This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer (raw, json) Hash identifier: jsDyC0Wrqyv/bIanwRpuu2Y7cOhwy6tdf0vZxpNJsnA= Subject key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7F22F4155C24C846DA2901EAB4C4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.212.109.0/24 IP: 193.247.109.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f2:2f:41:55:c2:4c:84:6d:a2:90:1e:ab:4c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:a5:7f:01:4d:16:2e:c8:9d:cf:fa:11:92: 6a:62:e2:08:43:38:90:f4:b9:60:86:c2:1d:ea:9b: 3b:9f:98:55:1f:22:fa:a6:91:41:d1:42:d6:07:92: 6d:81:b6:50:4e:1f:84:f8:09:cd:71:1c:f1:13:5b: ff:82:3e:7d:36:14:9c:08:ed:52:87:4c:03:8e:99: 21:48:ba:86:19:fe:94:f5:2a:cd:4f:46:53:cb:18: 3c:53:76:d0:a1:4f:d7:60:11:82:7d:89:e6:44:86: 4d:c7:02:0e:54:02:18:68:ca:f8:14:81:a4:a7:60: 9a:e4:a5:43:44:ac:86:12:8b:87:97:0b:3e:5a:55: 65:4b:01:aa:b1:57:f9:85:b7:09:97:77:75:c1:8d: 6a:da:86:50:54:a6:0f:49:b3:72:ad:32:1f:7f:aa: 31:09:50:0b:7a:97:a3:9a:2e:a0:3e:21:56:23:aa: 2f:f1:9f:9e:31:14:78:f4:39:ac:2e:cb:e0:51:ae: 07:38:a7:38:da:ef:c9:e0:3a:9a:47:6d:ea:4d:bf: 5f:1a:ca:43:f8:b1:f3:d7:8e:81:58:39:5b:ad:f3: 34:d5:02:68:c5:67:e4:5a:ef:79:91:d0:1f:6c:c9: 72:7f:4d:08:39:b2:ea:1a:58:b0:d5:3c:be:33:01: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.109.0/24 193.247.109.0/24 Signature Algorithm: sha256WithRSAEncryption 04:34:0d:8f:4b:0a:02:6e:1b:b3:d8:55:30:7a:2e:53:c2:9f: c3:c8:3d:69:7a:78:14:ac:4b:3e:14:d9:49:89:b2:25:42:d6: d9:39:fc:8d:c6:d5:35:d2:e5:e9:a3:c4:4b:4c:a3:0f:83:dc: cf:44:21:4d:6d:35:e6:08:d9:71:35:31:d6:27:3b:1f:b3:c6: 35:2e:b1:c9:f9:94:0c:8c:37:64:58:ae:84:90:90:a2:c4:e4: 89:1a:68:8c:49:5a:22:df:ca:75:a3:2f:81:da:87:f3:11:b8: a7:07:e0:b5:7e:48:c8:bd:9d:60:8c:6d:02:fc:9d:46:f1:ea: 8d:bc:64:a2:97:dd:ae:82:19:6c:7d:4b:15:de:e6:45:82:32: 07:1e:a1:df:af:44:8d:14:bb:4c:41:7c:0e:3b:78:2f:cb:42: c7:f5:5d:7b:f4:46:b4:40:0a:2e:80:ba:3d:4d:92:bf:c6:c8: 92:ca:2b:05:e9:d9:c7:5f:79:83:a9:e0:04:ff:45:af:e8:3a: 40:31:4f:1a:68:71:49:d0:f8:59:98:4f:90:e8:80:d4:ae:76: 63:dd:b6:b5:d1:ce:63:ca:c5:98:a0:f9:46:26:a4:6e:08:37: b2:ee:cc:f0:a4:ab:21:b7:1c:41:58:4b:e2:ef:24:7b:44:a5: e4:26:11:5b -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6x/IvQVXCTIRtopAeq0xNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmQ3ZjM2OGZhMWNmNWIxYWFhYTc2YjBmMWYyM2MwNjc1MGE4NDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQSlfwFNFi7Inc/6EZJqYuIIQziQ 9LlghsId6ps7n5hVHyL6ppFB0ULWB5JtgbZQTh+E+AnNcRzxE1v/gj59NhScCO1S h0wDjpkhSLqGGf6U9SrNT0ZTyxg8U3bQoU/XYBGCfYnmRIZNxwIOVAIYaMr4FIGk p2Ca5KVDRKyGEouHlws+WlVlSwGqsVf5hbcJl3d1wY1q2oZQVKYPSbNyrTIff6ox CVALepejmi6gPiFWI6ov8Z+eMRR49DmsLsvgUa4HOKc42u/J4DqaR23qTb9fGspD +LHz146BWDlbrfM01QJoxWfkWu95kdAfbMlyf00IObLqGliw1Ty+MwFsEQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFLbX82j6HPWxqqp2sPHyPAZ1CoQmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzZkMTVm NC04NmEyLTQ2ZDktYjNlZC0wOGFlZGMyZjI2MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvNmQxNWY0 LTg2YTItNDZkOS1iM2VkLTA4YWVkYzJmMjYzOS8xL3R0ZnphUG9jOWJHcXFuYXc4 Zkk4Qm5VS2hDWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9RtAwQAwfdtMA0GCSqGSIb3DQEBCwUAA4IB AQAENA2PSwoCbhuz2FUwei5Twp/DyD1pengUrEs+FNlJibIlQtbZOfyNxtU10uXp o8RLTKMPg9zPRCFNbTXmCNlxNTHWJzsfs8Y1LrHJ+ZQMjDdkWK6EkJCixOSJGmiM SVoi38p1oy+B2ofzEbinB+C1fkjIvZ1gjG0C/J1G8eqNvGSil92ughlsfUsV3uZF gjIHHqHfr0SNFLtMQXwOO3gvy0LH9V179Ea0QAougLo9TZK/xsiSyisF6dnHX3mD qeAE/0Wv6DpAMU8aaHFJ0PhZmE+Q6IDUrnZj3ba10c5jysWYoPlGJqRuCDey7szw pKshtxxBWEvi7yR7RKXkJhFb -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:50 2026 by rpki-client