This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer File: dTxuAUKu56nlon0Vd5su7LaI3ac.cer (raw, json) Hash identifier: BrQA8pQdZj9f6bYhfgeXPQ4G+q7cK/9Uj2ohXzZ+cBo= Subject key identifier: 75:3C:6E:01:42:AE:E7:A9:E5:A2:7D:15:77:9B:2E:EC:B6:88:DD:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38E4AE1E1DD93EE689A6197A2FF688 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216251 IP: 91.242.253.0/24 IP: 2a11:b440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e4:ae:1e:1d:d9:3e:e6:89:a6:19:7a:2f:f6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=753c6e0142aee7a9e5a27d15779b2eecb688dda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:7a:e1:a0:f9:54:71:ea:5a:d2:90:f7:30: b5:b9:c5:23:10:3f:0a:95:7f:56:3a:be:0a:cb:48: 87:93:19:43:ab:65:5a:6d:d5:f3:13:66:be:0c:f5: 63:dd:67:ce:4e:bf:33:c3:66:5f:c9:f0:0f:eb:0e: 14:b7:56:34:0d:13:67:16:f3:4e:6e:31:56:70:fb: 11:51:be:bb:87:2b:5a:65:6d:5e:05:6a:d9:a4:cd: f5:8f:21:e4:32:a3:e0:e8:a3:81:97:08:7c:c0:96: 05:b7:7a:d2:a2:8d:86:8a:f9:82:df:0f:31:a7:63: 19:82:5a:63:80:8a:5e:75:24:c7:28:73:f4:d3:7a: 98:ac:43:0c:b2:24:4c:9f:55:b5:7f:d1:bb:6f:cd: 2c:0b:cf:3f:f9:52:ac:b8:ef:d1:3a:4e:92:d4:b4: 37:86:c9:6c:54:a5:a8:82:5d:4e:23:a1:d9:28:28: 4e:71:ff:23:4c:e7:2d:db:53:35:a0:1c:38:d1:68: 60:15:79:15:3a:26:21:b2:07:f0:6b:8a:c2:18:7b: af:59:05:d0:c8:88:a6:e3:be:1c:85:79:bf:e6:7c: 09:06:33:b9:98:fe:81:d6:c3:34:e5:6e:31:b6:35: a1:a7:eb:f8:88:5c:d7:a0:3f:dc:2c:d6:2a:af:5b: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3C:6E:01:42:AE:E7:A9:E5:A2:7D:15:77:9B:2E:EC:B6:88:DD:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.253.0/24 IPv6: 2a11:b440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216251 Signature Algorithm: sha256WithRSAEncryption 60:f2:a6:7f:08:41:a6:97:10:fb:40:7b:67:55:1a:14:ea:0b: f2:a9:7c:61:4d:07:d0:05:da:bd:4b:f5:6f:54:08:6e:ae:ad: 34:b9:ee:ad:0d:13:85:85:bf:d4:5d:28:29:6c:d0:ba:b7:b4: 49:67:e1:f6:55:1b:ff:ee:94:d9:76:36:ce:f3:b8:95:50:31: 72:2f:a9:c7:9a:3a:13:54:7a:ab:fa:19:1b:66:d4:27:17:99: fd:b1:8a:0f:82:6d:26:9c:32:66:9f:fb:31:50:aa:be:98:90: 68:e8:bd:40:98:2b:c1:84:2d:4e:08:2f:ad:20:ed:1f:41:0d: 48:c6:57:da:5f:68:7b:42:e3:79:90:17:57:cf:34:68:4c:4c: 51:13:40:b2:df:76:a9:37:78:eb:40:a3:90:3f:65:9b:e3:5d: ae:b4:bc:08:b0:7f:69:e9:5b:28:b1:03:a7:db:15:f9:78:0c: 97:ca:7b:cd:af:e8:ca:e0:c3:47:06:ce:06:45:91:4e:d8:99: ab:4d:98:5a:44:6a:d0:0e:ba:38:08:e3:34:87:80:14:1b:f0: ec:cc:9c:9b:ec:87:ec:d2:78:81:18:f6:cc:20:9c:17:27:db: 4a:63:8d:78:e2:81:f7:c4:00:6f:ef:93:c0:01:60:68:c9:0f: 7f:b0:3f:14 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OOSuHh3ZPuaJphl6L/aIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTNjNmUwMTQyYWVlN2E5ZTVhMjdkMTU3NzliMmVlY2I2ODhkZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm564aD5VHHqWtKQ9zC1ucUjED8K lX9WOr4Ky0iHkxlDq2VabdXzE2a+DPVj3WfOTr8zw2ZfyfAP6w4Ut1Y0DRNnFvNO bjFWcPsRUb67hytaZW1eBWrZpM31jyHkMqPg6KOBlwh8wJYFt3rSoo2GivmC3w8x p2MZglpjgIpedSTHKHP003qYrEMMsiRMn1W1f9G7b80sC88/+VKsuO/ROk6S1LQ3 hslsVKWogl1OI6HZKChOcf8jTOct21M1oBw40WhgFXkVOiYhsgfwa4rCGHuvWQXQ yIim474chXm/5nwJBjO5mP6B1sM05W4xtjWhp+v4iFzXoD/cLNYqr1suJQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHU8bgFCruep5aJ9FXebLuy2iN2nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2JjMTE0 MC01MDg2LTQxZTItYjRjYy02OGM4MDRiNjU4ZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvYmMxMTQw LTUwODYtNDFlMi1iNGNjLTY4YzgwNGI2NThlNy8xL2RUeHVBVUt1NTZubG9uMFZk NXN1N0xhSTNhYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW/L9MA0EAgACMAcDBQMqEbRAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMuzANBgkqhkiG9w0BAQsFAAOCAQEAYPKmfwhBppcQ +0B7Z1UaFOoL8ql8YU0H0AXavUv1b1QIbq6tNLnurQ0ThYW/1F0oKWzQure0SWfh 9lUb/+6U2XY2zvO4lVAxci+px5o6E1R6q/oZG2bUJxeZ/bGKD4JtJpwyZp/7MVCq vpiQaOi9QJgrwYQtTggvrSDtH0ENSMZX2l9oe0LjeZAXV880aExMURNAst92qTd4 60CjkD9lm+NdrrS8CLB/aelbKLEDp9sV+XgMl8p7za/oyuDDRwbOBkWRTtiZq02Y WkRq0A66OAjjNIeAFBvw7Mycm+yH7NJ4gRj2zCCcFyfbSmONeOKB98QAb++TwAFg aMkPf7A/FA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:29 2026 by rpki-client