This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer File: T-uUV-xRnoI3hncQvMgvow6uZ8A.cer (raw, json) Hash identifier: f07fDXVN7pf66mepOQeAq7Z9K1mfNxkdMnMacK5Udn8= Subject key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C565C3D735CD6E0306943C0DE9E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49188 IP: 185.163.244.0/22 IP: 2a10:9d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c5:65:c3:d7:35:cd:6e:03:06:94:3c:0d:e9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4feb9457ec519e8237867710bcc82fa30eae67c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:a2:2c:1a:66:b1:49:b9:73:ed:75:fd:e5: 83:95:86:64:50:3a:84:4d:eb:b7:21:6e:b5:97:e6: 3c:6c:d3:6d:1d:51:1d:f9:e6:31:97:03:66:b9:0c: d9:26:af:5f:35:e6:a7:15:d0:63:61:46:0f:13:ce: 66:5e:be:e8:17:23:98:f7:4e:8f:a9:74:7f:eb:e8: d1:10:d7:93:a9:69:91:4b:84:ad:23:94:73:6c:61: bb:98:18:75:36:79:f4:d1:88:aa:5f:2e:81:c4:4b: 6d:77:9c:07:4f:73:33:ea:c2:1b:d9:f8:17:8d:1e: ae:bb:a2:e1:4e:83:4a:a0:49:63:de:fc:b5:f3:60: f8:63:c3:de:69:c3:20:94:f9:86:db:fc:78:c1:4e: 3c:52:01:5a:9c:9b:c7:fd:13:bd:9a:e4:ea:e9:d1: 26:dd:93:76:af:0e:b2:3b:90:d8:6d:83:09:a0:71: ae:52:d2:ed:00:78:8f:1c:a6:4e:eb:41:33:98:a2: 61:6a:2f:aa:c4:fb:00:f3:68:59:f3:15:28:27:a4: cb:df:08:af:59:2d:9d:cb:16:f2:f2:41:fd:ac:df: 1e:eb:2c:68:c9:8f:af:84:94:9f:70:c9:05:e8:31: af:1d:6a:69:d2:23:eb:91:d3:5c:54:3f:4b:f5:77: 13:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.244.0/22 IPv6: 2a10:9d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49188 Signature Algorithm: sha256WithRSAEncryption 5c:9d:dd:d1:28:19:fa:ec:b3:29:89:bb:a3:ee:5a:08:26:97: e1:2b:7c:93:f8:8b:51:6d:99:00:78:24:ed:27:e9:b1:09:44: e2:1e:46:e0:e6:38:d3:37:b8:be:0f:fc:c0:04:93:19:4c:b4: 09:11:87:3a:3b:b7:85:21:e3:d4:4e:de:93:07:9e:fa:61:5b: c4:22:ba:bd:4a:b0:a3:c8:08:f0:96:0b:2e:09:5a:00:6f:a2: 3c:3a:5b:c0:5a:fa:06:fc:50:1b:26:8f:8b:1f:1d:9a:3e:78: 21:03:ea:08:37:fb:35:be:82:43:e6:fd:3f:78:57:09:aa:51: 6f:74:c6:88:a3:9c:e0:40:77:81:e2:ad:f1:0f:03:da:9d:f7: c5:fe:43:e1:30:76:74:b1:f9:bb:4b:23:8b:a4:04:60:46:5b: d4:c1:60:e8:2d:b6:4c:0f:41:6f:d7:39:64:ee:3e:6c:5a:a9: 38:24:67:1b:0f:1a:9c:9e:ae:1a:0c:c0:a3:20:dc:6b:40:55: 9e:08:37:3a:e2:b2:02:3a:9a:05:58:55:4a:a6:03:b1:d0:86: 62:e6:36:82:34:da:52:8e:49:82:ff:39:5e:9a:86:e3:81:37: ad:cb:37:8b:0b:f9:99:c5:91:c0:75:c7:4e:84:53:9d:aa:71: b0:b7:f7:ee -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NMVlw9c1zW4DBpQ8DeniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmViOTQ1N2VjNTE5ZTgyMzc4Njc3MTBiY2M4MmZhMzBlYWU2N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHyiLBpmsUm5c+11/eWDlYZkUDqE Teu3IW61l+Y8bNNtHVEd+eYxlwNmuQzZJq9fNeanFdBjYUYPE85mXr7oFyOY906P qXR/6+jRENeTqWmRS4StI5RzbGG7mBh1Nnn00YiqXy6BxEttd5wHT3Mz6sIb2fgX jR6uu6LhToNKoElj3vy182D4Y8PeacMglPmG2/x4wU48UgFanJvH/RO9muTq6dEm 3ZN2rw6yO5DYbYMJoHGuUtLtAHiPHKZO60EzmKJhai+qxPsA82hZ8xUoJ6TL3wiv WS2dyxby8kH9rN8e6yxoyY+vhJSfcMkF6DGvHWpp0iPrkdNcVD9L9XcTKwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFE/rlFfsUZ6CN4Z3ELzIL6MOrmfAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyL2I4ZjUw ZS00NzVmLTRiNDctODVjMC01ZjEyMzU1NWNmYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvYjhmNTBl LTQ3NWYtNGI0Ny04NWMwLTVmMTIzNTU1Y2ZiMS8xL1QtdVVWLXhSbm9JM2huY1F2 TWd2b3c2dVo4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaP0MA0EAgACMAcDBQMqEJ0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDAJDANBgkqhkiG9w0BAQsFAAOCAQEAXJ3d0SgZ+uyz KYm7o+5aCCaX4St8k/iLUW2ZAHgk7SfpsQlE4h5G4OY40ze4vg/8wASTGUy0CRGH Oju3hSHj1E7ekwee+mFbxCK6vUqwo8gI8JYLLglaAG+iPDpbwFr6BvxQGyaPix8d mj54IQPqCDf7Nb6CQ+b9P3hXCapRb3TGiKOc4EB3geKt8Q8D2p33xf5D4TB2dLH5 u0sji6QEYEZb1MFg6C22TA9Bb9c5ZO4+bFqpOCRnGw8anJ6uGgzAoyDca0BVngg3 OuKyAjqaBVhVSqYDsdCGYuY2gjTaUo5Jgv85XpqG44E3rcs3iwv5mcWRwHXHToRT napxsLf37g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:39 2026 by rpki-client