This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer File: TxUpALDTI9NtlFEKsLAck_RRfIk.cer (raw, json) Hash identifier: gNsckX4klyxAkGn8XxhZcXZa9T5pKDO/CqTES223RVg= Subject key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B6CA6EA27AB116F7241DF6AE453A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203736 IP: 185.102.32.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6c:a6:ea:27:ab:11:6f:72:41:df:6a:e4:53:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:46:0f:fa:29:b2:1d:8e:44:1e:fa:9c:2d:1b: 2d:2f:b3:a4:64:e9:39:70:84:0f:57:8d:9d:c9:c7: 5f:0c:ef:fb:1d:fe:e1:6d:5a:c5:8f:40:2d:b6:e5: 17:94:50:a4:ed:e3:7a:98:e3:67:e0:60:04:07:02: 2a:9e:ad:d2:14:6c:70:fb:02:df:3d:b2:11:79:0f: fe:96:3b:a9:02:66:ec:3c:41:65:c8:5c:9d:ad:51: 1d:2f:fd:c3:8b:b2:78:ed:91:ec:47:a6:10:e2:79: a4:f2:e7:2b:f1:aa:e3:a0:05:5a:7b:95:b9:56:27: ce:5b:66:b7:e5:5e:b9:0d:67:3c:9f:9b:9a:65:0f: 83:af:2d:84:77:48:91:19:52:7b:b3:81:cf:a0:ca: 93:09:42:a1:73:cb:80:de:8b:aa:b3:af:00:f5:d2: ad:3c:a9:2b:48:cb:f0:40:84:96:d9:6f:36:25:be: 9a:4c:e9:97:8c:3f:39:87:82:fd:14:95:dc:7e:23: df:2d:e0:50:33:75:71:35:24:40:a2:fe:c7:b7:43: 3e:32:a5:51:4a:3a:81:eb:b9:f1:40:bc:04:5d:ff: 4a:b1:57:06:86:c3:d8:03:9e:28:51:db:7a:e5:79: 53:e2:2b:5d:8c:24:1e:b2:aa:75:ba:d1:7d:7d:2a: 2b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.32.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203736 Signature Algorithm: sha256WithRSAEncryption 72:7f:aa:4b:49:ed:44:3c:8e:7d:6e:e2:29:cb:0f:c7:76:a3: b5:ac:93:a6:a8:2c:3f:8f:bc:39:a0:a8:7d:f3:ca:b7:14:19: c9:91:88:9d:73:fd:76:25:17:8f:6a:3e:8a:bb:46:3e:1a:2a: 7c:12:39:8a:40:de:28:ba:d9:49:a2:6d:0e:21:3a:71:44:1f: d1:58:a4:9b:65:af:56:2c:91:c9:5d:de:c7:fe:8c:21:cb:19: 22:cb:41:27:16:c3:53:73:68:57:3e:52:4f:22:09:0b:ec:c2: c3:2b:b5:b1:10:9e:73:3b:6f:4a:6d:54:71:82:9d:ab:f6:42: 70:39:b7:a1:3a:be:33:03:dc:6a:06:ce:1c:b2:be:34:7e:3d: 11:3d:82:92:02:c6:1c:65:4d:c4:be:eb:6b:47:b3:85:b6:99: 39:8b:e9:df:7d:6b:04:f8:9f:3f:27:b6:40:c5:9a:fb:db:56: 05:07:0b:fb:4c:76:2f:1f:90:13:3d:a7:06:25:27:b2:74:f1: f0:de:90:03:a4:f9:5c:eb:7d:4d:cb:3d:12:f2:05:e4:46:5b: 42:85:56:45:c3:e0:5e:91:9e:fd:88:47:1e:73:a5:1e:2b:df: b4:7f:6a:bd:37:9f:ec:74:90:fc:1c:06:08:8d:65:0d:33:54: 6f:41:89:d6 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9W2ym6ierEW9yQd9q5FOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjE1MjkwMGIwZDMyM2QzNmQ5NDUxMGFiMGIwMWM5M2Y0NTE3Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUYP+imyHY5EHvqcLRstL7OkZOk5 cIQPV42dycdfDO/7Hf7hbVrFj0AttuUXlFCk7eN6mONn4GAEBwIqnq3SFGxw+wLf PbIReQ/+ljupAmbsPEFlyFydrVEdL/3Di7J47ZHsR6YQ4nmk8ucr8arjoAVae5W5 VifOW2a35V65DWc8n5uaZQ+Dry2Ed0iRGVJ7s4HPoMqTCUKhc8uA3ouqs68A9dKt PKkrSMvwQISW2W82Jb6aTOmXjD85h4L9FJXcfiPfLeBQM3VxNSRAov7Ht0M+MqVR SjqB67nxQLwEXf9KsVcGhsPYA54oUdt65XlT4itdjCQesqp1utF9fSoriwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFE8VKQCw0yPTbZRRCrCwHJP0UXyJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzg5ZmYz Yi0xMjYzLTRjZGQtOWNhZC0yM2RmOGRkZGY5NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvODlmZjNi LTEyNjMtNGNkZC05Y2FkLTIzZGY4ZGRkZjk3OC8xL1R4VXBBTERUSTlOdGxGRUtz TEFja19SUmZJay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuWYgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMb2DANBgkqhkiG9w0BAQsFAAOCAQEAcn+qS0ntRDyOfW7iKcsPx3ajtayTpqgs P4+8OaCoffPKtxQZyZGInXP9diUXj2o+irtGPhoqfBI5ikDeKLrZSaJtDiE6cUQf 0Vikm2WvViyRyV3ex/6MIcsZIstBJxbDU3NoVz5STyIJC+zCwyu1sRCecztvSm1U cYKdq/ZCcDm3oTq+MwPcagbOHLK+NH49ET2CkgLGHGVNxL7ra0ezhbaZOYvp331r BPifPye2QMWa+9tWBQcL+0x2Lx+QEz2nBiUnsnTx8N6QA6T5XOt9Tcs9EvIF5EZb QoVWRcPgXpGe/YhHHnOlHivftH9qvTef7HSQ/BwGCI1lDTNUb0GJ1g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:07 2026 by rpki-client