//Ya0F14EC6fQ3kbPvewwQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLadKLfQKMq7loSoDhS6rxXKb9L2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VkL2IyMmMx ZS1jYTRjLTQ4MWUtOTFhMi01YzkzMjM5ZTVlMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvYjIyYzFl LWNhNGMtNDgxZS05MWEyLTVjOTMyMzllNWUyZS8xL3RwMG90OUFveXJ1V2hLZ09G THF2RmNwdjB2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLZA8MA0GCSqGSIb3DQEBCwUAA4IBAQADHttV fs7oUe9swdJV1C7IYd/k8lTAO7D7ZveVNUfTTaod/OWPxNMb+UVPikS8cYQ1+DcA zsy+txg0r8rHR1fIdXMA5mZIxHyBABwyHNykkfiAvr9aZFNTw+B1KTaj9kAmyu4Z RfFLKwS647yJB2JZuojviM7tQpmF9dzOs9kERfYFHVMe5m+leyv/8dEwX2q2efsI Y2E9tIcmhNwAHJc08FWCpf7Kwx8RKfzTdAejFV/z4D7vzWIrJHuAZveft6Q0nqfn AMIvNbxgdOMMQbYRngZs7hw/E72znYPcMRDPAiVsnWbRew6J1uhruu3YpEb7iO26 ENLbWFDw8CyK0+dt -----END CERTIFICATE-----Generated at Mon Jan 26 16:26:00 2026 by rpki-client