This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer File: rwlQP8rAF2lRWhny3CZX2S_TUN8.cer (raw, json) Hash identifier: dd06R8VEhCFf1heTznHmF610xyN8vysViZOlKAZvKSQ= Subject key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38CD7E67699A54D3AF36A0F8C7B9AA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 141.10.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cd:7e:67:69:9a:54:d3:af:36:a0:f8:c7:b9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af09503fcac01769515a19f2dc2657d92fd350df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b4:53:15:d9:b7:96:11:4e:ee:23:fe:15:b2: c9:2c:70:b1:52:2a:00:a6:74:e6:e6:af:8c:58:77: 06:cf:99:56:5e:de:5d:ed:8c:10:2d:0c:90:30:ab: 9e:f6:e8:9f:ad:ae:4c:66:c9:b4:50:aa:0a:2a:c9: cd:ae:50:f5:18:e0:1d:e4:f7:46:70:4f:0e:c4:a3: 51:0d:87:c8:a3:a9:34:8b:0b:b2:7b:68:5d:b1:e3: c7:e7:d0:c1:6f:10:b0:27:5a:b9:13:b5:2f:de:12: 62:d9:15:30:18:68:64:7e:2b:b2:9b:07:74:c4:85: 75:58:86:4f:ee:ad:cc:60:af:a4:ea:f5:a5:86:76: 87:49:7c:71:e1:fd:8c:a6:a3:df:c9:7e:ef:e7:08: 80:7e:23:85:3b:15:94:bb:b1:1d:82:de:65:75:ea: f8:08:11:f7:52:c9:88:3c:d5:3c:e8:6c:f2:64:c0: 7d:cf:c2:ed:46:20:47:ed:84:1d:64:41:ce:7e:78: 93:33:0a:cc:36:a1:33:6f:dd:96:de:18:3c:5f:fd: e0:61:23:a6:9b:b7:63:ce:c4:dc:6d:52:fa:91:55: 7a:eb:35:78:56:2d:a2:c9:48:fb:fd:4e:e3:18:5d: 2d:77:81:37:31:25:d1:dc:fd:fd:04:e7:21:f2:ed: 58:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.10.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:63:d3:81:2a:14:2f:f4:d5:a3:8d:6e:6a:e4:90:e0:56:20: eb:17:9b:e4:e4:8a:74:3f:7e:f2:ca:37:52:51:58:08:21:94: 9a:ec:9f:18:56:fa:ce:21:fc:e5:17:28:1c:71:8d:42:3a:18: a3:86:0c:c6:3f:7f:02:59:d2:6c:62:ee:32:cf:13:f1:26:d9: 16:9e:2d:fd:3a:18:a6:aa:4e:b1:62:c6:29:9a:09:7b:e6:9a: 0f:91:95:1e:41:51:08:2a:8a:df:54:84:10:89:dd:5a:cb:c5: b3:c7:88:8c:6b:2c:2d:79:39:05:c5:26:fb:8a:d4:44:58:03: b2:f0:f0:5b:f6:cd:9f:d4:bc:31:96:58:b6:cd:e1:a0:70:99: c4:51:71:73:68:9c:1d:cc:52:31:55:5d:ef:d4:e4:de:47:6e: e8:45:1b:bb:53:9d:6e:b5:5c:92:f9:42:73:eb:43:7c:40:ae: 98:4f:4b:11:08:4e:08:e6:ee:45:0b:64:33:e4:c2:43:f9:e9: ef:4f:58:08:63:18:3b:c7:4f:6a:42:81:90:00:25:fb:eb:4f: 36:6a:57:92:a2:2d:e6:e9:5e:0d:ea:71:7c:cc:f1:c0:a7:1d: 50:e5:dc:77:86:46:7d:9a:d6:ad:99:8e:18:2f:63:50:95:54: e2:6f:99:0b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt+OM1+Z2maVNOvNqD4x7mqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjA5NTAzZmNhYzAxNzY5NTE1YTE5ZjJkYzI2NTdkOTJmZDM1MGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLRTFdm3lhFO7iP+FbLJLHCxUioA pnTm5q+MWHcGz5lWXt5d7YwQLQyQMKue9uifra5MZsm0UKoKKsnNrlD1GOAd5PdG cE8OxKNRDYfIo6k0iwuye2hdsePH59DBbxCwJ1q5E7Uv3hJi2RUwGGhkfiuymwd0 xIV1WIZP7q3MYK+k6vWlhnaHSXxx4f2MpqPfyX7v5wiAfiOFOxWUu7Edgt5lder4 CBH3UsmIPNU86GzyZMB9z8LtRiBH7YQdZEHOfniTMwrMNqEzb92W3hg8X/3gYSOm m7djzsTcbVL6kVV66zV4Vi2iyUj7/U7jGF0td4E3MSXR3P39BOch8u1YYQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFK8JUD/KwBdpUVoZ8twmV9kv01DfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVjLzBkMTA4 OS1kOTY3LTQzYjUtYmMzMC0xNzUwMmQzZGY5NWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWMvMGQxMDg5 LWQ5NjctNDNiNS1iYzMwLTE3NTAyZDNkZjk1Zi8xL3J3bFFQOHJBRjJsUldobnkz Q1pYMlNfVFVOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAjQowDQYJKoZIhvcNAQELBQADggEBABhj04Eq FC/01aONbmrkkOBWIOsXm+TkinQ/fvLKN1JRWAghlJrsnxhW+s4h/OUXKBxxjUI6 GKOGDMY/fwJZ0mxi7jLPE/Em2RaeLf06GKaqTrFiximaCXvmmg+RlR5BUQgqit9U hBCJ3VrLxbPHiIxrLC15OQXFJvuK1ERYA7Lw8Fv2zZ/UvDGWWLbN4aBwmcRRcXNo nB3MUjFVXe/U5N5HbuhFG7tTnW61XJL5QnPrQ3xArphPSxEITgjm7kULZDPkwkP5 6e9PWAhjGDvHT2pCgZAAJfvrTzZqV5KiLebpXg3qcXzM8cCnHVDl3HeGRn2a1q2Z jhgvY1CVVOJvmQs= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:01 2026 by rpki-client