This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer File: tUMb1z4KfwN965fYLRqV_NZxBRw.cer (raw, json) Hash identifier: 5axl4zJpXi6GbsdLh514C72FE95dVeOKG/FblnGdOHA= Subject key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF8C4C9D6661858EE13BC81AA2B8E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208464 IP: 212.46.52.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f8:c4:c9:d6:66:18:58:ee:13:bc:81:aa:2b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:c7:ba:7d:7b:85:52:b1:d4:0d:a1:49:12: db:3e:5d:7f:72:2f:96:64:f1:dd:96:e9:4e:47:19: 76:50:fb:64:db:f8:44:aa:c3:d4:ec:87:f0:96:1a: 79:09:9b:98:08:c0:c3:d6:bc:89:81:f2:92:ce:61: 7f:fa:70:b2:cc:0d:36:1c:cf:a8:cb:fe:2c:0f:6e: 20:3f:9b:36:90:02:e6:ff:27:a8:d7:49:ce:a2:f0: 42:27:a1:06:92:0f:d4:e9:ff:d1:72:3e:8d:a2:87: 9f:c3:cf:1b:ee:46:c1:2e:4b:68:72:29:88:2d:95: 32:af:82:36:c5:13:d0:ad:3e:23:44:c6:22:50:57: 71:c1:24:31:03:66:00:1e:89:c2:24:6c:41:04:30: 0a:49:4a:cd:7c:8e:73:ee:60:aa:90:d0:f7:5c:cd: bc:59:46:40:3e:58:8a:e1:11:d6:f3:ff:af:21:d1: 83:e2:8a:eb:cd:e8:17:13:98:4f:ee:76:97:ee:35: b6:fb:5c:a8:4e:55:29:d5:eb:5f:82:dd:f7:b4:d4: c1:47:3c:83:78:6b:49:7a:78:ab:4d:db:89:b1:d1: 66:8b:05:f1:b1:44:15:17:03:47:3d:91:c3:25:6c: 8f:89:5c:8c:cc:ca:ea:44:f0:cf:3f:84:5a:eb:8f: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.52.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208464 Signature Algorithm: sha256WithRSAEncryption 68:45:fc:5a:a0:3c:fc:dc:b8:3f:c3:38:f6:bf:a6:b8:78:97: 39:a7:88:a5:0e:c6:e1:fd:d3:c2:48:00:0d:52:75:38:f4:76: 2b:45:3e:de:59:58:7a:7e:5a:06:a0:83:b0:b6:c8:86:16:0b: 8f:8b:05:23:cc:36:7e:28:d8:41:89:82:2c:3f:b8:ec:84:b7: d9:9b:33:4d:3a:a2:2f:3a:eb:e0:3a:5e:9e:89:50:2c:65:b9: 18:1f:b7:26:7b:76:d7:5a:1a:57:dc:04:bf:59:48:ad:74:83: 8c:05:4d:69:1d:d7:2c:f4:60:2f:f4:e9:4b:e5:22:cf:33:34: 2a:2e:85:9c:41:3f:8c:a3:d5:87:af:bf:4f:af:c9:e1:02:17: e3:59:6d:47:86:bd:cb:11:31:96:09:64:96:4f:d4:fc:cb:95: 85:b8:d4:fa:0d:bc:39:cf:97:da:89:cd:c4:41:33:97:ad:10: 01:37:37:0c:d2:a6:d5:52:b5:7b:ce:ca:95:eb:1e:fb:08:0a: 01:c8:64:5a:56:4e:2e:c9:07:46:72:55:a4:d2:49:4d:40:1a: e0:dc:07:7e:8d:8c:1f:5a:6d:62:98:b7:2a:af:13:33:93:5b: b2:bf:dc:b5:d5:31:4e:50:8f:92:0d:a2:64:b2:74:84:b5:4a: 4e:42:5e:66 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fvjEydZmGFjuE7yBqiuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTQzMWJkNzNlMGE3ZjAzN2RlYjk3ZDgyZDFhOTVmY2Q2NzEwNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTzHun17hVKx1A2hSRLbPl1/ci+W ZPHdlulORxl2UPtk2/hEqsPU7Ifwlhp5CZuYCMDD1ryJgfKSzmF/+nCyzA02HM+o y/4sD24gP5s2kALm/yeo10nOovBCJ6EGkg/U6f/Rcj6Nooefw88b7kbBLktocimI LZUyr4I2xRPQrT4jRMYiUFdxwSQxA2YAHonCJGxBBDAKSUrNfI5z7mCqkND3XM28 WUZAPliK4RHW8/+vIdGD4orrzegXE5hP7naX7jW2+1yoTlUp1etfgt33tNTBRzyD eGtJenirTduJsdFmiwXxsUQVFwNHPZHDJWyPiVyMzMrqRPDPP4Ra6489SQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLVDG9c+Cn8DfeuX2C0alfzWcQUcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2ExMjYy OS04YmRmLTRjZGQtODY3Mi0xZmQ5ZjJjOTg5NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvYTEyNjI5 LThiZGYtNGNkZC04NjcyLTFmZDlmMmM5ODk1Ni8xL3RVTWIxejRLZndOOTY1ZllM UnFWX05aeEJSdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA1C40MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMuUDANBgkqhkiG9w0BAQsFAAOCAQEAaEX8WqA8/Ny4P8M49r+muHiXOaeIpQ7G 4f3TwkgADVJ1OPR2K0U+3llYen5aBqCDsLbIhhYLj4sFI8w2fijYQYmCLD+47IS3 2ZszTTqiLzrr4DpenolQLGW5GB+3Jnt211oaV9wEv1lIrXSDjAVNaR3XLPRgL/Tp S+UizzM0Ki6FnEE/jKPVh6+/T6/J4QIX41ltR4a9yxExlglklk/U/MuVhbjU+g28 Oc+X2onNxEEzl60QATc3DNKm1VK1e87Klese+wgKAchkWlZOLskHRnJVpNJJTUAa 4NwHfo2MH1ptYpi3Kq8TM5Nbsr/ctdUxTlCPkg2iZLJ0hLVKTkJeZg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:05 2026 by rpki-client