This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer File: tUMb1z4KfwN965fYLRqV_NZxBRw.cer (raw, json) Hash identifier: BlKaGx8GoHwyyzsgl+sFx0ZYc5VIMriz4h94I9FcH8k= Subject key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A91807E1C044FA04AF90CF35A242CEC05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 17 Nov 2025 11:08:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208464 IP: 212.46.52.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:80:7e:1c:04:4f:a0:4a:f9:0c:f3:5a:24:2c:ec:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 17 11:08:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:c7:ba:7d:7b:85:52:b1:d4:0d:a1:49:12: db:3e:5d:7f:72:2f:96:64:f1:dd:96:e9:4e:47:19: 76:50:fb:64:db:f8:44:aa:c3:d4:ec:87:f0:96:1a: 79:09:9b:98:08:c0:c3:d6:bc:89:81:f2:92:ce:61: 7f:fa:70:b2:cc:0d:36:1c:cf:a8:cb:fe:2c:0f:6e: 20:3f:9b:36:90:02:e6:ff:27:a8:d7:49:ce:a2:f0: 42:27:a1:06:92:0f:d4:e9:ff:d1:72:3e:8d:a2:87: 9f:c3:cf:1b:ee:46:c1:2e:4b:68:72:29:88:2d:95: 32:af:82:36:c5:13:d0:ad:3e:23:44:c6:22:50:57: 71:c1:24:31:03:66:00:1e:89:c2:24:6c:41:04:30: 0a:49:4a:cd:7c:8e:73:ee:60:aa:90:d0:f7:5c:cd: bc:59:46:40:3e:58:8a:e1:11:d6:f3:ff:af:21:d1: 83:e2:8a:eb:cd:e8:17:13:98:4f:ee:76:97:ee:35: b6:fb:5c:a8:4e:55:29:d5:eb:5f:82:dd:f7:b4:d4: c1:47:3c:83:78:6b:49:7a:78:ab:4d:db:89:b1:d1: 66:8b:05:f1:b1:44:15:17:03:47:3d:91:c3:25:6c: 8f:89:5c:8c:cc:ca:ea:44:f0:cf:3f:84:5a:eb:8f: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.52.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208464 Signature Algorithm: sha256WithRSAEncryption 15:bf:35:a2:8f:aa:64:5b:42:ce:9d:8f:b8:9f:ba:1f:64:3c: 3e:fb:36:2f:94:3a:91:09:a1:87:fb:bd:9b:ff:42:05:38:e8: 36:cb:9d:a0:80:df:1f:f0:44:9b:ac:29:ca:a4:c5:72:17:53: ed:4a:bf:6d:50:8d:5f:83:18:8c:60:da:2c:2f:40:35:18:cc: 21:b1:af:f3:a4:aa:f8:03:66:70:2b:5b:eb:42:f9:30:3b:5b: d2:42:85:ca:8a:b5:e7:02:22:26:a3:f3:b0:29:a0:0e:2f:d0: 9f:f0:73:ca:9f:01:d4:f2:ec:83:d3:d5:a7:ba:40:eb:a3:13: 45:cd:99:94:d0:c3:e9:1e:1b:68:2c:79:85:aa:de:58:39:aa: 2f:fe:66:cf:ba:f1:97:40:15:8e:58:4b:8b:fe:fe:9d:6a:eb: 14:36:b5:fc:a9:a2:35:06:fb:7a:ae:64:8e:22:53:79:3e:3f: c1:15:41:0a:b7:ea:61:6f:b1:16:6e:a1:a7:eb:33:47:9a:6f: f8:fb:af:f0:6f:69:42:ae:b2:b6:a1:92:45:9c:42:55:1c:92: 5b:45:28:20:e7:41:2c:ae:e2:69:29:2e:bf:b8:34:91:63:3b: 61:d8:8f:b7:52:4d:dc:03:3e:08:6f:c9:3d:42:53:cb:b9:39: 43:59:f7:f3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZqRgH4cBE+gSvkM81okLOwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE3MTEwODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTQzMWJkNzNlMGE3ZjAzN2RlYjk3ZDgyZDFhOTVmY2Q2NzEwNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTzHun17hVKx1A2hSRLbPl1/ci+W ZPHdlulORxl2UPtk2/hEqsPU7Ifwlhp5CZuYCMDD1ryJgfKSzmF/+nCyzA02HM+o y/4sD24gP5s2kALm/yeo10nOovBCJ6EGkg/U6f/Rcj6Nooefw88b7kbBLktocimI LZUyr4I2xRPQrT4jRMYiUFdxwSQxA2YAHonCJGxBBDAKSUrNfI5z7mCqkND3XM28 WUZAPliK4RHW8/+vIdGD4orrzegXE5hP7naX7jW2+1yoTlUp1etfgt33tNTBRzyD eGtJenirTduJsdFmiwXxsUQVFwNHPZHDJWyPiVyMzMrqRPDPP4Ra6489SQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLVDG9c+Cn8DfeuX2C0alfzWcQUcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2ExMjYy OS04YmRmLTRjZGQtODY3Mi0xZmQ5ZjJjOTg5NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvYTEyNjI5 LThiZGYtNGNkZC04NjcyLTFmZDlmMmM5ODk1Ni8xL3RVTWIxejRLZndOOTY1ZllM UnFWX05aeEJSdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA1C40MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMuUDANBgkqhkiG9w0BAQsFAAOCAQEAFb81oo+qZFtCzp2PuJ+6H2Q8Pvs2L5Q6 kQmhh/u9m/9CBTjoNsudoIDfH/BEm6wpyqTFchdT7Uq/bVCNX4MYjGDaLC9ANRjM IbGv86Sq+ANmcCtb60L5MDtb0kKFyoq15wIiJqPzsCmgDi/Qn/Bzyp8B1PLsg9PV p7pA66MTRc2ZlNDD6R4baCx5hareWDmqL/5mz7rxl0AVjlhLi/7+nWrrFDa1/Kmi NQb7eq5kjiJTeT4/wRVBCrfqYW+xFm6hp+szR5pv+Puv8G9pQq6ytqGSRZxCVRyS W0UoIOdBLK7iaSkuv7g0kWM7YdiPt1JN3AM+CG/JPUJTy7k5Q1n38w== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:12 2025 by rpki-client