This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TUmmTIqHgSSV6NTaxAWAoG0eFlg.cer File: TUmmTIqHgSSV6NTaxAWAoG0eFlg.cer (raw, json) Hash identifier: pFl6h2MuxNzm7WC7HYrsJSwZF9BnGUr7wCdAA+W/3BU= Subject key identifier: 4D:49:A6:4C:8A:87:81:24:95:E8:D4:DA:C4:05:80:A0:6D:1E:16:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC1099B7E43031E0FF8E627628F573183 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/161d71-fd23-4615-b81a-5b5efbeadfd4/1/TUmmTIqHgSSV6NTaxAWAoG0eFlg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/161d71-fd23-4615-b81a-5b5efbeadfd4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 09:43:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201827 IP: 91.216.76.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:09:9b:7e:43:03:1e:0f:f8:e6:27:62:8f:57:31:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 09:43:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d49a64c8a87812495e8d4dac40580a06d1e1658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:81:c3:65:5b:a8:c0:8f:30:be:01:20:fd: 53:89:a7:8c:b6:71:97:6e:ae:49:62:7a:9a:92:d8: df:b1:1c:5b:eb:9e:e8:c4:27:35:5a:91:55:fa:7c: a9:c9:12:46:fb:c2:83:08:02:7b:3d:a2:a5:6a:0b: 9e:e9:ab:23:07:a7:a9:50:e0:15:b1:b0:32:52:06: a7:e9:cb:c9:05:fd:69:de:c8:e0:16:6f:2b:12:4c: f7:4c:83:ac:b4:0a:76:5a:28:e9:ef:98:d1:c8:75: 14:97:8a:5e:f6:9e:86:af:38:6a:f1:e1:f5:af:1b: 43:95:6a:f3:49:1f:46:89:c7:aa:2a:2d:b7:04:a3: ae:9d:78:f0:d0:4d:5f:83:92:b3:81:9e:bc:f2:4d: 39:05:95:17:ae:f8:18:f6:5a:4d:c7:cc:16:b0:ce: e3:08:ae:ef:e5:aa:a0:6c:75:09:84:bc:ba:e4:b3: 2d:98:a8:0f:3c:08:8a:63:60:4a:ee:dc:9c:37:96: f0:f4:80:fb:7a:77:f5:ed:cb:7a:a4:e1:88:7c:e8: 2f:5d:75:17:b6:df:a2:c5:62:71:fd:bb:8f:90:cb: ad:df:3e:7c:0e:bd:49:08:80:1a:ae:b6:ef:75:0d: 8c:af:3f:4d:29:91:2b:6b:f7:a0:d4:cc:01:85:28: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:49:A6:4C:8A:87:81:24:95:E8:D4:DA:C4:05:80:A0:6D:1E:16:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/161d71-fd23-4615-b81a-5b5efbeadfd4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/161d71-fd23-4615-b81a-5b5efbeadfd4/1/TUmmTIqHgSSV6NTaxAWAoG0eFlg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.76.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201827 Signature Algorithm: sha256WithRSAEncryption 39:d9:d3:ff:32:e9:35:18:3e:c4:b4:b6:2d:74:c9:85:89:1e: f2:d1:e7:53:01:a8:54:a8:c1:a7:9c:bf:2b:42:08:f7:10:23: 01:bd:76:42:8e:2b:58:1f:99:39:d6:9d:b8:ae:dc:46:d7:38: 6f:7a:7b:71:ab:5c:66:b0:c5:ef:77:91:2f:70:2c:15:81:8e: 1a:f2:f1:04:2a:4e:60:26:82:65:ea:03:89:88:d6:a1:94:fc: b2:4b:f4:7c:41:94:54:88:4e:2c:eb:bc:a7:45:d2:f8:39:3c: c3:b0:c4:4c:97:bf:84:0a:9e:99:24:fb:60:3e:3f:fb:9d:73: 0b:bf:26:ef:f9:cb:60:a1:e4:e8:9e:26:93:9a:9c:95:af:b1: c0:de:ed:9c:34:ed:22:d9:9b:5b:59:0f:5e:60:8b:32:be:fa: b9:9e:81:18:31:fc:76:1f:3f:1b:4c:c5:35:fa:bf:91:b9:0c: ac:fa:cb:51:5e:4e:2e:8f:d5:af:a8:39:45:5b:c6:6c:3e:0d: 77:95:ef:ea:3e:91:7d:e4:4f:c3:20:64:c8:d8:dd:af:79:83: c6:a5:52:eb:f9:ca:e6:62:2a:50:1c:c1:d6:de:7b:da:23:86: 7b:3b:13:31:05:22:18:35:99:1c:bb:57:62:b5:7f:30:7f:2a: 6e:52:40:bc -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZvBCZt+QwMeD/jmJ2KPVzGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MDk0MzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDQ5YTY0YzhhODc4MTI0OTVlOGQ0ZGFjNDA1ODBhMDZkMWUxNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvGBw2VbqMCPML4BIP1TiaeMtnGX bq5JYnqaktjfsRxb657oxCc1WpFV+nypyRJG+8KDCAJ7PaKlague6asjB6epUOAV sbAyUgan6cvJBf1p3sjgFm8rEkz3TIOstAp2Wijp75jRyHUUl4pe9p6Grzhq8eH1 rxtDlWrzSR9GiceqKi23BKOunXjw0E1fg5KzgZ688k05BZUXrvgY9lpNx8wWsM7j CK7v5aqgbHUJhLy65LMtmKgPPAiKY2BK7tycN5bw9ID7enf17ct6pOGIfOgvXXUX tt+ixWJx/buPkMut3z58Dr1JCIAarrbvdQ2Mrz9NKZEra/eg1MwBhSikoQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE1JpkyKh4EklejU2sQFgKBtHhZYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzE2MWQ3 MS1mZDIzLTQ2MTUtYjgxYS01YjVlZmJlYWRmZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvMTYxZDcx LWZkMjMtNDYxNS1iODFhLTViNWVmYmVhZGZkNC8xL1RVbW1USXFIZ1NTVjZOVGF4 QVdBb0cwZUZsZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9hMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMUYzANBgkqhkiG9w0BAQsFAAOCAQEAOdnT/zLpNRg+xLS2LXTJhYke8tHnUwGo VKjBp5y/K0II9xAjAb12Qo4rWB+ZOdaduK7cRtc4b3p7catcZrDF73eRL3AsFYGO GvLxBCpOYCaCZeoDiYjWoZT8skv0fEGUVIhOLOu8p0XS+Dk8w7DETJe/hAqemST7 YD4/+51zC78m7/nLYKHk6J4mk5qcla+xwN7tnDTtItmbW1kPXmCLMr76uZ6BGDH8 dh8/G0zFNfq/kbkMrPrLUV5OLo/Vr6g5RVvGbD4Nd5Xv6j6RfeRPwyBkyNjdr3mD xqVS6/nK5mIqUBzB1t572iOGezsTMQUiGDWZHLtXYrV/MH8qblJAvA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:32 2026 by rpki-client