This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer File: tIUv-6fVfFqK-7bqW-r33-wMFFo.cer (raw, json) Hash identifier: 91NkkEtnumgYTSc9T2IFxdF4cl8BRBF425+iKIMN66A= Subject key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B107E665CE02EDC56B34133A532E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25252 IP: 79.170.16.0/21 IP: 131.97.0.0/16 IP: 148.138.0.0/16 IP: 153.112.0.0/16 IP: 157.171.0.0/16 IP: 192.131.25.0 -- 192.131.26.255 IP: 192.138.109.0 -- 192.138.117.255 IP: 192.157.8.0 -- 192.157.17.255 IP: 193.53.24.0 -- 193.53.33.255 IP: 195.95.140.0/24 IP: 2a02:f780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:10:7e:66:5c:e0:2e:dc:56:b3:41:33:a5:32:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:ab:24:67:21:cf:77:a1:ca:39:09:2c:95: a9:4f:eb:91:2e:85:08:51:ed:05:11:98:df:a5:25: 0f:00:51:14:a7:4c:7d:15:b0:c7:cf:05:1e:e2:2a: e6:74:8f:d3:39:d2:0f:31:bc:1f:43:85:5a:2d:a3: 28:73:5e:8f:27:9d:ea:45:d5:b0:d3:db:0b:8f:74: 5d:d3:b4:ed:9f:6c:e4:be:b0:97:03:f2:43:cd:3b: 8c:66:bc:c8:ad:4d:c7:2c:77:28:6e:2f:fd:36:c2: 7b:db:17:23:1c:12:cb:dd:c6:03:f9:de:32:04:0c: 3a:91:0d:43:46:de:1d:3d:ce:37:19:22:86:b5:17: f2:63:b7:f2:8e:70:5b:e5:61:fe:99:3d:34:47:28: 4b:6b:bf:e6:b9:3e:12:02:8c:0e:f7:3c:9e:f2:97: 80:f3:c6:0b:c7:59:42:1d:14:b9:e0:57:79:47:43: 78:75:5f:d9:fa:c0:18:02:42:5a:3d:37:cf:6d:72: 16:45:05:3a:90:8f:95:aa:5a:7e:a6:cc:22:9c:a9: 31:ac:7b:a2:3b:7e:76:10:48:93:d7:85:49:02:10: 93:c6:5b:c2:d1:ed:c7:a3:7a:eb:53:09:d9:b4:be: 1f:7b:ca:a6:e7:f0:45:cf:e2:c4:4c:84:cb:a1:30: d9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.16.0/21 131.97.0.0/16 148.138.0.0/16 153.112.0.0/16 157.171.0.0/16 192.131.25.0-192.131.26.255 192.138.109.0-192.138.117.255 192.157.8.0-192.157.17.255 193.53.24.0-193.53.33.255 195.95.140.0/24 IPv6: 2a02:f780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25252 Signature Algorithm: sha256WithRSAEncryption 88:52:1b:cd:88:a3:b1:cb:2e:75:ec:bb:4f:cd:c6:a6:33:14: 00:b8:6c:1e:0c:fc:39:6e:36:1c:22:7b:2d:d4:df:ae:7a:34: 14:b4:79:89:78:2e:f7:22:93:b7:6b:4f:c5:8e:5a:52:0d:2a: 13:a7:be:b0:43:65:80:6b:cd:65:a5:b7:6e:16:2e:ac:c8:f4: 3a:ca:b6:4c:67:7d:ad:e3:0c:8b:25:97:64:f2:9b:c4:9c:f7: 7c:e9:72:02:bc:e8:ab:ba:68:94:bf:ea:0d:93:2f:f3:4d:ea: 11:cd:5d:d4:4e:da:30:39:d8:e5:8d:c1:c5:ec:bf:9c:1e:1d: fb:5d:3c:a7:8d:45:e9:b1:29:78:a5:a7:85:96:74:38:a2:51: 00:0d:61:7c:42:c0:a9:b2:b3:65:7e:75:f2:f9:45:d3:06:09: 0b:d7:38:21:a5:2b:92:e7:92:4c:19:c0:00:c4:81:80:2b:8b: 2f:7b:c9:a2:05:82:50:a9:6b:66:2e:54:64:86:47:f7:9b:94: 05:52:9c:d8:83:6e:e2:77:66:6a:5a:24:08:97:f7:9c:6a:7f: 74:8c:b8:86:55:6f:5f:8b:ea:f6:73:8d:72:bc:dc:8c:ab:c5: e7:6a:1d:5d:6a:3d:c5:7f:f4:d5:2d:f4:f0:cb:f1:eb:26:2a: 07:c0:31:24 -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISAZt6WxB+ZlzgLtxWs0EzpTLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDg1MmZmYmE3ZDU3YzVhOGFmYmI2ZWE1YmVhZjdkZmVjMGMxNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJmrJGchz3ehyjkJLJWpT+uRLoUI Ue0FEZjfpSUPAFEUp0x9FbDHzwUe4irmdI/TOdIPMbwfQ4VaLaMoc16PJ53qRdWw 09sLj3Rd07Ttn2zkvrCXA/JDzTuMZrzIrU3HLHcobi/9NsJ72xcjHBLL3cYD+d4y BAw6kQ1DRt4dPc43GSKGtRfyY7fyjnBb5WH+mT00RyhLa7/muT4SAowO9zye8peA 88YLx1lCHRS54Fd5R0N4dV/Z+sAYAkJaPTfPbXIWRQU6kI+Vqlp+pswinKkxrHui O352EEiT14VJAhCTxlvC0e3Ho3rrUwnZtL4fe8qm5/BFz+LETITLoTDZeQIDAQAB o4IDATCCAv0wHQYDVR0OBBYEFLSFL/un1Xxaivu26lvq99/sDBRaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2U0NWUz MC1lN2Q4LTRmYjgtOTBhZC1mNzEwMzhlOTY3YTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZTQ1ZTMw LWU3ZDgtNGZiOC05MGFkLWY3MTAzOGU5NjdhNC8xL3RJVXYtNmZWZkZxSy03YnFX LXIzMy13TUZGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGABggrBgEF BQcBBwEB/wRxMG8wXgQCAAEwWAMEA0+qEAMDAINhAwMAlIoDAwCZcAMDAJ2rMAwD BADAgxkDBADAgxowDAMEAMCKbQMEAcCKdDAMAwQDwJ0IAwQBwJ0QMAwDBAPBNRgD BAHBNSADBADDX4wwDQQCAAIwBwMFAyoC94AwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICYqQwDQYJKoZIhvcNAQELBQADggEBAIhSG82Io7HLLnXsu0/NxqYzFAC4bB4M /DluNhwiey3U3656NBS0eYl4Lvcik7drT8WOWlINKhOnvrBDZYBrzWWlt24WLqzI 9DrKtkxnfa3jDIsll2Tym8Sc93zpcgK86Ku6aJS/6g2TL/NN6hHNXdRO2jA52OWN wcXsv5weHftdPKeNRemxKXilp4WWdDiiUQANYXxCwKmys2V+dfL5RdMGCQvXOCGl K5LnkkwZwADEgYAriy97yaIFglCpa2YuVGSGR/eblAVSnNiDbuJ3ZmpaJAiX95xq f3SMuIZVb1+L6vZzjXK83IyrxedqHV1qPcV/9NUt9PDL8esmKgfAMSQ= -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:57 2026 by rpki-client