This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer (raw, json) Hash identifier: jy8imL6N33cOIvRnyBSDArtCJV4bUQyJE4IzHFcdhnI= Subject key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC84F11DB011F1BB382E7FCF563774D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204054 IP: 91.216.223.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4f:11:db:01:1f:1b:b3:82:e7:fc:f5:63:77:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c9:4f:ab:9d:8f:2f:2e:c6:7d:aa:01:85:c9: e0:ad:aa:79:61:21:ec:df:0d:57:93:60:95:ea:c6: e6:e0:58:9b:4e:75:7c:5d:a3:60:86:55:ab:56:de: d9:bd:11:48:40:a9:64:bb:7f:a3:c2:c5:b2:7c:cd: f4:78:eb:55:fc:30:e9:d1:42:bc:65:91:58:ba:bd: 0c:26:ae:c0:0a:63:51:2d:ce:f4:45:95:2a:37:3c: ea:e9:70:08:ab:5a:5f:b9:a1:4b:46:c4:f1:2a:4a: ce:56:7d:64:b4:b9:3f:a5:7e:1c:c3:7d:d7:d3:62: bd:8b:95:a1:11:1a:59:27:17:bd:49:b2:ba:ea:31: 61:25:a7:e9:5f:b3:ea:e3:4e:6e:73:fa:ce:cf:81: c7:3c:20:49:d3:42:32:a4:1e:4e:b9:07:e3:e0:ac: ca:73:8a:a1:4f:89:1d:3a:21:9c:a7:84:77:d0:f1: d3:02:57:8d:ff:02:af:74:b2:f2:cb:9c:36:2e:61: a0:e2:f1:3b:31:dc:80:1f:22:95:4c:18:cb:eb:bd: 7d:06:3f:26:06:11:3e:c1:f5:7c:7a:78:83:2d:00: 67:6c:66:8f:6b:61:91:a6:cc:27:39:c3:89:9a:1e: ba:7d:83:b1:b7:a3:0b:87:d5:ca:81:d5:96:a2:ae: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.223.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204054 Signature Algorithm: sha256WithRSAEncryption 50:67:63:19:36:36:91:1e:12:91:6d:d2:8d:e2:bc:4a:6b:80: 5c:f8:db:e2:09:38:d0:6e:ea:56:4e:5a:cd:e0:24:64:d0:73: db:86:52:98:6b:82:dd:f2:97:24:c1:b4:6e:6f:a9:dc:34:36: 98:10:16:29:85:53:92:1c:04:47:c6:7f:41:e8:4a:34:24:cf: f5:a3:b3:65:44:f9:b9:6d:2d:3a:1c:fd:58:9b:4c:41:98:0c: 6d:e9:31:95:8b:c1:fa:e3:65:29:c4:70:17:6f:d0:9f:62:1f: ff:5d:17:1d:07:21:07:18:66:c1:55:85:54:03:60:2a:9e:1a: 56:ff:e5:d5:2d:f9:65:3a:8e:d6:d1:74:e3:d3:39:71:51:23: 67:72:30:9b:51:fd:85:55:ec:e8:df:46:e4:fe:d6:73:fa:c4: 92:10:87:3b:69:69:67:42:b6:56:b4:ed:9f:fd:37:be:dc:56: 64:0d:ed:39:9b:fb:67:ed:4a:88:b2:62:bd:43:91:bf:38:c2: ed:4c:11:53:b0:30:92:20:64:13:73:2d:cd:d1:b6:c2:2d:d5: c0:9f:47:6a:e3:bc:db:2b:39:0d:96:3b:f7:ee:8d:7f:14:bd: c0:85:0c:88:47:6d:26:a9:a0:ba:be:6e:1a:28:96:de:65:bc: fe:55:67:24 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6yE8R2wEfG7OC5/z1Y3dNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTQyYmMwZDhjYzI4ZjU1ODYxNWVkM2ZhZTUzY2FjZTRhNmVmMDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8lPq52PLy7GfaoBhcngrap5YSHs 3w1Xk2CV6sbm4FibTnV8XaNghlWrVt7ZvRFIQKlku3+jwsWyfM30eOtV/DDp0UK8 ZZFYur0MJq7ACmNRLc70RZUqNzzq6XAIq1pfuaFLRsTxKkrOVn1ktLk/pX4cw33X 02K9i5WhERpZJxe9SbK66jFhJafpX7Pq405uc/rOz4HHPCBJ00IypB5OuQfj4KzK c4qhT4kdOiGcp4R30PHTAleN/wKvdLLyy5w2LmGg4vE7MdyAHyKVTBjL6719Bj8m BhE+wfV8eniDLQBnbGaPa2GRpswnOcOJmh66fYOxt6MLh9XKgdWWoq6/eQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLVCvA2Mwo9VhhXtP65Tys5KbvCBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2IxZTBm Zi05Njk2LTRiNjEtYmQ1ZS03ZjZlNDkzMGYyNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYjFlMGZm LTk2OTYtNGI2MS1iZDVlLTdmNmU0OTMwZjI1YS8xL3RVSzhEWXpDajFXR0ZlMF9y bFBLemtwdThJRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9jfMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMdFjANBgkqhkiG9w0BAQsFAAOCAQEAUGdjGTY2kR4SkW3SjeK8SmuAXPjb4gk4 0G7qVk5azeAkZNBz24ZSmGuC3fKXJMG0bm+p3DQ2mBAWKYVTkhwER8Z/QehKNCTP 9aOzZUT5uW0tOhz9WJtMQZgMbekxlYvB+uNlKcRwF2/Qn2If/10XHQchBxhmwVWF VANgKp4aVv/l1S35ZTqO1tF049M5cVEjZ3Iwm1H9hVXs6N9G5P7Wc/rEkhCHO2lp Z0K2VrTtn/03vtxWZA3tOZv7Z+1KiLJivUORvzjC7UwRU7AwkiBkE3MtzdG2wi3V wJ9HauO82ys5DZY79+6NfxS9wIUMiEdtJqmgur5uGiiW3mW8/lVnJA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:54 2026 by rpki-client