This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer File: u_Th_bQkqRICI7OnXGzMMbb2Iko.cer (raw, json) Hash identifier: wsUmM3Gc0jgvdb7PCrvuvRgCFiku6JDl+9iH/3u0xSQ= Subject key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A926C5BE670BD55318D753AC4BADAC938 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 17 Nov 2025 15:26:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 197561 IP: 91.223.103.0/24 IP: 176.111.46.0/24 IP: 193.176.1.0 -- 193.176.2.255 IP: 2a0f:8fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:6c:5b:e6:70:bd:55:31:8d:75:3a:c4:ba:da:c9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 17 15:26:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:50:fc:e5:f5:9d:09:63:fd:22:76:3f:f4: c0:66:fb:8b:98:d3:91:63:cc:01:e6:74:91:f7:90: f4:36:ae:f2:04:03:a8:fa:b8:64:74:18:f7:e1:cf: 21:be:ea:d7:6a:90:ab:90:b9:9e:fe:23:85:c7:44: 61:a1:05:a3:fd:33:68:4d:7b:ee:51:13:3e:a6:49: a7:6d:7e:4f:6e:3c:c6:7a:79:6c:59:74:92:9e:ca: 05:12:c1:8d:99:31:b5:5e:5f:e3:a1:df:e5:6b:42: 27:5e:a3:ee:b7:4b:f8:6d:e5:62:a6:25:a2:a2:2e: 34:59:71:ae:37:6e:05:4d:34:60:13:7a:87:1f:30: 1b:4a:15:79:af:da:5b:e9:48:ae:32:26:70:46:51: 41:57:2d:3f:41:87:d1:90:56:f3:75:47:d7:bb:2b: 99:b8:75:a9:e3:9a:b4:f6:58:64:d4:7d:a2:63:20: 15:ab:45:fd:78:35:23:de:97:d5:d4:b1:d9:67:c1: c8:64:8d:49:a3:73:95:d5:dd:03:36:fb:24:06:a7: ce:be:dd:0f:4e:b3:e0:46:1f:09:fe:cb:eb:d4:db: 05:c3:0c:a6:3b:1c:3f:7d:6f:4c:86:3e:4d:e0:cf: 6d:58:28:67:75:d7:0d:1c:1e:d0:18:62:f3:ff:68: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.103.0/24 176.111.46.0/24 193.176.1.0-193.176.2.255 IPv6: 2a0f:8fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197561 Signature Algorithm: sha256WithRSAEncryption 4d:16:bc:36:e4:a5:fa:ac:3d:bb:81:4b:09:7d:df:e3:5e:c7: 5e:96:85:2e:20:41:e0:54:ac:f4:89:87:63:89:9e:78:42:5b: 06:56:36:0d:92:d1:5f:42:42:ec:5a:f9:53:a9:ee:35:64:b9: d5:fc:ac:af:34:0d:cb:e6:b5:34:be:ba:78:f4:f7:05:02:95: d2:e1:b7:0a:bb:22:70:05:26:76:b9:80:74:30:f0:63:b6:fa: e0:65:97:f2:c9:19:c1:07:65:26:9a:4d:b6:78:64:1c:a6:dc: e0:00:bf:1b:30:e8:29:4b:be:44:09:33:a0:e7:13:82:2c:37: d7:63:b9:9d:a4:e8:87:c4:1b:67:d1:73:79:51:bf:9c:11:84: 89:de:96:ff:91:93:17:80:31:ba:ab:ed:62:c5:f6:e4:ae:2c: 9b:80:6b:bc:fe:19:8c:cf:29:21:ee:fb:76:b4:64:15:9a:4b: ea:63:7f:86:73:59:19:14:bc:96:e3:31:c0:8c:36:5a:1e:06: 78:4e:b2:73:40:43:22:88:da:32:2a:70:b5:6c:58:8a:2e:cf: 32:22:d2:d5:0c:66:b0:c1:e1:fe:b2:5a:3e:cf:ec:7c:87:3a: 31:06:b2:2c:0c:a9:08:53:cb:70:32:22:a8:ca:f3:34:af:14: fc:61:bb:98 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZqSbFvmcL1VMY11OsS62sk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE3MTUyNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmY0ZTFmZGI0MjRhOTEyMDIyM2IzYTc1YzZjY2MzMWI2ZjYyMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYlQ/OX1nQlj/SJ2P/TAZvuLmNOR Y8wB5nSR95D0Nq7yBAOo+rhkdBj34c8hvurXapCrkLme/iOFx0RhoQWj/TNoTXvu URM+pkmnbX5PbjzGenlsWXSSnsoFEsGNmTG1Xl/jod/la0InXqPut0v4beVipiWi oi40WXGuN24FTTRgE3qHHzAbShV5r9pb6UiuMiZwRlFBVy0/QYfRkFbzdUfXuyuZ uHWp45q09lhk1H2iYyAVq0X9eDUj3pfV1LHZZ8HIZI1Jo3OV1d0DNvskBqfOvt0P TrPgRh8J/svr1NsFwwymOxw/fW9Mhj5N4M9tWChnddcNHB7QGGLz/2jvOwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFLv04f20JKkSAiOzp1xszDG29iJKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzExY2Qx MC0zZWY3LTQxMDUtODI0OC1iYTUxMzIzZGI0ZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMTFjZDEw LTNlZjctNDEwNS04MjQ4LWJhNTEzMjNkYjRlNS8xL3VfVGhfYlFrcVJJQ0k3T25Y R3pNTWJiMklrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQAW99nAwQAsG8uMAwDBADBsAEDBADBsAIwDQQC AAIwBwMFAyoPj8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwO5MA0GCSqGSIb3 DQEBCwUAA4IBAQBNFrw25KX6rD27gUsJfd/jXsdeloUuIEHgVKz0iYdjiZ54QlsG VjYNktFfQkLsWvlTqe41ZLnV/KyvNA3L5rU0vrp49PcFApXS4bcKuyJwBSZ2uYB0 MPBjtvrgZZfyyRnBB2Ummk22eGQcptzgAL8bMOgpS75ECTOg5xOCLDfXY7mdpOiH xBtn0XN5Ub+cEYSJ3pb/kZMXgDG6q+1ixfbkriybgGu8/hmMzykh7vt2tGQVmkvq Y3+Gc1kZFLyW4zHAjDZaHgZ4TrJzQEMiiNoyKnC1bFiKLs8yItLVDGawweH+slo+ z+x8hzoxBrIsDKkIU8twMiKoyvM0rxT8YbuY -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:38 2025 by rpki-client