This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer File: tu1iBVpRkcAuxREulRgaiawGDOs.cer (raw, json) Hash identifier: l6CGQ/pE0X8xVF7nHGeRncaafyuoZLwsZgqcFM0qPDg= Subject key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834ADE86B45DD5F19042E052A941B98 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.73.136.0/22 IP: 2a05:42c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ad:e8:6b:45:dd:5f:19:04:2e:05:2a:94:1b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:9f:de:d0:20:15:85:7c:9b:f8:be:d5:28: d8:f9:12:fa:0c:cb:7b:25:46:4d:a1:20:49:b2:7f: d7:bd:6e:4f:48:04:fe:bb:2f:7e:1e:4d:47:06:42: 91:65:f8:ba:14:f9:3d:d3:eb:ea:fe:2d:3e:6f:cc: 4b:24:a8:99:88:53:10:40:ff:ae:a4:7e:47:f7:dc: 87:2e:53:0f:f0:dd:50:15:c4:d4:79:61:cd:fd:43: 58:54:f6:66:0c:76:66:e5:db:bc:4e:d1:86:f5:fd: 8b:32:df:a6:1b:d8:b1:93:f4:43:ee:41:e0:4b:fd: d8:53:67:7c:25:3c:ac:55:a5:e0:15:bc:2a:e4:cf: dd:02:2e:24:66:63:c4:35:66:88:d9:43:75:bd:25: b8:d7:71:7f:da:9b:a3:b9:ef:9f:24:29:be:39:45: f9:46:f9:c6:64:a8:a6:fc:64:95:47:e4:ca:43:9d: 38:53:99:f9:0a:4e:78:df:cf:a9:43:6e:e4:de:40: 03:a2:b9:e4:c7:e8:eb:11:ea:c8:c6:22:dc:bd:bf: a8:e7:3c:7d:ef:17:c5:1a:ef:d4:78:35:3f:9c:a3: d5:f7:44:bd:8d:83:9d:72:22:41:bb:26:cf:4d:c2: 37:d6:b4:69:35:cf:e5:42:e4:02:72:3a:89:a0:ee: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.136.0/22 IPv6: 2a05:42c0::/29 Signature Algorithm: sha256WithRSAEncryption b0:e5:59:25:d3:19:4a:a0:8e:fe:03:52:1f:18:f0:7c:7b:7a: c2:c2:5b:1a:80:07:02:3f:f7:78:cc:56:2f:af:d8:58:86:78: bd:c8:3f:92:96:fe:f4:ce:54:e2:98:30:db:a4:95:80:fd:96: 72:a4:f6:2e:28:4a:6b:10:6f:a8:1a:69:1d:1f:48:9c:96:c4: 4f:53:14:4a:9a:15:d4:70:fc:d2:6e:17:8c:23:90:ee:29:5c: 11:0e:34:c1:2c:cb:18:91:97:dd:1d:88:86:9a:7d:b7:a9:7f: 1a:78:ae:0d:4c:bb:23:31:b8:eb:5d:6d:81:81:ae:09:c9:29: 5b:44:3f:9d:b7:72:cf:9d:41:0f:8f:25:39:82:3a:92:0e:04: e6:17:05:bf:e0:4b:14:bb:15:1c:c2:bd:68:7c:51:2e:09:b8: b4:80:9a:ed:b0:dc:cd:03:8e:e2:dd:ba:f8:9c:f2:20:a0:49: a7:75:ac:ec:3f:5d:24:79:ac:72:92:84:1f:fe:18:20:7d:72: 54:44:2a:36:f5:eb:f8:6e:aa:06:0f:f3:61:08:87:3b:6c:e3: 0d:f2:1f:e1:85:53:a8:65:16:64:80:7d:0a:87:9f:df:92:ec: 37:65:f1:73:cc:80:e2:9a:65:62:42:9c:2e:c0:f5:62:a6:ce: 9b:b0:c1:65 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4NK3oa0XdXxkELgUqlBuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmVkNjIwNTVhNTE5MWMwMmVjNTExMmU5NTE4MWE4OWFjMDYwY2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A+f3tAgFYV8m/i+1SjY+RL6DMt7 JUZNoSBJsn/XvW5PSAT+uy9+Hk1HBkKRZfi6FPk90+vq/i0+b8xLJKiZiFMQQP+u pH5H99yHLlMP8N1QFcTUeWHN/UNYVPZmDHZm5du8TtGG9f2LMt+mG9ixk/RD7kHg S/3YU2d8JTysVaXgFbwq5M/dAi4kZmPENWaI2UN1vSW413F/2pujue+fJCm+OUX5 RvnGZKim/GSVR+TKQ504U5n5Ck5438+pQ27k3kADornkx+jrEerIxiLcvb+o5zx9 7xfFGu/UeDU/nKPV90S9jYOdciJBuybPTcI31rRpNc/lQuQCcjqJoO4v0wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLbtYgVaUZHALsURLpUYGomsBgzrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2RjMTNj MS1kZTU2LTQ0OWYtOWMyOS1jODEyNjZiN2M0OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvZGMxM2Mx LWRlNTYtNDQ5Zi05YzI5LWM4MTI2NmI3YzQ5ZS8xL3R1MWlCVnBSa2NBdXhSRXVs UmdhaWF3R0RPcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUmIMA0EAgACMAcDBQMqBULAMA0GCSqGSIb3 DQEBCwUAA4IBAQCw5Vkl0xlKoI7+A1IfGPB8e3rCwlsagAcCP/d4zFYvr9hYhni9 yD+Slv70zlTimDDbpJWA/ZZypPYuKEprEG+oGmkdH0iclsRPUxRKmhXUcPzSbheM I5DuKVwRDjTBLMsYkZfdHYiGmn23qX8aeK4NTLsjMbjrXW2Bga4JySlbRD+dt3LP nUEPjyU5gjqSDgTmFwW/4EsUuxUcwr1ofFEuCbi0gJrtsNzNA47i3br4nPIgoEmn dazsP10keaxykoQf/hggfXJURCo29ev4bqoGD/NhCIc7bOMN8h/hhVOoZRZkgH0K h5/fkuw3ZfFzzIDimmViQpwuwPVips6bsMFl -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:48 2026 by rpki-client