This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer (raw, json) Hash identifier: N6HrRT2KYZpXyb+n0xj+HsuggqiYH+oR9hGgs+QFAzY= Subject key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA68B73A15E7E5076B1C2328C3F92CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49384 IP: 193.169.142.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8b:73:a1:5e:7e:50:76:b1:c2:32:8c:3f:92:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4eec68f7514db22173650088294b0143b377fc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:37:48:b2:f8:b8:34:38:f5:a8:27:f5:af: c6:e8:ca:bc:04:9b:3a:5f:ef:e4:7c:c2:26:54:04: ba:ab:a5:e5:41:10:93:ef:3c:8c:76:4c:35:d3:db: 80:e8:4b:84:59:a2:4d:64:a2:4f:de:49:7f:8e:c0: c8:bd:4d:30:19:31:00:19:25:be:aa:ed:a0:cd:88: 04:b9:91:01:77:74:e4:1e:9a:1a:b6:28:f3:5b:03: 84:e6:42:32:02:84:68:1e:6f:f2:0d:68:e4:4b:0c: 99:fd:79:87:8b:6f:f4:99:4e:af:77:51:c1:6c:b4: af:3f:f4:f2:6c:92:91:1d:75:ed:7c:2e:61:4c:21: ea:1c:5a:1c:13:bc:9f:b6:50:48:a3:16:c5:52:2d: 06:5c:bf:a0:e8:6c:ff:00:3c:6c:d8:a1:5c:34:6b: e5:ef:18:f4:38:47:2e:19:e6:c6:88:ef:5a:b8:25: 9b:fe:b2:4b:92:70:c9:aa:55:dc:5d:d8:8e:10:00: 8e:f1:72:23:97:08:f9:e5:97:18:67:c5:ac:f3:5e: 58:fe:b0:25:4a:4c:c1:ba:0d:8d:7d:83:12:f6:c7: d5:3a:bf:68:bf:71:55:7a:29:95:d1:8f:f8:c4:1e: 2a:58:9c:e8:5b:3b:fc:fb:82:7b:dd:ac:2c:4a:06: 16:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.142.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49384 Signature Algorithm: sha256WithRSAEncryption 59:b8:30:e7:0f:ab:30:96:bc:b0:5c:f3:34:99:2b:d4:b7:6c: 04:95:51:ca:f2:68:70:6d:37:e9:d2:df:4d:fb:f7:76:d3:cf: 60:78:ce:23:c2:19:4f:d1:ac:65:21:20:69:51:4a:2e:42:e7: a9:eb:d4:cc:20:c6:94:57:7f:c5:fa:1a:a3:b1:76:6a:d8:cd: 79:96:6d:a6:ee:4b:d7:61:51:41:44:06:cb:53:b1:1c:cc:ab: cf:22:8c:1f:00:d6:72:22:05:d3:e5:f0:5b:ef:03:c7:3f:c1: bb:7c:27:1a:29:6d:37:75:73:79:4c:e2:81:78:77:f7:d8:da: 5a:5c:4e:50:da:72:8d:f6:a8:ce:d8:23:fd:27:4b:92:eb:18: 60:15:97:02:c6:71:4a:cf:4e:82:cb:41:94:cb:eb:54:00:b0: 1e:5a:36:ac:3c:7e:34:21:d9:5a:7d:49:23:46:e1:a5:e4:5b: 6e:d9:55:a5:5d:12:a0:da:20:25:90:00:be:53:e9:26:fb:69: 52:a5:cd:a8:64:ec:67:4a:76:60:c3:23:92:3a:18:99:02:8f: 16:66:3f:cf:9d:9b:2f:ab:fc:3c:d9:68:43:7c:4a:d6:63:03: 88:04:77:f3:58:9a:8d:9e:9e:92:9d:7c:69:42:f3:38:b0:75: 13:9d:42:9a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+potzoV5+UHaxwjKMP5LOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWVjNjhmNzUxNGRiMjIxNzM2NTAwODgyOTRiMDE0M2IzNzdmYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFk3SLL4uDQ49agn9a/G6Mq8BJs6 X+/kfMImVAS6q6XlQRCT7zyMdkw109uA6EuEWaJNZKJP3kl/jsDIvU0wGTEAGSW+ qu2gzYgEuZEBd3TkHpoatijzWwOE5kIyAoRoHm/yDWjkSwyZ/XmHi2/0mU6vd1HB bLSvP/TybJKRHXXtfC5hTCHqHFocE7yftlBIoxbFUi0GXL+g6Gz/ADxs2KFcNGvl 7xj0OEcuGebGiO9auCWb/rJLknDJqlXcXdiOEACO8XIjlwj55ZcYZ8Ws815Y/rAl SkzBug2NfYMS9sfVOr9ov3FVeimV0Y/4xB4qWJzoWzv8+4J73awsSgYW6wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE7saPdRTbIhc2UAiClLAUOzd/wjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzUzMjA2 NS02MTUxLTRjZTAtYWM2Yi01ZDM0Yzg1NzViZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNTMyMDY1 LTYxNTEtNGNlMC1hYzZiLTVkMzRjODU3NWJlYS8xL1R1eG85MUZOc2lGelpRQ0lL VXNCUTdOM19DTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwamOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDA6DANBgkqhkiG9w0BAQsFAAOCAQEAWbgw5w+rMJa8sFzzNJkr1LdsBJVRyvJo cG036dLfTfv3dtPPYHjOI8IZT9GsZSEgaVFKLkLnqevUzCDGlFd/xfoao7F2atjN eZZtpu5L12FRQUQGy1OxHMyrzyKMHwDWciIF0+XwW+8Dxz/Bu3wnGiltN3VzeUzi gXh399jaWlxOUNpyjfaoztgj/SdLkusYYBWXAsZxSs9OgstBlMvrVACwHlo2rDx+ NCHZWn1JI0bhpeRbbtlVpV0SoNogJZAAvlPpJvtpUqXNqGTsZ0p2YMMjkjoYmQKP FmY/z52bL6v8PNloQ3xK1mMDiAR381iajZ6ekp18aULzOLB1E51Cmg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:52 2026 by rpki-client