This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer File: TuBDL1Qp2GHXdDv8MdetAZYopes.cer (raw, json) Hash identifier: isnM1Au1br8oJ3Vs2syBw7uKBz1qOhy5ics0jtr2XrA= Subject key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA599AD1E273699BD1F5252E22331B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47581 IP: 185.144.84.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:99:ad:1e:27:36:99:bd:1f:52:52:e2:23:31:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:8e:82:39:7a:45:ed:ac:ec:57:ff:88:cb: a7:4b:61:ef:fd:c9:3e:fc:a3:96:0d:b1:7b:fe:fe: 4d:48:49:b0:dc:45:ed:ac:d4:5a:db:9d:9d:0e:ce: 2c:02:f4:b0:f2:d0:d8:ef:03:7d:47:b3:7e:d5:34: 69:42:9f:b5:d7:68:dc:96:8e:a0:30:ca:ce:ac:25: a5:4f:a7:0a:f2:ec:66:23:23:ba:24:55:95:9d:fa: ff:ff:48:27:74:44:9e:8b:5c:6f:e8:fe:7d:a3:09: 43:e4:31:84:96:1e:dd:cd:b2:79:e6:a7:02:8f:39: 20:df:30:66:d9:f1:a4:1b:2d:b0:b5:c7:b0:f0:46: a4:9b:85:03:06:64:18:23:3e:7e:ad:79:ba:54:8c: 40:19:f8:36:41:9a:f0:01:d5:d5:28:6b:24:02:c4: 27:c7:8e:81:c6:f1:98:e9:8e:a8:28:10:e4:0f:a0: 58:1f:e4:22:d6:fb:79:f2:f5:8a:24:a2:79:a1:2a: 5d:c7:08:82:36:14:d0:43:e5:bb:1b:d8:6f:9e:f7: 95:7a:1b:0e:11:6d:54:1f:81:a3:99:fd:3b:b7:9b: 19:cb:00:32:85:7f:9c:c1:f4:aa:88:44:79:8f:b2: e4:be:a0:1a:37:0d:8e:9e:38:53:c2:78:eb:d2:5b: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.84.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47581 Signature Algorithm: sha256WithRSAEncryption a8:0c:01:b2:f2:46:e4:af:1b:0a:e3:43:48:b7:0f:11:06:c6: 49:96:7b:e7:09:4a:a2:08:69:9d:52:c5:c0:a3:2a:11:85:18: 97:41:00:a9:19:f5:4d:eb:bc:ed:45:9d:64:55:92:4a:19:be: 8a:f9:c5:59:92:2e:98:cb:fa:f5:cc:c3:cb:1c:76:64:f1:70: bd:95:13:d5:b0:dd:a8:ff:b1:b2:f8:3b:2a:85:95:7d:fc:fb: e0:3d:4d:5b:ef:4d:ce:e3:a2:3e:38:05:16:38:73:e0:46:41: fb:69:ee:87:5d:e7:11:c6:58:2a:27:8d:6f:4a:8f:c7:48:0b: 10:cb:09:b3:d9:dd:5c:98:a3:44:ff:34:91:28:47:94:67:39: 55:07:0c:52:37:7e:ee:82:d2:13:1f:ce:3c:99:9c:42:b7:73: be:50:81:e4:2d:d9:51:e6:65:ee:b9:2e:17:25:77:60:aa:65: 2f:2e:46:80:64:14:95:70:e0:39:4b:4e:5e:37:3b:57:d1:4c: af:db:59:d3:e9:07:d8:62:a0:75:a4:b1:98:b5:46:71:ff:8d: 02:a1:c9:42:ab:df:c6:f1:9f:f1:f9:f1:f6:3e:be:3b:0a:b4: 8b:c8:11:cf:78:a2:54:60:2c:a9:58:cc:ea:ba:ea:a4:94:da: 4d:8c:36:f0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pZmtHic2mb0fUlLiIzGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWUwNDMyZjU0MjlkODYxZDc3NDNiZmMzMWQ3YWQwMTk2MjhhNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTyOgjl6Re2s7Ff/iMunS2Hv/ck+ /KOWDbF7/v5NSEmw3EXtrNRa252dDs4sAvSw8tDY7wN9R7N+1TRpQp+112jclo6g MMrOrCWlT6cK8uxmIyO6JFWVnfr//0gndESei1xv6P59owlD5DGElh7dzbJ55qcC jzkg3zBm2fGkGy2wtcew8Eakm4UDBmQYIz5+rXm6VIxAGfg2QZrwAdXVKGskAsQn x46BxvGY6Y6oKBDkD6BYH+Qi1vt58vWKJKJ5oSpdxwiCNhTQQ+W7G9hvnveVehsO EW1UH4Gjmf07t5sZywAyhX+cwfSqiER5j7LkvqAaNw2OnjhTwnjr0lsf4wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE7gQy9UKdhh13Q7/DHXrQGWKKXrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2IxN2Nh NC0yZTJlLTQxNWEtYWRkZS03NzI1N2UwNDc2NWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYjE3Y2E0 LTJlMmUtNDE1YS1hZGRlLTc3MjU3ZTA0NzY1Zi8xL1R1QkRMMVFwMkdIWGREdjhN ZGV0QVpZb3Blcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZBUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC53TANBgkqhkiG9w0BAQsFAAOCAQEAqAwBsvJG5K8bCuNDSLcPEQbGSZZ75wlK oghpnVLFwKMqEYUYl0EAqRn1Teu87UWdZFWSShm+ivnFWZIumMv69czDyxx2ZPFw vZUT1bDdqP+xsvg7KoWVffz74D1NW+9NzuOiPjgFFjhz4EZB+2nuh13nEcZYKieN b0qPx0gLEMsJs9ndXJijRP80kShHlGc5VQcMUjd+7oLSEx/OPJmcQrdzvlCB5C3Z UeZl7rkuFyV3YKplLy5GgGQUlXDgOUtOXjc7V9FMr9tZ0+kH2GKgdaSxmLVGcf+N AqHJQqvfxvGf8fnx9j6+Owq0i8gRz3iiVGAsqVjM6rrqpJTaTYw28A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:39 2026 by rpki-client