This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer File: u_Th_bQkqRICI7OnXGzMMbb2Iko.cer (raw, json) Hash identifier: Fb2GzgbnwhftWLUaBViQWqNfOhOCjdreJ1KCQF0I6Hg= Subject key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3EE7DB11119CE0DEE131860230F3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197561 IP: 91.223.103.0/24 IP: 176.111.46.0/24 IP: 193.176.1.0 -- 193.176.2.255 IP: 2a0f:8fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3e:e7:db:11:11:9c:e0:de:e1:31:86:02:30:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:50:fc:e5:f5:9d:09:63:fd:22:76:3f:f4: c0:66:fb:8b:98:d3:91:63:cc:01:e6:74:91:f7:90: f4:36:ae:f2:04:03:a8:fa:b8:64:74:18:f7:e1:cf: 21:be:ea:d7:6a:90:ab:90:b9:9e:fe:23:85:c7:44: 61:a1:05:a3:fd:33:68:4d:7b:ee:51:13:3e:a6:49: a7:6d:7e:4f:6e:3c:c6:7a:79:6c:59:74:92:9e:ca: 05:12:c1:8d:99:31:b5:5e:5f:e3:a1:df:e5:6b:42: 27:5e:a3:ee:b7:4b:f8:6d:e5:62:a6:25:a2:a2:2e: 34:59:71:ae:37:6e:05:4d:34:60:13:7a:87:1f:30: 1b:4a:15:79:af:da:5b:e9:48:ae:32:26:70:46:51: 41:57:2d:3f:41:87:d1:90:56:f3:75:47:d7:bb:2b: 99:b8:75:a9:e3:9a:b4:f6:58:64:d4:7d:a2:63:20: 15:ab:45:fd:78:35:23:de:97:d5:d4:b1:d9:67:c1: c8:64:8d:49:a3:73:95:d5:dd:03:36:fb:24:06:a7: ce:be:dd:0f:4e:b3:e0:46:1f:09:fe:cb:eb:d4:db: 05:c3:0c:a6:3b:1c:3f:7d:6f:4c:86:3e:4d:e0:cf: 6d:58:28:67:75:d7:0d:1c:1e:d0:18:62:f3:ff:68: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.103.0/24 176.111.46.0/24 193.176.1.0-193.176.2.255 IPv6: 2a0f:8fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197561 Signature Algorithm: sha256WithRSAEncryption 4d:79:68:c7:d7:f5:fe:1b:2a:f4:87:40:6c:85:49:7b:68:d1: 09:27:e8:10:80:e1:28:cb:c7:6f:e3:1b:74:3e:d5:f7:64:0f: 41:55:4f:3c:6d:f2:b8:d9:29:c4:a2:e7:c3:7b:1b:d8:9a:aa: fa:5f:2a:1b:b4:f0:77:c6:f0:24:0c:31:b1:35:f7:a0:d2:b2: 15:15:36:8e:2a:24:d3:2c:52:f7:5a:b8:ae:45:68:6c:e4:d4: e8:0f:96:13:fb:13:f9:4a:5b:cb:95:1f:94:3b:e6:2c:14:69: 37:92:1d:d1:1e:64:e8:a1:65:bc:fb:93:d9:8b:80:07:69:82: ce:3b:66:9b:65:d0:31:9c:2b:95:02:db:84:71:f5:9e:37:95: 46:5b:42:be:bc:ee:cd:44:24:f4:fe:0e:8b:79:03:57:75:9a: 34:08:df:ee:45:fc:74:dc:3f:67:f3:5c:cd:09:06:30:b3:43: d1:0d:e2:a0:6e:bf:71:af:1f:c8:9f:7b:3b:53:08:9a:2c:ca: e0:ce:81:68:24:22:e8:c1:d4:88:a6:8d:9e:62:58:6b:6d:09: de:42:e4:d2:09:1b:9f:89:20:66:03:a8:03:20:52:01:5a:d6: 03:87:35:64:07:78:66:5e:10:ff:c0:56:8f:7b:99:ed:f3:87: 81:bf:41:d8 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt57T7n2xERnODe4TGGAjDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmY0ZTFmZGI0MjRhOTEyMDIyM2IzYTc1YzZjY2MzMWI2ZjYyMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYlQ/OX1nQlj/SJ2P/TAZvuLmNOR Y8wB5nSR95D0Nq7yBAOo+rhkdBj34c8hvurXapCrkLme/iOFx0RhoQWj/TNoTXvu URM+pkmnbX5PbjzGenlsWXSSnsoFEsGNmTG1Xl/jod/la0InXqPut0v4beVipiWi oi40WXGuN24FTTRgE3qHHzAbShV5r9pb6UiuMiZwRlFBVy0/QYfRkFbzdUfXuyuZ uHWp45q09lhk1H2iYyAVq0X9eDUj3pfV1LHZZ8HIZI1Jo3OV1d0DNvskBqfOvt0P TrPgRh8J/svr1NsFwwymOxw/fW9Mhj5N4M9tWChnddcNHB7QGGLz/2jvOwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFLv04f20JKkSAiOzp1xszDG29iJKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzExY2Qx MC0zZWY3LTQxMDUtODI0OC1iYTUxMzIzZGI0ZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMTFjZDEw LTNlZjctNDEwNS04MjQ4LWJhNTEzMjNkYjRlNS8xL3VfVGhfYlFrcVJJQ0k3T25Y R3pNTWJiMklrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQAW99nAwQAsG8uMAwDBADBsAEDBADBsAIwDQQC AAIwBwMFAyoPj8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwO5MA0GCSqGSIb3 DQEBCwUAA4IBAQBNeWjH1/X+Gyr0h0BshUl7aNEJJ+gQgOEoy8dv4xt0PtX3ZA9B VU88bfK42SnEoufDexvYmqr6XyobtPB3xvAkDDGxNfeg0rIVFTaOKiTTLFL3Wriu RWhs5NToD5YT+xP5SlvLlR+UO+YsFGk3kh3RHmTooWW8+5PZi4AHaYLOO2abZdAx nCuVAtuEcfWeN5VGW0K+vO7NRCT0/g6LeQNXdZo0CN/uRfx03D9n81zNCQYws0PR DeKgbr9xrx/In3s7UwiaLMrgzoFoJCLowdSIpo2eYlhrbQneQuTSCRufiSBmA6gD IFIBWtYDhzVkB3hmXhD/wFaPe5nt84eBv0HY -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:55 2026 by rpki-client