This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer File: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (raw, json) Hash identifier: l9/MIk4eqR2fam30U+ysID6spO4xRJde1PWEwLHsSMA= Subject key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3 Certificate issuer: /CN=ripe-ncc-ta Certificate serial: 011C Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Manifest: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft caRepository: rsync://rpki.ripe.net/repository/aca/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 14:19:36 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 0 -- 4294967295 IP: 0.0.0.0/0 IP: ::/0 Validation: OK Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Feb 2026 14:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ripe-ncc-ta Validity Not Before: Nov 20 14:19:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec334d0f3a18be0021b7b8e842287641acb1731a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:05:27:f6:b3:0b:9b:77:14:ed:09:f4:8d: ce:0a:3d:d2:d4:83:9b:b0:05:08:86:32:84:e5:68: a8:58:9e:6a:a9:47:c1:2f:22:48:eb:83:2a:40:e7: 38:5c:5a:6a:9a:cd:e8:61:cb:e8:a8:33:be:3f:5d: 90:29:cf:e9:4f:c9:6f:00:5c:93:d3:5e:a7:b7:0b: 3b:f1:41:17:ea:9d:51:e0:da:4f:a5:d2:97:ee:05: 49:42:42:3f:9f:db:fd:1e:8b:6f:16:a9:8b:dd:03: e2:df:75:c9:e6:99:7b:ad:9c:32:6c:bc:da:50:8c: a7:c4:d4:2e:c1:ff:b9:0e:0c:f8:cc:cd:3e:05:d7: 67:b0:77:b8:6b:d5:1e:52:22:64:95:19:42:b9:45: 6e:09:52:9e:b7:b1:28:e0:5f:f9:72:90:aa:be:68: 31:68:1e:f5:2e:08:5c:e0:0b:fa:af:3d:a3:eb:3a: 8b:1d:7f:65:65:19:67:a8:8f:8f:ae:0c:a8:f8:46: 05:ea:bb:b5:f4:73:62:d5:ce:e9:84:89:98:28:0c: a9:12:84:d7:42:41:08:cb:9f:dd:68:cc:df:6e:af: 5b:20:38:96:51:e8:f0:23:42:05:88:dd:d9:de:cd: ae:0c:76:89:2a:8f:4c:34:a4:44:4b:aa:7c:27:1d: dc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A X509v3 Authority Key Identifier: keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/aca/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 0.0.0.0/0 IPv6: ::/0 sbgp-autonomousSysNum: critical Autonomous System Numbers: 0-4294967295 Signature Algorithm: sha256WithRSAEncryption 83:ec:7b:1b:54:cd:4f:80:02:8d:8b:49:13:15:17:17:0a:95: b4:77:f0:a0:49:ce:56:22:e0:7a:71:b5:93:2e:8c:b9:84:d4: 4c:19:50:70:f4:e9:d3:e3:7a:bd:ba:99:bb:72:8b:3c:43:c2: 43:93:4c:00:2c:83:ea:80:48:ae:80:ed:64:e0:48:b9:99:e5: 01:4e:d7:a9:83:d5:47:30:7c:64:67:73:1b:f1:1c:63:d2:c2: 6e:c0:85:59:49:6c:b5:29:3d:d9:ec:c2:e0:4f:9a:85:a2:b1: 46:a3:b6:f4:11:d1:dd:18:c6:a7:4e:bc:32:53:42:e6:61:b2: 4c:14:1f:5f:29:b5:f7:4d:ad:00:7b:2d:b2:0e:33:8a:4b:e6: d3:7c:85:9f:6b:b7:a2:43:60:85:87:67:4d:0b:e6:e8:2e:93: 63:54:66:2b:7f:50:02:ab:01:25:6e:8d:2e:20:5f:a4:f1:16: 13:31:fc:cb:63:e2:b2:0a:a5:53:00:0b:f4:3f:a8:38:aa:eb: a1:51:7a:36:af:61:4a:6b:b1:b1:d1:61:66:6e:af:45:38:ce: fa:6f:a3:d5:05:f1:76:42:86:6a:aa:a8:bd:f4:cc:a8:8d:80: ab:28:e8:7d:85:d1:cf:aa:e2:bb:70:86:f0:36:56:18:b0:ab: 4d:3a:ba:ba -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICARwwDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw ZS1uY2MtdGEwHhcNMjUxMTIwMTQxOTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYD VQQDEyhlYzMzNGQwZjNhMThiZTAwMjFiN2I4ZTg0MjI4NzY0MWFjYjE3MzFhMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW0FJ/azC5t3FO0J9I3OCj3S 1IObsAUIhjKE5WioWJ5qqUfBLyJI64MqQOc4XFpqms3oYcvoqDO+P12QKc/pT8lv AFyT016ntws78UEX6p1R4NpPpdKX7gVJQkI/n9v9HotvFqmL3QPi33XJ5pl7rZwy bLzaUIynxNQuwf+5Dgz4zM0+BddnsHe4a9UeUiJklRlCuUVuCVKet7Eo4F/5cpCq vmgxaB71Lghc4Av6rz2j6zqLHX9lZRlnqI+Prgyo+EYF6ru19HNi1c7phImYKAyp EoTXQkEIy5/daMzfbq9bIDiWUejwI0IFiN3Z3s2uDHaJKo9MNKRES6p8Jx3cQQID AQABo4ICIDCCAhwwHQYDVR0OBBYEFOwzTQ86GL4AIbe46EIodkGssXMaMB8GA1Ud IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA8GA1UdEwEB/wQFMAMBAf8wDgYD VR0PAQH/BAQDAgEGMEQGCCsGAQUFBwEBBDgwNjA0BggrBgEFBQcwAoYocnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3RhL3JpcGUtbmNjLXRhLmNlcjCByQYIKwYBBQUHAQsE gbwwgbkwMQYIKwYBBQUHMAWGJXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2FjYS8wUAYIKwYBBQUHMAqGRHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2FjYS83RE5ORHpvWXZnQWh0N2pvUWloMlFheXhjeG8ubWZ0MDIGCCsG AQUFBzANhiZodHRwczovL3JyZHAucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBB BgNVHR8EOjA4MDagNKAyhjByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9yaXBlLW5jYy10YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggr BgEFBQcBBwEB/wQYMBYwCQQCAAEwAwMBADAJBAIAAjADAwEAMCEGCCsGAQUFBwEI AQH/BBIwEKAOMAwwCgIBAAIFAP////8wDQYJKoZIhvcNAQELBQADggEBAIPsextU zU+AAo2LSRMVFxcKlbR38KBJzlYi4HpxtZMujLmE1EwZUHD06dPjer26mbtyizxD wkOTTAAsg+qASK6A7WTgSLmZ5QFO16mD1UcwfGRncxvxHGPSwm7AhVlJbLUpPdns wuBPmoWisUajtvQR0d0YxqdOvDJTQuZhskwUH18ptfdNrQB7LbIOM4pL5tN8hZ9r t6JDYIWHZ00L5uguk2NUZit/UAKrASVujS4gX6TxFhMx/Mtj4rIKpVMAC/Q/qDiq 66FRejavYUprsbHRYWZur0U4zvpvo9UF8XZChmqqqL30zKiNgKso6H2F0c+q4rtw hvA2Vhiwq006uro= -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:30 2025 by rpki-client