This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tpJFTBZpZIbPBx7Rjnl240BJCfs.cer File: tpJFTBZpZIbPBx7Rjnl240BJCfs.cer (raw, json) Hash identifier: GUNabCgiZfFsXu0/lI7LjyM0m7xWG3QXz1eSEGRkdsc= Subject key identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7B2DDA768D79F97DDC94741D1F400 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.41.193.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b2:dd:a7:68:d7:9f:97:dd:c9:47:41:d1:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b692454c16696486cf071ed18e7976e3404909fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:b5:78:cf:96:96:c2:5e:7f:20:f7:84:53: 2f:96:f7:93:a3:e2:f9:2d:8f:f0:d8:6e:ef:2d:77: 2a:e2:9d:7f:99:4b:14:85:db:64:89:8c:d9:a1:32: 31:34:48:20:d7:ec:c4:f9:15:d0:e3:60:56:7f:96: 9e:43:dd:b6:2d:35:bb:ef:c6:7a:6b:89:38:26:bd: 79:1f:a9:21:df:a6:7a:ca:0c:4d:a2:99:1d:07:9d: 5d:d5:a7:9e:9e:e4:4e:c1:ae:87:49:de:c0:29:5c: 0f:22:1c:c6:35:52:a2:95:0b:85:05:fe:78:3e:ff: 68:fc:2f:2a:75:c9:a8:96:48:f5:52:2d:28:cb:71: 35:9e:eb:97:5e:bc:cf:7c:4e:e5:74:d1:c2:63:d1: fc:95:01:30:80:54:49:8d:84:c7:d2:48:eb:1b:6e: b1:f3:e2:37:ac:6e:cd:5e:bb:ac:86:d8:1a:d9:fc: f1:2b:4a:d9:1a:1f:2f:69:b6:57:e1:61:7d:20:78: 77:01:dc:fe:3a:69:40:5a:f2:1b:34:b2:1f:e2:ec: f2:e6:62:e1:e6:d0:b1:af:f1:b0:59:1f:ee:4a:54: b9:1e:a9:23:99:63:0a:bb:26:af:9b:46:e7:cc:59: 65:b0:af:d2:a7:a2:fb:d1:8f:0f:06:8d:8d:9f:8e: 24:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:92:45:4C:16:69:64:86:CF:07:1E:D1:8E:79:76:E3:40:49:09:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bd173d-6cf5-4250-aa26-4a6f717c7564/1/tpJFTBZpZIbPBx7Rjnl240BJCfs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.193.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:7d:3f:27:69:44:c5:5f:e0:88:55:81:f2:52:eb:9b:8a:8d: 72:dd:22:9e:fc:30:63:46:b5:72:16:82:d0:1c:a0:09:c5:fd: 63:71:1a:be:d0:1e:a2:1f:1a:ba:1c:ed:93:64:95:9f:55:34: 1f:ce:cb:66:d9:40:9a:80:fa:ae:21:33:af:87:1a:8f:da:c5: 33:72:99:38:92:1f:c8:d0:0f:a4:23:1c:6c:e1:c2:86:4e:38: f3:bb:16:03:c9:4d:52:0b:94:2a:ba:8c:78:cb:48:c4:f4:7c: 82:ae:a0:fe:cd:e1:84:3f:3a:d8:bc:3b:79:35:bb:e7:d7:c0: 39:ce:0a:e3:4c:d2:c1:24:6e:30:f1:0e:77:08:e9:22:64:b6: 9a:29:90:32:1d:8d:1a:a9:1b:d8:0c:46:23:e0:cf:10:20:fa: 50:13:9b:17:f4:e0:03:8c:e6:89:b3:ef:c7:44:27:e5:21:b9: 99:bf:eb:6f:53:2c:ca:ca:38:9c:87:0d:31:ad:e8:94:b1:9d: bf:89:e1:6d:f5:69:f8:cd:01:8c:6c:45:44:53:40:96:78:9c: d2:17:f5:6c:fe:aa:0f:15:35:1e:d4:80:5f:bc:2c:04:3d:b8: 1c:1b:3a:ae:eb:49:28:3b:70:de:e0:d5:6c:3b:82:c5:fb:b3: f7:54:ab:ac -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6x7Ldp2jXn5fdyUdB0fQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjkyNDU0YzE2Njk2NDg2Y2YwNzFlZDE4ZTc5NzZlMzQwNDkwOWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZm1eM+WlsJefyD3hFMvlveTo+L5 LY/w2G7vLXcq4p1/mUsUhdtkiYzZoTIxNEgg1+zE+RXQ42BWf5aeQ922LTW778Z6 a4k4Jr15H6kh36Z6ygxNopkdB51d1aeenuROwa6HSd7AKVwPIhzGNVKilQuFBf54 Pv9o/C8qdcmolkj1Ui0oy3E1nuuXXrzPfE7ldNHCY9H8lQEwgFRJjYTH0kjrG26x 8+I3rG7NXrushtga2fzxK0rZGh8vabZX4WF9IHh3Adz+OmlAWvIbNLIf4uzy5mLh 5tCxr/GwWR/uSlS5HqkjmWMKuyavm0bnzFllsK/Sp6L70Y8PBo2Nn44knQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLaSRUwWaWSGzwce0Y55duNASQn7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2JkMTcz ZC02Y2Y1LTQyNTAtYWEyNi00YTZmNzE3Yzc1NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvYmQxNzNk LTZjZjUtNDI1MC1hYTI2LTRhNmY3MTdjNzU2NC8xL3RwSkZUQlpwWkliUEJ4N1Jq bmwyNDBCSkNmcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSnBMA0GCSqGSIb3DQEBCwUAA4IBAQANfT8n aUTFX+CIVYHyUuubio1y3SKe/DBjRrVyFoLQHKAJxf1jcRq+0B6iHxq6HO2TZJWf VTQfzstm2UCagPquITOvhxqP2sUzcpk4kh/I0A+kIxxs4cKGTjjzuxYDyU1SC5Qq uox4y0jE9HyCrqD+zeGEPzrYvDt5Nbvn18A5zgrjTNLBJG4w8Q53COkiZLaaKZAy HY0aqRvYDEYj4M8QIPpQE5sX9OADjOaJs+/HRCflIbmZv+tvUyzKyjichw0xreiU sZ2/ieFt9Wn4zQGMbEVEU0CWeJzSF/Vs/qoPFTUe1IBfvCwEPbgcGzqu60koO3De 4NVsO4LF+7P3VKus -----END CERTIFICATE-----Generated at Mon Jan 26 11:42:00 2026 by rpki-client