This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer (raw, json) Hash identifier: VzXuo3OYgEq9cu2XsFVAoLhqpbBBUtTU2PXpyih+FMo= Subject key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED2C9F7D447FA77A75C3549B0DDE71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.67.156.0/22 IP: 2a09:7ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2c:9f:7d:44:7f:a7:7a:75:c3:54:9b:0d:de:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:58:40:2a:c5:1f:2f:21:16:38:1a:24:e2: 48:3d:7f:31:e3:e4:e1:3c:43:71:99:29:bd:c0:84: ab:a5:4a:68:93:24:6f:23:e4:66:87:94:7d:ed:09: a6:29:e8:ef:d8:1d:82:ff:74:b4:b7:35:d4:a4:83: a5:9a:a7:ec:32:c8:c7:87:5b:ff:c1:fb:af:7f:d1: 6f:b0:d0:5a:fe:ea:bf:1e:8e:2f:50:ec:33:84:c5: d3:b1:0f:71:ce:2e:9f:1c:f9:bb:0c:f7:95:ba:74: 94:82:a9:bf:66:f6:27:d8:d2:b6:dd:e3:ca:a4:f3: 00:22:37:85:3f:f8:53:99:2c:1d:f2:15:11:08:d3: cd:48:3b:67:b3:ef:c4:20:00:1b:e8:15:b2:43:45: 37:9d:6b:d9:65:d6:79:c5:3c:2c:2a:03:da:bb:de: aa:1d:d7:4d:45:1a:65:38:ac:1c:32:7c:bd:18:18: 6e:45:f8:59:0b:db:60:7a:55:0c:be:59:1f:96:8e: 62:2f:bc:63:ae:11:d8:76:3c:6e:0f:6a:4f:6e:34: 67:40:6c:f3:e0:68:62:86:cc:95:5d:e4:6b:34:25: 17:fb:2a:5f:b0:e8:97:a7:11:2a:c8:8a:5d:6e:7d: ca:45:6e:98:b3:14:2d:d8:37:8a:7d:3d:23:c9:85: 29:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.156.0/22 IPv6: 2a09:7ac0::/29 Signature Algorithm: sha256WithRSAEncryption 0f:5e:08:37:5a:51:32:f3:7b:17:c2:85:3b:45:13:1c:35:82: 82:f9:9d:05:7f:1a:86:3a:04:75:72:1b:a5:b3:c9:9f:3a:fb: 94:34:ab:68:0b:50:8e:01:45:d9:37:ed:2c:8c:3f:c0:18:c3: 11:87:4f:3a:dc:f1:db:74:0c:e6:af:76:a4:73:35:f8:72:1b: 2f:7a:31:79:61:75:af:b9:13:ad:e3:11:6c:80:ea:93:72:eb: b6:11:38:d4:81:00:b5:d0:a5:e9:dd:4e:b7:4d:a3:5e:7a:38: 0f:50:fb:ea:47:93:f1:66:9b:8c:37:18:93:0d:8c:1c:f1:97: d8:54:92:e2:e4:f0:87:a1:54:44:7c:a2:1e:b5:b1:7e:92:81: 54:c1:e3:23:e1:3a:5a:16:54:6b:3b:25:6b:6f:6f:fa:5b:6c: cf:31:42:58:13:1f:e8:f1:21:ce:42:82:3c:13:1d:82:12:6e: 45:10:73:a8:1a:bb:77:a6:27:36:9b:93:07:35:e2:91:1c:3d: c1:be:5a:30:12:f9:5e:ff:83:f9:37:40:28:42:88:a9:93:a6: 89:66:ad:f9:df:2f:6d:e8:ad:21:eb:fc:c1:36:27:2f:e5:6e: ea:cf:66:8e:83:3d:c3:59:1a:f3:c6:4d:66:36:e6:ad:96:87: a8:65:be:d3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57SyffUR/p3p1w1SbDd5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTQyN2VhNDlmOTcyZDE5YzU2MzkzYTY4OWU3Y2JlYjk5MGQ1ZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM1YQCrFHy8hFjgaJOJIPX8x4+Th PENxmSm9wISrpUpokyRvI+Rmh5R97QmmKejv2B2C/3S0tzXUpIOlmqfsMsjHh1v/ wfuvf9FvsNBa/uq/Ho4vUOwzhMXTsQ9xzi6fHPm7DPeVunSUgqm/ZvYn2NK23ePK pPMAIjeFP/hTmSwd8hURCNPNSDtns+/EIAAb6BWyQ0U3nWvZZdZ5xTwsKgPau96q HddNRRplOKwcMny9GBhuRfhZC9tgelUMvlkflo5iL7xjrhHYdjxuD2pPbjRnQGzz 4GhihsyVXeRrNCUX+ypfsOiXpxEqyIpdbn3KRW6YsxQt2DeKfT0jyYUp9QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLVCfqSfly0ZxWOTponny+uZDV16MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2QyYmI2 OC05YmM3LTQ3OTEtODUyOC0wYzQ5NTQ3N2NhMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvZDJiYjY4 LTliYzctNDc5MS04NTI4LTBjNDk1NDc3Y2ExMC8xL3RVSi1wSi1YTFJuRlk1T21p ZWZMNjVrTlhYby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLUOcMA0EAgACMAcDBQMqCXrAMA0GCSqGSIb3 DQEBCwUAA4IBAQAPXgg3WlEy83sXwoU7RRMcNYKC+Z0FfxqGOgR1chuls8mfOvuU NKtoC1COAUXZN+0sjD/AGMMRh0863PHbdAzmr3akczX4chsvejF5YXWvuROt4xFs gOqTcuu2ETjUgQC10KXp3U63TaNeejgPUPvqR5PxZpuMNxiTDYwc8ZfYVJLi5PCH oVREfKIetbF+koFUweMj4TpaFlRrOyVrb2/6W2zPMUJYEx/o8SHOQoI8Ex2CEm5F EHOoGrt3pic2m5MHNeKRHD3BvlowEvle/4P5N0AoQoipk6aJZq353y9t6K0h6/zB Nicv5W7qz2aOgz3DWRrzxk1mNuatloeoZb7T -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:51 2026 by rpki-client