This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer (raw, json) Hash identifier: ullRGu1K1UIXzmtUb7eS9IysIBUDzGfWYFQLtOk0mVA= Subject key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6D8DFCEA0015AAD5682BE0E5D383A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203068 IP: 185.145.176.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d8:df:ce:a0:01:5a:ad:56:82:be:0e:5d:38:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:24:57:37:41:d3:63:1b:86:03:7b:42:c1:89: 1a:ff:84:88:42:21:0f:cd:20:14:6a:73:c3:e0:3e: 85:2f:ab:43:31:83:04:6b:1c:a4:df:f5:e0:ad:bc: 59:01:51:7f:f4:c2:0c:3b:a9:5f:24:e8:d9:2e:67: 02:da:7f:e8:98:51:28:05:12:4f:4f:d1:10:38:db: 93:a0:5c:cd:58:5f:09:ca:28:64:f6:8e:37:23:ed: 1a:6e:8b:bd:75:d3:83:e7:2d:da:26:b8:78:ca:2e: 51:e5:be:ae:75:f8:2f:b1:6e:19:e9:be:ee:06:d1: 9f:3f:09:4f:02:5f:83:fb:1f:95:98:a2:d4:bd:eb: 47:14:bd:ce:d1:d3:4b:66:3e:df:bf:93:80:2d:d4: 85:21:7b:07:cf:8a:b9:e7:50:63:95:2a:66:5e:c4: f0:33:cc:b7:24:5b:ef:93:71:6c:a6:b5:f8:66:a5: 98:b7:45:bb:e5:6b:38:f0:b5:cb:e4:09:20:e2:fb: 71:fb:53:34:8e:c0:8d:0d:fe:04:2d:50:38:8c:33: 5f:5d:fd:da:07:7a:6c:d0:fd:d8:b6:83:50:0f:15: 36:51:80:65:3e:1a:5f:b0:86:63:74:d0:f2:11:8f: 96:d5:8f:f9:29:44:78:fa:4e:a6:8b:67:da:22:7d: 24:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.176.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203068 Signature Algorithm: sha256WithRSAEncryption 65:e4:37:d3:37:d6:78:57:55:28:70:51:f7:c9:95:16:2f:01: 5f:db:89:fb:85:19:63:23:ae:a6:87:db:94:07:06:94:40:b9: 2c:c7:48:f3:7b:3b:be:56:9b:7b:e1:78:24:eb:7f:d4:35:f9: ef:74:b6:5c:df:f3:29:25:26:9e:ce:a5:a9:8d:60:bc:8a:95: be:d8:5f:80:89:a2:6b:81:6b:d9:cb:4b:ba:4d:25:c0:ea:3a: f8:3f:87:83:17:c8:05:14:81:cd:f1:33:0c:53:5b:8b:9a:9f: eb:2e:c4:a2:da:8e:37:04:f8:09:09:49:d6:e0:78:ee:0f:a6: 8e:43:8a:26:11:6f:92:32:3e:d0:54:60:fc:10:e2:8d:e2:20: 6c:eb:9a:20:91:fc:04:de:09:ed:0c:17:7e:8c:fe:1b:fc:b4: 19:39:cc:44:41:94:3a:9a:5d:0e:ca:79:2d:d1:28:29:ed:4f: df:f0:02:c4:a8:1e:14:a5:27:f9:62:ab:28:13:de:e3:25:4c: cc:f7:3a:33:5d:ba:e5:5d:ca:0a:f3:64:3c:9f:e3:29:c6:2d: b8:45:aa:d4:a4:57:3b:7c:ef:2e:59:41:d2:a4:92:4b:71:a3: fe:06:1c:0e:c4:5a:7a:83:b1:8d:12:80:22:8d:90:0e:3e:73: 6a:da:17:7f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xtjfzqABWq1Wgr4OXTg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDBkNDk0MzMzY2I0ZDllNWZkMTBjODQ2YzQ3Y2Y1NjQ0NWM1MDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iRXN0HTYxuGA3tCwYka/4SIQiEP zSAUanPD4D6FL6tDMYMEaxyk3/XgrbxZAVF/9MIMO6lfJOjZLmcC2n/omFEoBRJP T9EQONuToFzNWF8Jyihk9o43I+0abou9ddOD5y3aJrh4yi5R5b6udfgvsW4Z6b7u BtGfPwlPAl+D+x+VmKLUvetHFL3O0dNLZj7fv5OALdSFIXsHz4q551BjlSpmXsTw M8y3JFvvk3FsprX4ZqWYt0W75Ws48LXL5Akg4vtx+1M0jsCNDf4ELVA4jDNfXf3a B3ps0P3YtoNQDxU2UYBlPhpfsIZjdNDyEY+W1Y/5KUR4+k6mi2faIn0kNwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLQNSUMzy02eX9EMhGxHz1ZEXFA6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzJhN2Jm NC0zNDU0LTRkMTQtOWUwYy0xODNmOTk3NWZjOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvMmE3YmY0 LTM0NTQtNGQxNC05ZTBjLTE4M2Y5OTc1ZmM5NC8xL3RBMUpRelBMVFo1ZjBReUVi RWZQVmtSY1VEby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZGwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMZPDANBgkqhkiG9w0BAQsFAAOCAQEAZeQ30zfWeFdVKHBR98mVFi8BX9uJ+4UZ YyOupofblAcGlEC5LMdI83s7vlabe+F4JOt/1DX573S2XN/zKSUmns6lqY1gvIqV vthfgImia4Fr2ctLuk0lwOo6+D+HgxfIBRSBzfEzDFNbi5qf6y7EotqONwT4CQlJ 1uB47g+mjkOKJhFvkjI+0FRg/BDijeIgbOuaIJH8BN4J7QwXfoz+G/y0GTnMREGU OppdDsp5LdEoKe1P3/ACxKgeFKUn+WKrKBPe4yVMzPc6M1265V3KCvNkPJ/jKcYt uEWq1KRXO3zvLllB0qSSS3Gj/gYcDsRaeoOxjRKAIo2QDj5zatoXfw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:41 2026 by rpki-client