This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer (raw, json) Hash identifier: qMqXF3Y1jX2TIYJh8PFGh2C/yh3dEWKpDlxre0+GwPE= Subject key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AFDE19CF27D437D473C57E4A87C45 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206873 IP: 185.173.176.0/22 IP: 194.150.214.0/23 IP: 194.150.234.0/23 IP: 2a0b:6900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:fd:e1:9c:f2:7d:43:7d:47:3c:57:e4:a8:7c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:84:48:4c:03:70:bb:c5:07:52:52:6c:11: fc:55:0d:42:52:c6:d1:d5:bd:b5:2f:2d:b3:55:30: bd:65:e2:28:b5:82:08:1a:cb:4f:4f:77:51:6d:89: 61:08:e3:a5:c2:ec:28:ed:7e:5d:3c:82:27:ee:15: 9c:31:c2:93:ef:29:b6:5d:7a:4e:dd:51:df:f2:e4: c4:f2:1c:df:58:27:34:57:80:96:4b:4f:67:86:1b: e6:56:ae:ba:fd:be:65:d0:c8:03:4f:ba:e1:18:02: 31:6c:9d:8c:a6:ef:30:47:c1:5f:00:f9:54:fb:e3: aa:1b:2f:cf:90:5c:7a:29:fd:35:90:6e:94:bd:3c: 68:e9:54:d6:04:9e:cb:66:da:df:67:95:88:27:65: 06:13:2d:e9:f5:4c:73:4c:cc:1e:59:82:b8:66:2a: 4f:ec:fa:d2:e0:e3:2b:a3:34:46:f7:6b:5a:ab:ca: a0:0c:f0:27:94:84:95:42:57:e0:e4:e0:09:12:d7: d9:47:6d:66:7c:cd:31:a8:29:0b:e3:c6:29:16:1b: bf:a1:dc:63:54:d3:c1:b0:be:e9:65:5e:a1:50:c0: fb:16:1f:bf:51:29:7e:d7:24:f5:c6:31:20:c9:f1: e9:83:6e:3a:87:68:68:f1:ed:ae:1e:f6:63:af:ea: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.176.0/22 194.150.214.0/23 194.150.234.0/23 IPv6: 2a0b:6900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206873 Signature Algorithm: sha256WithRSAEncryption 57:6f:ab:1b:2b:90:77:f9:a5:8b:f1:e1:83:59:f1:dd:2f:17: 73:c9:b7:c7:e0:ee:24:8d:ba:69:0a:40:c2:9a:83:45:13:06: 4c:96:50:60:a6:58:77:2d:8a:73:5a:a7:d6:6e:87:8e:3d:75: ce:c4:c0:b3:65:9d:03:60:a9:de:a9:c3:01:78:13:cf:d1:88: 39:48:5c:9e:8c:71:c8:4e:6f:95:4c:75:5d:04:87:7d:90:3e: 49:06:a8:a9:d8:df:d9:b5:73:cb:4c:56:57:18:0b:61:68:b7: ec:a7:61:9e:17:37:6e:b3:dc:00:4a:56:7d:a8:84:54:c2:21: 5f:58:de:a9:98:fd:7e:90:e8:4a:0a:54:56:fd:3a:55:cc:8f: 69:44:88:44:4e:31:4d:b4:9c:d6:cb:35:ea:15:ea:82:15:67: d3:91:ba:6a:88:ce:be:3b:ce:ba:01:95:79:e8:7d:fc:18:bd: 5b:17:0b:2b:c0:28:0a:5f:7e:44:1c:c5:f4:3d:17:88:5c:d3: 8a:c6:af:3f:c6:9f:81:3c:d7:f7:4f:9d:34:6c:47:5e:a3:eb: d4:2d:10:a5:64:b2:a3:ab:97:34:bb:29:3f:9d:e5:90:8e:17: aa:68:c6:5c:15:0d:a9:fd:43:ac:2d:78:bb:68:37:1f:fb:c7: e4:1a:bf:06 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt6Wv3hnPJ9Q31HPFfkqHxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWVmNmFhZTZmYmE1YzYxYTYxNzM5YWZjYWI1NWE2MjI2NmU4OWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP6ESEwDcLvFB1JSbBH8VQ1CUsbR 1b21Ly2zVTC9ZeIotYIIGstPT3dRbYlhCOOlwuwo7X5dPIIn7hWcMcKT7ym2XXpO 3VHf8uTE8hzfWCc0V4CWS09nhhvmVq66/b5l0MgDT7rhGAIxbJ2Mpu8wR8FfAPlU ++OqGy/PkFx6Kf01kG6UvTxo6VTWBJ7LZtrfZ5WIJ2UGEy3p9UxzTMweWYK4ZipP 7PrS4OMrozRG92taq8qgDPAnlISVQlfg5OAJEtfZR21mfM0xqCkL48YpFhu/odxj VNPBsL7pZV6hUMD7Fh+/USl+1yT1xjEgyfHpg246h2ho8e2uHvZjr+p5yQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFE7vaq5vulxhphc5r8q1WmImbonuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2I4ZTVj NC0zOGViLTQ0NWYtYjAzNi1jMzc3OTBlNmQ0ODIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYjhlNWM0 LTM4ZWItNDQ1Zi1iMDM2LWMzNzc5MGU2ZDQ4Mi8xL1R1OXFybS02WEdHbUZ6bXZ5 clZhWWladWllNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCua2wAwQBwpbWAwQBwpbqMA0EAgACMAcDBQMq C2kAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMoGTANBgkqhkiG9w0BAQsFAAOC AQEAV2+rGyuQd/mli/Hhg1nx3S8Xc8m3x+DuJI26aQpAwpqDRRMGTJZQYKZYdy2K c1qn1m6Hjj11zsTAs2WdA2Cp3qnDAXgTz9GIOUhcnoxxyE5vlUx1XQSHfZA+SQao qdjf2bVzy0xWVxgLYWi37Kdhnhc3brPcAEpWfaiEVMIhX1jeqZj9fpDoSgpUVv06 VcyPaUSIRE4xTbSc1ss16hXqghVn05G6aojOvjvOugGVeeh9/Bi9WxcLK8AoCl9+ RBzF9D0XiFzTisavP8afgTzX90+dNGxHXqPr1C0QpWSyo6uXNLspP53lkI4XqmjG XBUNqf1DrC14u2g3H/vH5Bq/Bg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:24 2026 by rpki-client