This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer File: txYnuSOf6jRXzYfLk3q0x5hsrAk.cer (raw, json) Hash identifier: Qbasm2tYr4boa/6IS+1qJJZfRUuiNiGxcz9ChMS3npY= Subject key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3CB6766BA7ED26EBD55176BFD4D29 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 171.25.216.0/24 IP: 2a13:a600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cb:67:66:ba:7e:d2:6e:bd:55:17:6b:fd:4d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b71627b9239fea3457cd87cb937ab4c7986cac09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:6e:f0:c3:ae:17:33:f6:e0:20:a1:36:ed: 47:06:5a:7f:b5:48:e0:5e:e4:b7:21:68:6f:8a:92: ba:3c:a9:f2:c2:fe:37:a3:be:bf:50:3e:26:15:3a: e0:5a:b0:64:fa:8c:52:38:32:ed:2d:ad:20:81:69: f7:78:32:29:90:fd:3a:94:34:9f:7c:03:1f:29:e1: d7:11:f7:ca:fa:cb:9b:d6:2c:c0:02:cc:39:84:79: 25:94:5e:1b:41:1b:22:45:dc:01:fa:5e:ab:6d:65: 0a:70:5d:63:f2:2e:9a:94:bf:cb:32:cf:c9:97:0f: fa:33:dc:ec:bf:69:90:27:45:90:e4:59:21:16:54: 5c:7a:e1:95:8e:fb:6e:09:93:2c:ee:f5:2b:d6:60: 6e:9b:4d:61:2d:57:2f:da:2d:56:3b:1d:8b:9c:0a: c2:45:da:f8:9f:0a:e2:db:c7:bf:85:56:6f:01:4f: fa:7f:3e:68:d1:20:cd:57:fe:b8:01:4b:a6:d6:8f: 4a:83:22:61:39:4a:aa:41:1e:b8:98:39:af:fd:a6: dc:2e:44:cf:a6:b8:66:13:f4:24:e7:8a:9b:c7:07: ca:ac:b5:55:af:41:58:54:2c:e6:df:d4:7d:74:81: 5a:6f:2a:db:ae:11:b6:9e:da:ef:a6:5a:b1:24:c1: a3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.25.216.0/24 IPv6: 2a13:a600::/29 Signature Algorithm: sha256WithRSAEncryption 6b:26:90:19:67:f2:31:ee:9a:25:62:64:fc:7c:31:55:3f:2b: e6:1d:ba:ac:b7:4b:b6:83:54:e1:13:ec:d3:a8:e6:57:6c:55: 2b:37:bf:a0:7e:91:63:ff:d8:a5:2a:6f:86:cb:76:28:3d:0c: 4f:86:33:6a:ec:d5:44:c7:f0:63:57:83:95:5a:71:19:9a:34: 47:51:b2:bd:cd:92:fd:7a:49:60:e0:92:b1:3f:d6:e0:1e:2a: 7a:78:af:f7:e9:20:26:c0:33:36:b4:fb:fb:64:4d:15:b3:cc: 96:56:3f:2f:3e:22:5e:21:4c:db:45:04:cd:1a:8b:36:e7:c6: d3:e4:8e:d1:ea:cf:2b:94:6a:7b:42:ef:5e:67:bc:d3:e3:e0: fb:e2:6b:2e:7f:a4:50:46:8c:e9:b0:ef:b0:71:a0:94:d3:96: 75:00:62:be:bd:f9:3a:5b:cd:e8:32:92:6d:a8:3c:6b:ba:99: d6:14:5c:0c:fd:07:89:c2:55:d9:22:dd:9a:c4:73:25:5b:e7: a9:20:82:b4:85:4d:69:bb:23:1d:e9:ce:54:5a:d1:67:8c:c6: 71:84:a8:3d:f0:c9:07:4d:6e:6b:a8:6b:99:90:3f:e8:2b:a7: 05:8f:f9:7e:f4:bd:3f:29:1a:75:09:ac:7a:9c:21:f3:e2:a9: 59:26:48:a3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7o8tnZrp+0m69VRdr/U0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzE2MjdiOTIzOWZlYTM0NTdjZDg3Y2I5MzdhYjRjNzk4NmNhYzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRpu8MOuFzP24CChNu1HBlp/tUjg XuS3IWhvipK6PKnywv43o76/UD4mFTrgWrBk+oxSODLtLa0ggWn3eDIpkP06lDSf fAMfKeHXEffK+sub1izAAsw5hHkllF4bQRsiRdwB+l6rbWUKcF1j8i6alL/LMs/J lw/6M9zsv2mQJ0WQ5FkhFlRceuGVjvtuCZMs7vUr1mBum01hLVcv2i1WOx2LnArC Rdr4nwri28e/hVZvAU/6fz5o0SDNV/64AUum1o9KgyJhOUqqQR64mDmv/abcLkTP prhmE/Qk54qbxwfKrLVVr0FYVCzm39R9dIFabyrbrhG2ntrvplqxJMGj6QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLcWJ7kjn+o0V82Hy5N6tMeYbKwJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzVlNDZj MS1mNDNiLTRlMTItYmI3ZC1hNWZlYjM5NzM1MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvNWU0NmMx LWY0M2ItNGUxMi1iYjdkLWE1ZmViMzk3MzUxMi8xL3R4WW51U09mNmpSWHpZZkxr M3EweDVoc3JBay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAqxnYMA0EAgACMAcDBQMqE6YAMA0GCSqGSIb3 DQEBCwUAA4IBAQBrJpAZZ/Ix7polYmT8fDFVPyvmHbqst0u2g1ThE+zTqOZXbFUr N7+gfpFj/9ilKm+Gy3YoPQxPhjNq7NVEx/BjV4OVWnEZmjRHUbK9zZL9eklg4JKx P9bgHip6eK/36SAmwDM2tPv7ZE0Vs8yWVj8vPiJeIUzbRQTNGos258bT5I7R6s8r lGp7Qu9eZ7zT4+D74msuf6RQRozpsO+wcaCU05Z1AGK+vfk6W83oMpJtqDxrupnW FFwM/QeJwlXZIt2axHMlW+epIIK0hU1puyMd6c5UWtFnjMZxhKg98MkHTW5rqGuZ kD/oK6cFj/l+9L0/KRp1Cax6nCHz4qlZJkij -----END CERTIFICATE-----Generated at Fri Jan 2 18:09:04 2026 by rpki-client