This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer File: tungBTS_H0IC0C5WhBB_A66kYNA.cer (raw, json) Hash identifier: eZxpaGw4cY9aeIZLKGdFU9RSL1tak+q3ILHc7Gm4bjw= Subject key identifier: B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82129E9880F5EE4365B2A5E11C14E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25471 IP: 185.104.252.0/22 IP: 2a0a:500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:12:9e:98:80:f5:ee:43:65:b2:a5:e1:1c:14:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6e9e00534bf1f4202d02e5684107f03aea460d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:50:9a:9a:e4:94:07:83:60:21:5d:17:26: d7:db:10:7f:c0:69:4c:85:23:f0:39:9d:0a:da:90: 9c:b4:5d:38:03:49:97:48:e4:4d:f9:76:52:69:0a: d9:8b:5d:52:60:88:dd:f6:b1:24:a3:d2:9e:5b:6d: f5:bd:cd:66:58:b8:96:c3:6d:5c:21:c2:0c:3d:4e: 08:a1:a0:26:79:37:24:1d:07:6d:f6:ea:7a:c6:29: a3:76:03:44:1c:72:70:49:0c:e4:ad:0f:9a:82:44: 8d:19:99:86:34:6d:9f:75:af:66:84:9b:b7:11:ba: 8b:7f:fa:6d:f3:03:cd:ed:ac:7d:32:ed:72:a3:bc: 03:94:27:47:c4:2d:2d:e3:cf:fb:58:cd:fa:0e:2e: cf:7b:8d:f9:8c:5a:ef:12:3c:e8:d2:d3:c5:b0:c9: 73:0f:9b:75:b3:36:2e:8d:02:99:d2:98:51:55:03: 5c:54:50:dc:30:38:a1:1f:68:6b:8a:76:58:0f:3c: 9b:da:23:8c:86:59:a4:1b:63:5f:38:55:86:55:d5: 4d:54:c0:58:01:d7:ea:4f:6d:75:88:31:78:8b:84: eb:2b:e5:f9:71:23:15:57:10:9e:72:fe:96:6f:94: 84:13:10:49:3d:e9:ad:7d:be:55:25:bf:cd:1c:cb: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.252.0/22 IPv6: 2a0a:500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25471 Signature Algorithm: sha256WithRSAEncryption 42:05:d4:44:1c:25:8d:f3:5a:9a:b2:ac:a6:a5:29:0e:bf:ad: e9:f5:87:fd:5d:2d:44:f0:04:51:97:67:fa:d7:40:09:61:2a: 2f:38:08:2b:14:cb:9f:e7:a3:3b:ec:14:7f:b2:c4:1c:30:c9: 1d:72:73:81:3b:e6:a5:83:74:68:f9:d9:c4:0b:70:33:5b:8b: 6c:ab:18:c8:89:c9:c0:13:06:0b:b6:c5:7b:95:79:87:d1:94: f4:9e:c7:3c:3b:f8:63:d7:01:a2:c8:a6:a7:eb:61:18:dc:59: 8f:6e:23:52:56:1d:a6:ce:80:28:a0:65:e1:c2:38:b8:ca:62: 31:0e:3e:cf:91:f8:06:27:d2:95:71:6c:e8:03:64:bf:7b:39: cb:38:1a:c5:2e:40:6f:5b:4e:38:07:70:9c:a9:86:80:54:40: ae:ec:b2:d8:e3:45:71:2b:f8:5e:70:d2:3b:a5:18:dd:1d:a2: 73:6f:33:3a:c6:96:7b:a6:8b:b5:0d:63:0c:6e:df:49:91:92: 8b:e0:ed:f0:ae:02:88:a0:bf:33:d1:5a:85:f5:50:af:3c:3d: 9f:07:60:9f:39:a3:b0:20:90:ca:c6:1e:b2:45:98:33:5c:4b: 84:1d:f2:91:bb:ba:01:e0:fb:36:bf:e5:e2:aa:0b:94:75:f3: 24:7b:74:b3 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt/ghKemID17kNlsqXhHBTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmU5ZTAwNTM0YmYxZjQyMDJkMDJlNTY4NDEwN2YwM2FlYTQ2MGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CRQmprklAeDYCFdFybX2xB/wGlM hSPwOZ0K2pCctF04A0mXSORN+XZSaQrZi11SYIjd9rEko9KeW231vc1mWLiWw21c IcIMPU4IoaAmeTckHQdt9up6ximjdgNEHHJwSQzkrQ+agkSNGZmGNG2fda9mhJu3 EbqLf/pt8wPN7ax9Mu1yo7wDlCdHxC0t48/7WM36Di7Pe435jFrvEjzo0tPFsMlz D5t1szYujQKZ0phRVQNcVFDcMDihH2hrinZYDzyb2iOMhlmkG2NfOFWGVdVNVMBY AdfqT211iDF4i4TrK+X5cSMVVxCecv6Wb5SEExBJPemtfb5VJb/NHMvI5wIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFLbp4AU0vx9CAtAuVoQQfwOupGDQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzBlYWU0 Yi01NDNmLTRkNDItYTcxMS0zNjBkYWEzMjQ5MjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvMGVhZTRi LTU0M2YtNGQ0Mi1hNzExLTM2MGRhYTMyNDkyMy8xL3R1bmdCVFNfSDBJQzBDNVdo QkJfQTY2a1lOQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWj8MA0EAgACMAcDBQMqCgUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmN/MA0GCSqGSIb3DQEBCwUAA4IBAQBCBdREHCWN81qa sqympSkOv63p9Yf9XS1E8ARRl2f610AJYSovOAgrFMuf56M77BR/ssQcMMkdcnOB O+alg3Ro+dnEC3AzW4tsqxjIicnAEwYLtsV7lXmH0ZT0nsc8O/hj1wGiyKan62EY 3FmPbiNSVh2mzoAooGXhwji4ymIxDj7PkfgGJ9KVcWzoA2S/eznLOBrFLkBvW044 B3CcqYaAVECu7LLY40VxK/hecNI7pRjdHaJzbzM6xpZ7pou1DWMMbt9JkZKL4O3w rgKIoL8z0VqF9VCvPD2fB2CfOaOwIJDKxh6yRZgzXEuEHfKRu7oB4Ps2v+XiqguU dfMke3Sz -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:23 2026 by rpki-client