This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer File: tx6uq1CDkaFflcQpE_oAWhbCPA8.cer (raw, json) Hash identifier: qYQyfGQJjU+29LpVgU1LRPAygUep9gOv8L4oAoQz5/8= Subject key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE9B7ED2AF4A803E4D93D97A67434CD02 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 14:15:36 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210358 IP: 146.103.192.0/18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:b7:ed:2a:f4:a8:03:e4:d9:3d:97:a6:74:34:cd:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 14:15:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b71eaeab508391a15f95c42913fa005a16c23c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:54:5d:ea:3a:a3:4b:82:46:a8:e5:6b:68: 46:d4:54:a1:7e:9e:ea:c9:86:0d:3e:d4:3c:6c:e4: 52:6d:01:84:76:8c:85:99:89:ce:ca:0e:15:bf:b4: d8:9f:46:e8:e2:07:15:45:b3:b0:31:34:5a:1f:35: 0d:8c:1b:2a:9b:59:40:43:01:44:c1:e2:6b:43:4b: bb:9e:f9:19:5b:9f:96:96:b5:f2:ed:21:ab:df:3d: 9c:41:70:5f:92:45:18:43:f6:2d:a1:73:27:62:7f: cf:df:46:6b:cf:38:53:d4:64:af:54:db:f1:88:93: 3a:0e:9c:84:8c:33:e6:17:94:a7:94:40:cc:97:3c: a9:83:d3:0e:34:f7:66:05:c2:73:0d:22:60:b1:a2: f3:79:a7:19:fb:fd:5f:46:3a:da:f7:46:a5:0f:3e: da:ed:3a:cb:e4:14:c9:2e:f2:c0:f9:f7:1c:6a:f2: 80:6e:8d:4c:01:2f:67:19:12:43:a4:ff:b7:76:1f: ed:21:92:3b:10:a4:ea:4d:6f:56:30:dc:36:28:94: 48:34:e9:5e:0a:59:3e:e4:40:18:9a:d0:fb:9b:cc: 67:5c:35:0f:71:0f:da:ca:21:74:c4:b8:fd:24:16: a1:f2:01:0e:6e:b9:a1:f0:f1:b1:8c:83:49:90:23: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.103.192.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210358 Signature Algorithm: sha256WithRSAEncryption 2d:37:5d:fb:49:89:88:7d:93:00:ae:80:a0:f2:44:c5:4c:5a: 61:a1:cd:d4:f1:4d:3f:de:54:7a:0b:56:7b:ed:ad:f9:46:c1: d9:f7:d6:71:b0:07:b9:ac:f3:29:0d:ec:04:2c:62:fb:c4:8f: ec:90:1f:1c:a9:9d:48:d9:21:d2:09:1c:22:9a:b2:45:6e:9a: 5b:37:f9:64:f4:70:e3:49:0f:5c:04:47:58:fc:6c:81:47:1d: 39:c1:9d:2a:e3:8f:0b:57:47:cf:af:9c:de:29:4b:0d:fb:a9: eb:1f:01:b7:c9:26:06:99:22:bd:7e:de:50:8e:dc:0a:5b:10: 4c:bb:a8:a5:d3:89:2f:33:2d:ea:5f:48:3c:89:ac:e3:94:e1: 2f:5a:dc:8d:35:ae:de:29:b1:2e:b2:28:13:44:2f:1a:54:3b: c6:40:d1:41:dc:9d:2c:b4:8e:16:58:f7:1b:5a:57:31:32:64: 5b:53:f7:12:fa:4d:f2:94:26:d2:c9:c9:f3:df:a8:57:c4:3c: a2:12:09:39:0f:88:f0:11:52:1d:5a:79:e0:a4:25:d0:2b:97: 60:ce:00:91:dc:db:1a:39:23:35:7e:15:06:75:5b:0e:7a:a7: e4:5b:ff:78:b4:01:10:e0:52:79:28:fa:31:c8:73:d3:d3:89: b2:f7:10:62 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZrpt+0q9KgD5Nk9l6Z0NM0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTQxNTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzFlYWVhYjUwODM5MWExNWY5NWM0MjkxM2ZhMDA1YTE2YzIzYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0hUXeo6o0uCRqjla2hG1FShfp7q yYYNPtQ8bORSbQGEdoyFmYnOyg4Vv7TYn0bo4gcVRbOwMTRaHzUNjBsqm1lAQwFE weJrQ0u7nvkZW5+WlrXy7SGr3z2cQXBfkkUYQ/YtoXMnYn/P30ZrzzhT1GSvVNvx iJM6DpyEjDPmF5SnlEDMlzypg9MONPdmBcJzDSJgsaLzeacZ+/1fRjra90alDz7a 7TrL5BTJLvLA+fccavKAbo1MAS9nGRJDpP+3dh/tIZI7EKTqTW9WMNw2KJRINOle Clk+5EAYmtD7m8xnXDUPcQ/ayiF0xLj9JBah8gEObrmh8PGxjINJkCNq+wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLcerqtQg5GhX5XEKRP6AFoWwjwPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzRjODc2 ZS03NjVhLTQ0ZmYtYWM5OC1iZWU0ZDZjMGIwMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNGM4NzZl LTc2NWEtNDRmZi1hYzk4LWJlZTRkNmMwYjAxZS8xL3R4NnVxMUNEa2FGZmxjUXBF X29BV2hiQ1BBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQGkmfAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM1tjANBgkqhkiG9w0BAQsFAAOCAQEALTdd+0mJiH2TAK6AoPJExUxaYaHN1PFN P95UegtWe+2t+UbB2ffWcbAHuazzKQ3sBCxi+8SP7JAfHKmdSNkh0gkcIpqyRW6a Wzf5ZPRw40kPXARHWPxsgUcdOcGdKuOPC1dHz6+c3ilLDfup6x8Bt8kmBpkivX7e UI7cClsQTLuopdOJLzMt6l9IPIms45ThL1rcjTWu3imxLrIoE0QvGlQ7xkDRQdyd LLSOFlj3G1pXMTJkW1P3EvpN8pQm0snJ89+oV8Q8ohIJOQ+I8BFSHVp54KQl0CuX YM4AkdzbGjkjNX4VBnVbDnqn5Fv/eLQBEOBSeSj6Mchz09OJsvcQYg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:11:31 2025 by rpki-client