This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer File: TuQFf56gFAzvfOR4k2nFzwH3xo4.cer (raw, json) Hash identifier: 0grM38CX+pmzk70fKD3YctUFDAzRqgaePZrk4WrG72U= Subject key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1720C7E2F00A4E2E04B911886604 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.221.84.0/22 IP: 2a09:f200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:17:20:c7:e2:f0:0a:4e:2e:04:b9:11:88:66:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:17:2e:87:93:83:54:b2:3a:99:7a:05:50: 74:3b:03:88:70:1b:15:06:b5:37:eb:2d:c3:74:f1: 35:4a:af:2b:44:5a:12:b7:1a:48:7a:5b:12:ca:37: c2:5d:60:d7:04:53:a5:c0:54:82:8b:cf:72:7d:b7: 73:e3:5a:a3:5b:8e:31:30:31:da:ea:b9:c5:56:ea: 04:ec:af:5c:91:d1:d7:7a:81:cb:af:a1:11:0f:2b: 9e:45:21:42:f5:a1:18:65:68:0a:84:b3:57:d9:f4: 54:ca:ac:b9:8c:fa:eb:1b:dd:1b:6b:61:67:b3:f8: 9c:e5:07:e1:0c:50:32:1c:45:79:61:3d:cf:17:04: aa:5b:3d:a7:92:52:92:ca:c7:c1:1f:48:3b:2f:ed: a3:ee:75:6c:a9:56:48:dd:f6:83:c4:85:8f:7e:09: 47:03:72:3d:11:26:75:bc:a5:37:02:07:a4:29:1a: 42:7a:78:29:40:53:28:e0:1b:29:0e:c7:1a:b2:ce: 99:ce:cf:69:cb:cf:2b:17:55:65:1f:74:78:75:c8: 31:f3:5c:91:46:e2:85:47:3e:b4:77:85:a7:01:93: 46:a0:31:66:0d:23:c6:90:6a:db:0b:f1:9e:c1:23: dd:eb:9f:b5:3e:a9:28:eb:3d:0a:c9:e8:3c:f7:8c: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.84.0/22 IPv6: 2a09:f200::/29 Signature Algorithm: sha256WithRSAEncryption 69:a2:14:30:f7:ce:9e:86:35:32:19:ff:46:58:ab:05:fc:18: b5:b6:be:3d:55:df:9a:41:0c:aa:4b:09:4e:cc:ac:dd:55:1a: ee:68:02:c8:60:12:43:26:41:e0:91:fa:2b:db:03:b0:d5:8b: 1d:17:6e:2e:0f:ee:e0:6d:93:e6:49:af:83:1c:63:6e:a4:0c: 97:e6:2e:cc:db:7e:c1:9c:a8:b7:f0:59:6b:b7:e9:06:ee:47: 6c:a3:19:9e:41:b7:78:6c:88:f4:c2:c4:49:f5:21:e6:fa:a4: 5e:4b:11:8b:ee:39:6a:1f:d8:6b:29:6a:a0:f7:85:18:43:d7: 85:1a:4f:29:53:6d:4e:fb:d3:2c:70:dc:cb:ec:ce:3b:b3:04: ae:6a:6f:df:72:58:6c:1d:d7:f5:80:d7:77:33:83:24:d0:bb: 6a:97:45:ac:c1:1d:78:9e:23:7f:8f:da:12:f1:e1:41:5f:7a: 32:a8:8f:34:df:36:2f:3d:4c:08:9c:b1:ee:88:c2:7d:56:fc: cd:3b:5c:03:25:f5:76:dd:46:35:db:80:db:80:81:d2:0d:bd: dd:10:5b:65:5b:a5:dd:43:ef:2c:c3:03:0f:7b:07:da:f1:8f: 98:55:35:95:c0:b3:2b:e4:e9:66:73:ab:9f:da:86:29:14:72: 83:58:61:c1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6Wxcgx+LwCk4uBLkRiGYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWU0MDU3ZjllYTAxNDBjZWY3Y2U0Nzg5MzY5YzVjZjAxZjdjNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXsXLoeTg1SyOpl6BVB0OwOIcBsV BrU36y3DdPE1Sq8rRFoStxpIelsSyjfCXWDXBFOlwFSCi89yfbdz41qjW44xMDHa 6rnFVuoE7K9ckdHXeoHLr6ERDyueRSFC9aEYZWgKhLNX2fRUyqy5jPrrG90ba2Fn s/ic5QfhDFAyHEV5YT3PFwSqWz2nklKSysfBH0g7L+2j7nVsqVZI3faDxIWPfglH A3I9ESZ1vKU3AgekKRpCengpQFMo4BspDscass6Zzs9py88rF1VlH3R4dcgx81yR RuKFRz60d4WnAZNGoDFmDSPGkGrbC/GewSPd65+1Pqko6z0Kyeg894xr5wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFE7kBX+eoBQM73zkeJNpxc8B98aOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmL2NmMmVi Zi0yYTA5LTQzZDItYTIyNS1hMTY1MzU5YTYyMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvY2YyZWJm LTJhMDktNDNkMi1hMjI1LWExNjUzNTlhNjIxMS8xL1R1UUZmNTZnRkF6dmZPUjRr Mm5GendIM3hvNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCJd1UMA0EAgACMAcDBQMqCfIAMA0GCSqGSIb3 DQEBCwUAA4IBAQBpohQw986ehjUyGf9GWKsF/Bi1tr49Vd+aQQyqSwlOzKzdVRru aALIYBJDJkHgkfor2wOw1YsdF24uD+7gbZPmSa+DHGNupAyX5i7M237BnKi38Flr t+kG7kdsoxmeQbd4bIj0wsRJ9SHm+qReSxGL7jlqH9hrKWqg94UYQ9eFGk8pU21O +9MscNzL7M47swSuam/fclhsHdf1gNd3M4Mk0Ltql0WswR14niN/j9oS8eFBX3oy qI803zYvPUwInLHuiMJ9VvzNO1wDJfV23UY124DbgIHSDb3dEFtlW6XdQ+8swwMP ewfa8Y+YVTWVwLMr5Olmc6uf2oYpFHKDWGHB -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:09 2026 by rpki-client