This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer (raw, json) Hash identifier: lhmBRwCF+MrJWyKAvmlZfLrslh8GUJoGY5S+HE/0kwc= Subject key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C5D28D55F9919F7F669280C0ED524 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15375 AS: 16107 AS: 16365 AS: 20990 IP: 62.129.64.0/18 IP: 193.41.132.0/22 IP: 193.108.156.0/22 IP: 193.108.192.0/24 IP: 194.50.225.0/24 IP: 195.42.236.0/22 IP: 212.149.0.0/18 IP: 2001:67c:2440::/48 IP: 2a00:d580::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5d:28:d5:5f:99:19:f7:f6:69:28:0c:0e:d5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:21:66:0c:9c:8b:e0:32:71:b9:61:3f:a2:02: a3:fe:8e:ae:c3:f5:79:0d:d9:21:38:df:53:2a:57: 88:a4:f6:c0:1b:05:92:8f:c3:44:97:19:1c:32:e5: 0f:18:c0:97:55:3d:3a:24:9a:a6:e8:50:42:55:cf: 7b:37:d0:25:b2:43:80:5e:82:bc:75:16:61:25:80: 98:b5:a3:2e:13:6b:be:20:f4:8f:4a:3b:07:e5:29: af:18:62:e5:b4:91:37:19:e3:46:4b:d2:64:6c:8d: f1:8b:ee:59:b2:cb:db:7e:72:e3:83:43:ca:7d:10: af:ae:d9:32:0d:bd:ce:7f:31:f4:27:79:47:5a:92: 9b:63:3c:7a:87:69:cd:7e:af:20:72:50:ae:6c:90: 42:bd:1e:14:df:52:ba:7a:7f:b1:7b:3c:23:34:62: 52:ab:7e:38:16:d3:1b:91:11:87:1b:3b:15:5b:d6: 26:60:e9:c8:44:ac:91:2c:c7:88:b3:05:3d:6b:40: 91:c4:f9:ca:d9:f8:b9:3b:bb:93:a9:f5:06:ed:89: 11:9d:20:ff:c7:db:c3:17:37:df:2a:e6:ba:fb:b5: 13:eb:0b:cd:b6:64:30:e0:85:63:12:5f:71:ad:0f: 26:e4:d1:27:06:a0:ca:79:3a:6a:9a:f0:77:84:ec: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.129.64.0/18 193.41.132.0/22 193.108.156.0/22 193.108.192.0/24 194.50.225.0/24 195.42.236.0/22 212.149.0.0/18 IPv6: 2001:67c:2440::/48 2a00:d580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15375 16107 16365 20990 Signature Algorithm: sha256WithRSAEncryption 14:2f:32:e7:97:d4:1a:a5:b7:4f:af:12:73:98:bf:23:0d:18: 6f:6d:08:b9:d7:77:de:5e:9b:84:b7:bb:4a:18:c9:af:6a:af: f3:c5:03:ab:76:0f:f3:d9:0a:38:27:51:7d:75:ac:fa:24:d4: 70:8b:6a:45:29:92:b2:75:ef:b1:d1:fe:77:cb:7c:27:68:7f: 85:58:5b:26:03:cd:6a:47:8f:9b:87:f2:d1:c1:14:c1:23:9f: cf:aa:43:58:82:8a:38:29:1e:4a:da:f2:a7:96:3d:c3:d0:f8: 24:21:74:4d:cc:60:da:31:16:80:41:26:a5:1b:95:ff:92:28: 44:1d:02:61:8b:f4:ec:5f:5e:d9:2d:45:31:6b:23:e5:c1:3e: 5f:ca:c0:ed:88:b6:7b:51:16:a0:9e:76:70:24:00:ff:97:91: 80:6d:c2:ba:97:49:b3:05:2d:c9:ac:63:3d:b4:27:bd:e2:43: 2f:40:1f:f7:19:f4:9f:ff:56:28:a4:94:79:68:3a:92:72:34: 81:9c:34:69:e8:39:73:0c:d1:fb:75:fd:91:fa:ca:70:7a:6f: 47:52:1c:9c:a7:c9:0f:a9:0f:96:ac:b1:a2:39:2e:5f:23:9d: 3f:1a:9a:74:cf:71:ce:5c:da:c1:e9:a1:7a:7e:e6:74:69:85: da:fd:13:76 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt9XF0o1V+ZGff2aSgMDtUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTNiYTE4ZDVjZWI4ZTc5NGM4MTM5Y2UwMmE3OTFiODUwMTgyNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyFmDJyL4DJxuWE/ogKj/o6uw/V5 DdkhON9TKleIpPbAGwWSj8NElxkcMuUPGMCXVT06JJqm6FBCVc97N9AlskOAXoK8 dRZhJYCYtaMuE2u+IPSPSjsH5SmvGGLltJE3GeNGS9JkbI3xi+5ZssvbfnLjg0PK fRCvrtkyDb3OfzH0J3lHWpKbYzx6h2nNfq8gclCubJBCvR4U31K6en+xezwjNGJS q344FtMbkRGHGzsVW9YmYOnIRKyRLMeIswU9a0CRxPnK2fi5O7uTqfUG7YkRnSD/ x9vDFzffKua6+7UT6wvNtmQw4IVjEl9xrQ8m5NEnBqDKeTpqmvB3hOwv0QIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFLU7oY1c6455TIE5zgKnkbhQGCXvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2UyNTEw ZC1lNTczLTQ1ZDMtOWQyMC03NTRiNjBjNWI1NjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvZTI1MTBk LWU1NzMtNDVkMy05ZDIwLTc1NGI2MGM1YjU2OC8xL3RUdWhqVnpyam5sTWdUbk9B cWVSdUZBWUplOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAwBAIAATAqAwQGPoFAAwQCwSmEAwQCwWycAwQAwWzAAwQAwjLh AwQCwyrsAwQG1JUAMBYEAgACMBADBwAgAQZ8JEADBQAqANWAMCUGCCsGAQUFBwEI AQH/BBYwFKASMBACAjwPAgI+6wICP+0CAlH+MA0GCSqGSIb3DQEBCwUAA4IBAQAU LzLnl9QapbdPrxJzmL8jDRhvbQi513feXpuEt7tKGMmvaq/zxQOrdg/z2Qo4J1F9 daz6JNRwi2pFKZKyde+x0f53y3wnaH+FWFsmA81qR4+bh/LRwRTBI5/PqkNYgoo4 KR5K2vKnlj3D0PgkIXRNzGDaMRaAQSalG5X/kihEHQJhi/TsX17ZLUUxayPlwT5f ysDtiLZ7URagnnZwJAD/l5GAbcK6l0mzBS3JrGM9tCe94kMvQB/3GfSf/1YopJR5 aDqScjSBnDRp6DlzDNH7df2R+spwem9HUhycp8kPqQ+WrLGiOS5fI50/Gpp0z3HO XNrB6aF6fuZ0aYXa/RN2 -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:12 2026 by rpki-client