This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer File: tKOwBTZrDhDVAulBSQHNhPri3JU.cer (raw, json) Hash identifier: lErFEl4AihEtBGKz4ZlSQhYV4p83k2hQ67HIeJdtq7k= Subject key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B089378D07BC0BD07366DC7628E8E25BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 14:04:01 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 199631 IP: 2a13:ab00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:93:78:d0:7b:c0:bd:07:36:6d:c7:62:8e:8e:25:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 14:04:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:58:77:b2:ba:ab:f1:01:b6:4d:05:35:a6: 66:14:5d:78:31:fe:25:13:b2:d9:0e:cb:8e:5e:bc: 65:6a:8e:82:27:89:dc:da:bd:a6:17:72:af:7e:7c: 27:8a:a2:f0:ca:5e:32:22:94:c5:e5:a4:54:c9:90: 75:2c:b0:b8:05:8e:a4:6d:14:56:dc:66:1c:e9:1a: 47:34:7c:79:29:82:75:ed:5a:1a:ba:b2:c3:c7:db: eb:7a:25:cb:9c:1b:be:0f:17:37:b1:e7:66:58:64: 5c:62:99:69:7a:d6:8b:34:09:74:ad:99:31:c6:82: de:3e:94:95:17:5b:86:6b:33:13:c3:81:22:fd:04: a7:f8:22:63:2e:5f:5e:e2:c3:34:c8:ca:d9:ff:d5: b9:35:a7:a8:70:5e:90:8e:d3:4e:8f:9d:e0:02:27: 58:fa:4e:00:a5:a0:83:8f:17:64:b2:63:e8:2f:90: 93:9b:9f:99:71:d2:dc:77:11:3a:5e:8f:0d:43:a4: a9:08:20:f3:df:5f:dd:26:cb:13:43:27:86:90:6a: 51:80:fd:a0:d1:c5:4c:1e:05:f1:f2:24:33:b8:2d: 86:fe:ce:d0:8c:b0:9e:43:b2:5b:b5:90:11:83:60: 03:68:ba:68:3f:4a:aa:b7:60:50:2f:35:ba:42:c0: f3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:ab00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199631 Signature Algorithm: sha256WithRSAEncryption 40:3f:bb:b9:de:54:51:b7:66:32:0f:90:65:e5:61:1f:de:58: 79:82:5c:50:cf:44:fd:9b:34:6d:0e:60:74:ee:a1:ac:5d:d2: 2c:b5:15:e0:d5:b2:2b:dc:d9:fd:f2:f6:12:34:68:84:b0:a0: 31:49:18:d6:a9:5a:e0:88:fb:83:28:cd:f6:88:51:02:64:45: ee:8f:02:a6:9d:aa:aa:41:ae:40:90:c4:e9:34:2f:ef:2b:63: ce:d8:09:0d:5a:8e:a8:c9:94:ff:2a:33:1a:bb:42:bc:43:6b: b8:e1:2e:32:89:26:f7:fd:6e:3a:14:11:fa:66:b2:4a:74:42: d8:f7:16:55:6e:a0:b4:56:78:31:41:2d:c3:eb:dc:73:37:06: fd:22:9e:5f:7b:e6:6c:e6:69:1f:a6:f3:fb:e9:96:55:cf:62: 31:80:ab:d6:b8:9b:bd:27:d2:aa:ad:68:8d:93:b6:e2:6d:71: eb:39:ff:0a:70:af:4b:30:c0:54:7d:9b:8e:2e:fa:db:76:44: 14:c7:d4:fe:c3:a3:86:38:bf:43:94:b3:9c:ff:77:9b:30:0d: 67:4d:4b:4c:0f:4d:c9:c0:b7:d5:a7:17:c1:77:3e:9c:8d:6c: 84:1a:64:ef:a3:97:da:90:c2:f5:79:0e:68:3a:f6:3d:b4:64: 8b:e8:bb:9b -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZsIk3jQe8C9BzZtx2KOjiW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMTQwNDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGEzYjAwNTM2NmIwZTEwZDUwMmU5NDE0OTAxY2Q4NGZhZTJkYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ttYd7K6q/EBtk0FNaZmFF14Mf4l E7LZDsuOXrxlao6CJ4nc2r2mF3KvfnwniqLwyl4yIpTF5aRUyZB1LLC4BY6kbRRW 3GYc6RpHNHx5KYJ17VoaurLDx9vreiXLnBu+Dxc3sedmWGRcYplpetaLNAl0rZkx xoLePpSVF1uGazMTw4Ei/QSn+CJjLl9e4sM0yMrZ/9W5NaeocF6QjtNOj53gAidY +k4ApaCDjxdksmPoL5CTm5+ZcdLcdxE6Xo8NQ6SpCCDz31/dJssTQyeGkGpRgP2g 0cVMHgXx8iQzuC2G/s7QjLCeQ7JbtZARg2ADaLpoP0qqt2BQLzW6QsDzBwIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFLSjsAU2aw4Q1QLpQUkBzYT64tyVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2MyYmE3 Mi1hODkyLTQyNmQtYWVjOS1hMTU3NWY5MWY4M2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvYzJiYTcy LWE4OTItNDI2ZC1hZWM5LWExNTc1ZjkxZjgzYi8xL3RLT3dCVFpyRGhEVkF1bEJT UUhOaFByaTNKVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhOrADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDC88wDQYJKoZIhvcNAQELBQADggEBAEA/u7neVFG3ZjIPkGXlYR/eWHmCXFDP RP2bNG0OYHTuoaxd0iy1FeDVsivc2f3y9hI0aISwoDFJGNapWuCI+4MozfaIUQJk Re6PAqadqqpBrkCQxOk0L+8rY87YCQ1ajqjJlP8qMxq7QrxDa7jhLjKJJvf9bjoU Efpmskp0Qtj3FlVuoLRWeDFBLcPr3HM3Bv0inl975mzmaR+m8/vpllXPYjGAq9a4 m70n0qqtaI2TtuJtces5/wpwr0swwFR9m44u+tt2RBTH1P7Do4Y4v0OUs5z/d5sw DWdNS0wPTcnAt9WnF8F3PpyNbIQaZO+jl9qQwvV5Dmg69j20ZIvou5s= -----END CERTIFICATE-----Generated at Mon Dec 22 11:26:44 2025 by rpki-client