This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer File: txUfGUo-UkyCxne44TIFgUPI6-4.cer (raw, json) Hash identifier: Jj2fMa07yKr56O681spJSQZ3gkrSuoUBZIDlhXSQqVo= Subject key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC922DBA95F8B3E8B1159A1CF6FE67C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21293 IP: 160.67.0.0 -- 160.68.255.255 IP: 185.97.188.0/22 IP: 2a00:f980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:22:db:a9:5f:8b:3e:8b:11:59:a1:cf:6f:e6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7151f194a3e524c82c677b8e132058143c8ebee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:7a:10:eb:65:2e:db:c3:0a:03:66:3e:6d: 2a:0a:09:ea:3c:0f:1f:1d:bd:3d:4c:50:48:1b:56: 4d:c7:de:07:89:b9:ee:f6:48:4c:f6:2f:d4:89:9c: 07:1b:4e:30:19:bd:d4:17:2b:94:82:ba:a6:4c:b2: 17:6d:03:c5:79:5d:ec:80:90:a5:c5:f6:e7:35:9a: 86:6e:1b:02:a2:d1:80:da:b9:85:6e:1e:04:ad:32: 46:21:26:71:a6:85:f1:5a:02:ed:61:6a:74:9f:97: a0:be:89:aa:21:1b:e2:4d:9f:55:76:e6:f2:49:39: f0:e6:01:f1:35:77:6d:75:ce:14:c9:d9:c9:60:86: 11:82:50:05:ef:84:a8:62:92:1c:2d:f3:92:f4:1b: 2c:e9:6d:d7:f9:11:1e:22:7e:a0:62:5e:ca:a7:8a: 18:b5:f7:37:16:7e:25:b5:c4:e6:4c:02:b6:26:08: 29:21:72:d0:5a:d2:ab:bb:a0:be:31:32:71:05:75: 0f:aa:23:7a:d0:ff:17:77:ef:b8:76:e9:4a:a7:1f: 93:64:fd:78:98:25:bb:ef:b9:40:03:5b:33:b6:10: 7b:6a:24:9c:f9:f1:9e:2b:92:70:d8:e8:fc:e7:63: e1:47:78:32:63:6c:b0:a3:9f:89:a5:62:e0:51:16: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.67.0.0-160.68.255.255 185.97.188.0/22 IPv6: 2a00:f980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21293 Signature Algorithm: sha256WithRSAEncryption a3:50:18:16:b6:ee:74:1c:e3:33:11:94:3d:85:d5:94:28:b4: ee:22:dd:c0:89:c3:71:b0:77:40:fb:ef:1d:c0:c3:65:d1:da: 9b:27:f0:21:ba:3d:53:36:5a:1c:c2:17:00:4d:90:0b:f9:bb: 1e:0c:07:d8:76:0b:f6:a5:86:b8:72:2d:2e:47:6d:f9:52:f4: d9:f9:3c:27:d3:d9:33:1c:dc:60:5f:15:71:70:aa:91:08:4f: 48:50:99:ef:17:54:dc:5e:05:fd:f2:1b:3e:8c:18:1a:8d:8b: c9:e2:73:63:5a:f7:a4:93:55:0a:bc:b6:5e:eb:b2:e2:ae:8a: 93:e2:5c:d9:b5:4a:ea:e2:23:91:2e:7f:d4:d8:1e:d4:f3:1a: 95:7b:32:bd:db:7d:99:8c:5b:39:38:77:0e:90:fe:d7:b3:09: 60:e8:46:f4:48:2b:16:c7:d5:7d:cf:e7:b8:1b:da:7b:a7:3a: ae:ac:1c:db:0b:e8:08:55:94:49:9c:a3:28:bf:b2:3d:ce:6b: ef:67:3f:32:36:1b:5c:4e:95:95:f0:05:f2:8a:50:14:24:6c: 12:89:02:1f:00:19:72:f1:d2:50:fc:e0:b3:64:af:18:93:13: 64:ba:42:e5:14:15:fc:67:4c:19:4a:0a:12:a9:33:62:04:28: dd:62:4c:b8 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt6ySLbqV+LPosRWaHPb+Z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzE1MWYxOTRhM2U1MjRjODJjNjc3YjhlMTMyMDU4MTQzYzhlYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnZ6EOtlLtvDCgNmPm0qCgnqPA8f Hb09TFBIG1ZNx94Hibnu9khM9i/UiZwHG04wGb3UFyuUgrqmTLIXbQPFeV3sgJCl xfbnNZqGbhsCotGA2rmFbh4ErTJGISZxpoXxWgLtYWp0n5egvomqIRviTZ9Vduby STnw5gHxNXdtdc4UydnJYIYRglAF74SoYpIcLfOS9Bss6W3X+REeIn6gYl7Kp4oY tfc3Fn4ltcTmTAK2JggpIXLQWtKru6C+MTJxBXUPqiN60P8Xd++4dulKpx+TZP14 mCW777lAA1szthB7aiSc+fGeK5Jw2Oj852PhR3gyY2ywo5+JpWLgURa2XQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFLcVHxlKPlJMgsZ3uOEyBYFDyOvuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzQ5YTMy ZC1kMGYyLTQ4MWEtOTc5MS1jOWE0OWY3MGUyM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvNDlhMzJk LWQwZjItNDgxYS05NzkxLWM5YTQ5ZjcwZTIzYi8xL3R4VWZHVW8tVWt5Q3huZTQ0 VElGZ1VQSTYtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASMAoDAwCgQwMDAKBEAwQCuWG8MA0EAgACMAcDBQMq APmAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlMtMA0GCSqGSIb3DQEBCwUAA4IB AQCjUBgWtu50HOMzEZQ9hdWUKLTuIt3AicNxsHdA++8dwMNl0dqbJ/Ahuj1TNloc whcATZAL+bseDAfYdgv2pYa4ci0uR235UvTZ+Twn09kzHNxgXxVxcKqRCE9IUJnv F1TcXgX98hs+jBgajYvJ4nNjWvekk1UKvLZe67LiroqT4lzZtUrq4iORLn/U2B7U 8xqVezK9232ZjFs5OHcOkP7Xswlg6Eb0SCsWx9V9z+e4G9p7pzqurBzbC+gIVZRJ nKMov7I9zmvvZz8yNhtcTpWV8AXyilAUJGwSiQIfABly8dJQ/OCzZK8YkxNkukLl FBX8Z0wZSgoSqTNiBCjdYky4 -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:34 2026 by rpki-client