This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer File: tuD-D69oRJiK8vdE1RbtucXf5xw.cer (raw, json) Hash identifier: gFH5oaWBnbyqBCoKFFIc73cXtDHAanMrm+h9r+AJbzE= Subject key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F35E442889FD4F24A2654E45230AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41124 IP: 89.107.96.0/21 IP: 185.27.68.0/22 IP: 2a04:3a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:35:e4:42:88:9f:d4:f2:4a:26:54:e4:52:30:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:33:d0:ad:d8:e4:5e:6e:a7:a7:85:6d:83: 48:9d:0b:36:39:52:07:2e:bc:46:6b:c8:7c:2e:ee: 09:b8:18:68:0a:ae:02:3e:07:38:d9:93:c0:2b:b3: 45:ba:8e:45:c1:24:25:25:6c:00:12:ca:8d:e7:b3: b5:39:2f:a4:0a:ec:1a:b8:93:97:56:57:e3:3d:3d: fd:8a:89:83:82:7c:df:7c:47:9d:a1:c5:a0:3f:91: 0c:77:59:3c:93:d1:5a:bc:28:8e:49:dc:33:24:54: 74:0e:61:31:88:fe:39:3b:d4:8c:43:4b:3b:fd:19: 54:94:0e:6b:fb:42:00:61:8b:aa:40:09:76:5a:22: 94:c0:5c:b6:7a:01:9c:92:62:f5:89:7f:e7:58:02: a2:cf:09:7e:4d:16:ce:42:db:03:f5:c6:6e:da:92: 29:b4:07:e1:33:09:74:78:00:60:ff:1c:5d:29:72: bf:c4:5d:7e:66:7e:c2:84:a6:31:1a:ff:7f:e9:d2: 76:77:b9:b4:bf:3e:bd:47:b5:47:11:2b:13:ab:92: 71:e4:6d:ab:8c:69:75:93:f6:fe:a0:51:72:9d:82: a5:76:c2:17:d1:e9:c7:65:b7:84:ba:b5:66:ae:cb: 0b:0a:d9:8f:32:e2:9d:ea:b9:f9:2f:fa:ef:13:3c: ce:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.96.0/21 185.27.68.0/22 IPv6: 2a04:3a80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41124 Signature Algorithm: sha256WithRSAEncryption 0e:35:f3:7b:ab:68:ef:09:12:16:28:b7:38:6b:c1:12:12:2d: 88:c1:d6:07:3f:17:bc:6e:bd:8d:b9:10:31:46:8b:b0:c7:6b: 7c:3e:60:d8:e4:b6:46:93:69:c4:ae:fd:8d:3f:c9:db:15:56: 85:94:61:bb:a7:6a:39:23:7b:9e:7d:04:58:07:c6:a1:35:fb: 2f:93:a2:7a:b8:41:e6:0d:1e:4d:aa:fa:6c:7b:cd:49:71:ca: 10:1c:e3:c8:f1:17:33:cf:27:58:e9:69:8a:41:e3:e0:80:20: 5c:81:7d:3e:7a:a3:37:3b:d4:98:d3:b8:aa:90:78:de:04:c2: 60:01:4e:e0:49:1e:ea:ec:f2:b1:2a:93:bf:01:31:4a:45:68: 51:6f:ce:cb:b4:61:97:fb:8c:a2:e8:25:ab:2e:d2:76:3b:bb: cf:c4:73:43:ee:63:33:6a:5a:29:96:8d:69:ce:f0:d6:7b:fc: 39:6b:ba:ee:68:27:89:9c:39:9a:70:bc:91:bc:c7:b3:56:a4: a9:cf:bf:c2:0b:76:5b:0f:bc:95:eb:dd:4c:5c:9b:43:ab:61: dd:7f:1e:22:8b:dd:88:a3:26:18:11:d5:d5:89:04:0a:7e:1f: 7c:6b:0b:34:e3:ce:fd:8d:8f:0f:20:50:8a:cc:05:7a:0e:19: e0:f5:81:1e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8fzXkQoif1PJKJlTkUjCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmUwZmUwZmFmNjg0NDk4OGFmMmY3NDRkNTE2ZWRiOWM1ZGZlNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYsz0K3Y5F5up6eFbYNInQs2OVIH LrxGa8h8Lu4JuBhoCq4CPgc42ZPAK7NFuo5FwSQlJWwAEsqN57O1OS+kCuwauJOX VlfjPT39iomDgnzffEedocWgP5EMd1k8k9FavCiOSdwzJFR0DmExiP45O9SMQ0s7 /RlUlA5r+0IAYYuqQAl2WiKUwFy2egGckmL1iX/nWAKizwl+TRbOQtsD9cZu2pIp tAfhMwl0eABg/xxdKXK/xF1+Zn7ChKYxGv9/6dJ2d7m0vz69R7VHESsTq5Jx5G2r jGl1k/b+oFFynYKldsIX0enHZbeEurVmrssLCtmPMuKd6rn5L/rvEzzOPQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLbg/g+vaESYivL3RNUW7bnF3+ccMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2QyYTli Yy0xM2IxLTRiMzAtYjU2My0yMDllMWY4NDIyNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvZDJhOWJj LTEzYjEtNGIzMC1iNTYzLTIwOWUxZjg0MjI0ZS8xL3R1RC1ENjlvUkppSzh2ZEUx UmJ0dWNYZjV4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDWWtgAwQCuRtEMA0EAgACMAcDBQMqBDqAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCgpDANBgkqhkiG9w0BAQsFAAOCAQEADjXz e6to7wkSFii3OGvBEhItiMHWBz8XvG69jbkQMUaLsMdrfD5g2OS2RpNpxK79jT/J 2xVWhZRhu6dqOSN7nn0EWAfGoTX7L5OierhB5g0eTar6bHvNSXHKEBzjyPEXM88n WOlpikHj4IAgXIF9PnqjNzvUmNO4qpB43gTCYAFO4Eke6uzysSqTvwExSkVoUW/O y7Rhl/uMouglqy7Sdju7z8RzQ+5jM2paKZaNac7w1nv8OWu67mgniZw5mnC8kbzH s1akqc+/wgt2Ww+8levdTFybQ6th3X8eIovdiKMmGBHV1YkECn4ffGsLNOPO/Y2P DyBQiswFeg4Z4PWBHg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:24 2026 by rpki-client