This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer File: ttFBGNvSJymNqoDHrKsR7qbWPiE.cer (raw, json) Hash identifier: fsNK1M55yytO9FhEF8T4qD01AIG/L0r934nEJ+0VFOQ= Subject key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C67647D4831AA03DAD772B47B3463D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34636 AS: 57391 IP: 88.135.40.0/21 IP: 185.67.100.0/22 IP: 185.132.80.0/22 IP: 185.189.120.0/22 IP: 185.233.12.0/22 IP: 185.237.8.0/22 IP: 2a04:f080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:76:47:d4:83:1a:a0:3d:ad:77:2b:47:b3:46:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6d14118dbd227298daa80c7acab11eea6d63e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:aa:a0:73:71:67:cf:d3:34:29:1b:8c:a8:2f: 9c:fc:f0:22:0c:e9:e3:22:5d:5e:72:16:40:8c:18: 22:b1:20:c0:fb:e7:27:86:e4:5a:4b:16:79:68:18: 9b:4d:cb:1b:f5:9d:45:ad:a8:2f:e5:7d:1d:b1:71: ce:80:c2:59:76:0b:5a:23:be:65:af:a5:c0:d8:cf: a9:09:38:43:0e:54:21:8e:2f:7b:d9:3c:ab:c2:b8: d4:55:dc:cf:4d:67:dc:59:ec:35:c3:c0:4a:f1:73: 79:bb:de:b3:ea:68:d4:b2:4e:6b:62:d8:ef:7a:8e: 76:1e:df:59:d0:2c:95:1e:41:8d:b5:38:c4:44:c2: b9:2b:8b:57:2c:12:82:8b:5b:90:74:3e:52:0f:d4: 3d:2b:e7:8d:93:bc:e3:f4:87:fd:2a:b2:b1:eb:e1: 43:85:ef:e1:93:84:d5:18:db:20:6b:ee:8b:28:4d: 80:8b:4b:23:ee:2f:6b:94:d4:c3:26:c3:26:a4:0e: e9:44:69:c4:00:f2:03:b7:1a:90:3d:5a:1c:01:b0: 1f:c2:68:f3:01:ac:af:be:84:2f:2e:66:bb:c9:57: 84:36:04:b1:71:d6:b6:1d:b6:03:aa:44:4f:7f:62: 58:8f:ef:db:a8:d7:2e:97:70:11:82:1e:83:38:66: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.40.0/21 185.67.100.0/22 185.132.80.0/22 185.189.120.0/22 185.233.12.0/22 185.237.8.0/22 IPv6: 2a04:f080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34636 57391 Signature Algorithm: sha256WithRSAEncryption 43:f3:0d:9f:1b:a0:1c:34:13:f6:7e:b7:6e:8c:34:e1:3d:5b: 00:d4:31:5b:7e:69:4c:c7:94:ba:c6:9d:cf:fe:46:89:82:91: 58:af:47:1f:b4:7c:f0:af:c0:cb:e7:be:f4:82:79:02:e5:f8: 98:fd:9b:99:85:2a:bc:54:bf:8a:4c:98:09:ab:e9:fc:a0:39: e0:02:77:92:0a:d7:6c:f8:db:c6:c2:c3:fa:85:84:21:1e:c1: 10:02:6a:a0:6d:82:f2:ec:56:24:71:bd:62:e3:f2:5b:d9:65: 9c:b3:10:22:3c:11:91:8e:83:25:0e:36:c7:87:2e:e9:6d:b4: c2:31:1b:67:a6:4a:d7:23:ba:b9:b8:54:a0:f4:44:b9:ee:75: 00:f3:e6:1c:3b:3b:6d:1b:90:f5:23:de:57:b3:31:40:5a:35: dc:90:2b:5b:df:ab:1d:fc:0d:a6:41:4c:09:6b:a5:12:5e:3c: a7:40:e9:8e:8b:c5:c8:e5:14:34:16:ea:5b:2c:92:e8:b6:3c: 12:16:55:11:e0:5c:7f:d0:e6:70:f9:94:fd:10:4c:43:2d:78: d3:46:f4:e4:61:2f:12:0d:73:5b:98:3b:ca:8a:05:a6:ae:6a: c6:1b:80:b4:97:60:98:7a:31:38:52:c8:53:10:11:4e:f4:84: 73:cd:b3:09 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt3xnZH1IMaoD2tdytHs0Y9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmQxNDExOGRiZDIyNzI5OGRhYTgwYzdhY2FiMTFlZWE2ZDYzZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6qgc3Fnz9M0KRuMqC+c/PAiDOnj Il1echZAjBgisSDA++cnhuRaSxZ5aBibTcsb9Z1Fragv5X0dsXHOgMJZdgtaI75l r6XA2M+pCThDDlQhji972TyrwrjUVdzPTWfcWew1w8BK8XN5u96z6mjUsk5rYtjv eo52Ht9Z0CyVHkGNtTjERMK5K4tXLBKCi1uQdD5SD9Q9K+eNk7zj9If9KrKx6+FD he/hk4TVGNsga+6LKE2Ai0sj7i9rlNTDJsMmpA7pRGnEAPIDtxqQPVocAbAfwmjz AayvvoQvLma7yVeENgSxcda2HbYDqkRPf2JYj+/bqNcul3ARgh6DOGbPbQIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFLbRQRjb0icpjaqAx6yrEe6m1j4hMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2L2VkNTFk Ny02NGZkLTRjNzMtOWU4Yy0wZTM3ZTExZDBlYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvZWQ1MWQ3 LTY0ZmQtNGM3My05ZThjLTBlMzdlMTFkMGVjMy8xL3R0RkJHTnZTSnltTnFvREhy S3NSN3FiV1BpRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDWIcoAwQCuUNkAwQCuYRQAwQCub14AwQCuekM AwQCue0IMA0EAgACMAcDBQMqBPCAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCH TAIDAOAvMA0GCSqGSIb3DQEBCwUAA4IBAQBD8w2fG6AcNBP2frdujDThPVsA1DFb fmlMx5S6xp3P/kaJgpFYr0cftHzwr8DL5770gnkC5fiY/ZuZhSq8VL+KTJgJq+n8 oDngAneSCtds+NvGwsP6hYQhHsEQAmqgbYLy7FYkcb1i4/Jb2WWcsxAiPBGRjoMl DjbHhy7pbbTCMRtnpkrXI7q5uFSg9ES57nUA8+YcOzttG5D1I95XszFAWjXckCtb 36sd/A2mQUwJa6USXjynQOmOi8XI5RQ0FupbLJLotjwSFlUR4Fx/0OZw+ZT9EExD LXjTRvTkYS8SDXNbmDvKigWmrmrGG4C0l2CYejE4UshTEBFO9IRzzbMJ -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:44 2026 by rpki-client