This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer File: ec334d0f3a18be0021b7b8e842287641acb1731a.cer (raw, json) Hash identifier: LxP+BnzIe9kcD4NJ1Deb+rbPZZZlY817tDGUP+bmr9Q= Subject key identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A Authority key identifier: E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3 Certificate issuer: /CN=ripe-ncc-ta Certificate serial: 011F Authority info access: rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Manifest: rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft caRepository: rsync://rpki.ripe.net/repository/aca/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 14 Jan 2026 10:50:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 0 -- 4294967295 IP: 0.0.0.0/0 IP: ::/0 Validation: OK Signature path: rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 Apr 2026 10:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ripe-ncc-ta Validity Not Before: Jan 14 10:50:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec334d0f3a18be0021b7b8e842287641acb1731a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:05:27:f6:b3:0b:9b:77:14:ed:09:f4:8d: ce:0a:3d:d2:d4:83:9b:b0:05:08:86:32:84:e5:68: a8:58:9e:6a:a9:47:c1:2f:22:48:eb:83:2a:40:e7: 38:5c:5a:6a:9a:cd:e8:61:cb:e8:a8:33:be:3f:5d: 90:29:cf:e9:4f:c9:6f:00:5c:93:d3:5e:a7:b7:0b: 3b:f1:41:17:ea:9d:51:e0:da:4f:a5:d2:97:ee:05: 49:42:42:3f:9f:db:fd:1e:8b:6f:16:a9:8b:dd:03: e2:df:75:c9:e6:99:7b:ad:9c:32:6c:bc:da:50:8c: a7:c4:d4:2e:c1:ff:b9:0e:0c:f8:cc:cd:3e:05:d7: 67:b0:77:b8:6b:d5:1e:52:22:64:95:19:42:b9:45: 6e:09:52:9e:b7:b1:28:e0:5f:f9:72:90:aa:be:68: 31:68:1e:f5:2e:08:5c:e0:0b:fa:af:3d:a3:eb:3a: 8b:1d:7f:65:65:19:67:a8:8f:8f:ae:0c:a8:f8:46: 05:ea:bb:b5:f4:73:62:d5:ce:e9:84:89:98:28:0c: a9:12:84:d7:42:41:08:cb:9f:dd:68:cc:df:6e:af: 5b:20:38:96:51:e8:f0:23:42:05:88:dd:d9:de:cd: ae:0c:76:89:2a:8f:4c:34:a4:44:4b:aa:7c:27:1d: dc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:33:4D:0F:3A:18:BE:00:21:B7:B8:E8:42:28:76:41:AC:B1:73:1A X509v3 Authority Key Identifier: keyid:E8:55:2B:1F:D6:D1:A4:F7:E4:04:C6:D8:E5:68:0D:1E:BC:16:3F:C3 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/aca/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 0.0.0.0/0 IPv6: ::/0 sbgp-autonomousSysNum: critical Autonomous System Numbers: 0-4294967295 Signature Algorithm: sha256WithRSAEncryption 51:7b:25:dc:71:7b:bb:29:4a:d7:45:07:6b:28:b0:2b:dd:55: 2b:70:73:81:1b:0a:df:06:77:c7:bd:73:3c:c2:d5:a8:cf:4d: 12:13:8f:0f:38:14:b5:ee:a5:dc:40:ee:71:24:10:ad:b7:33: b0:d8:fe:86:ff:14:98:78:21:91:d2:8d:94:0e:e5:e8:ed:77: 4a:b1:86:58:e2:30:49:e5:96:6d:78:4e:d7:d1:62:67:99:7d: ea:60:11:66:9a:22:69:e1:89:a5:df:72:e6:f0:42:30:cf:8f: 3c:83:e3:90:dc:48:c7:99:d7:3f:58:fc:8c:df:19:b0:61:05: f4:31:80:53:47:37:d7:53:8f:bc:31:81:8b:e0:29:36:0a:2b: 1c:6f:bd:1a:32:3a:bd:78:48:20:06:9d:58:f1:9a:b4:f2:bb: ef:70:99:b0:35:21:99:c1:64:23:91:8c:1e:35:58:2e:c8:61: 7f:0b:df:02:e5:c2:3b:5f:43:dd:22:3c:25:47:6f:a2:31:01: 88:e3:5a:c8:dc:a0:33:e5:ae:06:e9:d2:01:b4:f2:e8:e9:62: da:5d:f9:75:2d:21:91:ee:4e:92:b4:5e:c1:29:bf:a0:ff:5f: f4:3f:02:49:fb:19:bb:0e:5c:ec:93:aa:c5:ff:b6:9b:6a:2c: 7d:47:91:30 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwFjEUMBIGA1UEAxMLcmlw ZS1uY2MtdGEwHhcNMjYwMTE0MTA1MDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYD VQQDEyhlYzMzNGQwZjNhMThiZTAwMjFiN2I4ZTg0MjI4NzY0MWFjYjE3MzFhMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW0FJ/azC5t3FO0J9I3OCj3S 1IObsAUIhjKE5WioWJ5qqUfBLyJI64MqQOc4XFpqms3oYcvoqDO+P12QKc/pT8lv AFyT016ntws78UEX6p1R4NpPpdKX7gVJQkI/n9v9HotvFqmL3QPi33XJ5pl7rZwy bLzaUIynxNQuwf+5Dgz4zM0+BddnsHe4a9UeUiJklRlCuUVuCVKet7Eo4F/5cpCq vmgxaB71Lghc4Av6rz2j6zqLHX9lZRlnqI+Prgyo+EYF6ru19HNi1c7phImYKAyp EoTXQkEIy5/daMzfbq9bIDiWUejwI0IFiN3Z3s2uDHaJKo9MNKRES6p8Jx3cQQID AQABo4ICIDCCAhwwHQYDVR0OBBYEFOwzTQ86GL4AIbe46EIodkGssXMaMB8GA1Ud IwQYMBaAFOhVKx/W0aT35ATG2OVoDR68Fj/DMA8GA1UdEwEB/wQFMAMBAf8wDgYD VR0PAQH/BAQDAgEGMEQGCCsGAQUFBwEBBDgwNjA0BggrBgEFBQcwAoYocnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3RhL3JpcGUtbmNjLXRhLmNlcjCByQYIKwYBBQUHAQsE gbwwgbkwMQYIKwYBBQUHMAWGJXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2FjYS8wUAYIKwYBBQUHMAqGRHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L2FjYS83RE5ORHpvWXZnQWh0N2pvUWloMlFheXhjeG8ubWZ0MDIGCCsG AQUFBzANhiZodHRwczovL3JyZHAucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBB BgNVHR8EOjA4MDagNKAyhjByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9yaXBlLW5jYy10YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggr BgEFBQcBBwEB/wQYMBYwCQQCAAEwAwMBADAJBAIAAjADAwEAMCEGCCsGAQUFBwEI AQH/BBIwEKAOMAwwCgIBAAIFAP////8wDQYJKoZIhvcNAQELBQADggEBAFF7Jdxx e7spStdFB2sosCvdVStwc4EbCt8Gd8e9czzC1ajPTRITjw84FLXupdxA7nEkEK23 M7DY/ob/FJh4IZHSjZQO5ejtd0qxhljiMEnllm14TtfRYmeZfepgEWaaImnhiaXf cubwQjDPjzyD45DcSMeZ1z9Y/IzfGbBhBfQxgFNHN9dTj7wxgYvgKTYKKxxvvRoy Or14SCAGnVjxmrTyu+9wmbA1IZnBZCORjB41WC7IYX8L3wLlwjtfQ90iPCVHb6Ix AYjjWsjcoDPlrgbp0gG08ujpYtpd+XUtIZHuTpK0XsEpv6D/X/Q/Akn7GbsOXOyT qsX/tptqLH1HkTA= -----END CERTIFICATE-----Generated at Sat Jan 24 23:22:43 2026 by rpki-client