This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer File: tXq3GLSss6Z5xduPzucpTta-K9A.cer (raw, json) Hash identifier: Ao5PVbQfaLj/1M4bEMBRnD3T34cm6cVO9z0z/bh56QI= Subject key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FC2991AED2250506CCC8284F04787 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43853 AS: 197430 IP: 46.22.112.0/20 IP: 131.117.176.0/21 IP: 185.183.56.0/22 IP: 2a02:2a48::/32 IP: 2a0b:680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c2:99:1a:ed:22:50:50:6c:cc:82:84:f0:47:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:0e:d0:50:2c:a8:97:bb:7d:4e:d8:fc:28: 71:99:ce:67:3a:be:e5:5f:16:22:fe:71:b3:80:5b: 7a:69:c6:e2:f6:37:df:9d:25:8a:1f:fd:b4:e0:3a: 8d:d5:d2:b7:f8:fb:1a:9e:e3:ed:3a:9c:45:2e:c1: 6a:c4:78:b1:43:c9:2a:1c:f2:fe:1d:ca:81:d7:cc: cc:e0:cd:a0:53:0e:50:a5:20:03:f4:5f:ff:b7:a1: 58:99:3a:14:86:ce:39:85:9e:3e:20:5c:fc:56:0b: fb:2d:58:24:08:48:91:00:3d:1c:a4:f5:a2:8f:da: d2:1d:7a:6d:b2:cd:32:57:06:12:31:a9:d3:a7:69: 5e:36:08:bc:a0:3b:45:79:78:d4:d4:a0:41:53:62: da:f9:64:f9:f4:40:8a:6c:23:1f:76:f1:0d:30:d3: 9b:79:95:51:da:a7:4e:e9:86:79:10:07:10:bb:d8: a6:74:a3:55:03:3e:47:80:b0:9f:a6:40:d9:91:28: 03:3f:67:bb:3d:dd:7f:9d:51:94:23:7c:d3:14:65: 3e:ec:80:ee:30:63:da:3e:c9:3b:c8:cd:49:ad:77: 2a:9a:1a:b3:01:0e:56:8c:e8:9b:cf:54:b3:7d:95: 1a:a7:c4:74:b7:fe:eb:b5:c7:21:c0:ff:51:0f:58: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.112.0/20 131.117.176.0/21 185.183.56.0/22 IPv6: 2a02:2a48::/32 2a0b:680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43853 197430 Signature Algorithm: sha256WithRSAEncryption 3a:81:b9:5e:29:21:32:43:90:e7:97:2c:9b:d7:53:54:ee:05: 40:8a:51:23:65:27:9b:08:01:1d:d4:ea:54:3a:81:c3:06:c7: cb:2d:5e:d9:8d:a0:3e:c3:d1:3c:b5:1f:bb:0e:b4:b8:0c:22: 4b:f1:b8:aa:76:b9:68:39:ac:f7:43:b5:df:8e:cd:01:a1:91: 9d:0e:01:66:9e:bf:92:7e:62:4f:fb:3c:91:ac:cd:be:d0:81: 86:ba:b6:3d:fd:e9:c9:2a:45:4a:49:d1:ef:a4:4f:dd:59:47: 2b:48:aa:86:77:f7:a5:3d:b2:00:c8:11:a7:89:74:44:59:31: ba:ba:8e:b6:41:72:e1:3d:b6:37:1a:70:d0:fa:d2:6e:fa:8f: 74:e3:7a:0d:34:b4:3c:88:a8:15:59:4f:e1:89:85:c6:b6:e9: 54:1c:43:28:ed:95:7e:cc:55:30:72:ac:ac:34:f8:79:b8:92: 51:12:74:01:13:67:1c:6a:5d:49:bf:8e:9f:ae:ad:f5:27:59: 0a:a3:c5:3e:9d:09:0d:06:0b:a1:a2:ef:58:dd:78:c0:30:23: bc:fd:85:54:78:df:71:df:74:91:b7:a1:80:37:eb:27:c2:f2: f8:e9:55:83:69:26:93:88:3d:ac:67:27:cd:81:b2:b6:2d:83: dc:19:e0:fa -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt8f8KZGu0iUFBszIKE8EeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTdhYjcxOGI0YWNiM2E2NzljNWRiOGZjZWU3Mjk0ZWQ2YmUyYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlMO0FAsqJe7fU7Y/Chxmc5nOr7l XxYi/nGzgFt6acbi9jffnSWKH/204DqN1dK3+PsanuPtOpxFLsFqxHixQ8kqHPL+ HcqB18zM4M2gUw5QpSAD9F//t6FYmToUhs45hZ4+IFz8Vgv7LVgkCEiRAD0cpPWi j9rSHXptss0yVwYSManTp2leNgi8oDtFeXjU1KBBU2La+WT59ECKbCMfdvENMNOb eZVR2qdO6YZ5EAcQu9imdKNVAz5HgLCfpkDZkSgDP2e7Pd1/nVGUI3zTFGU+7IDu MGPaPsk7yM1JrXcqmhqzAQ5WjOibz1SzfZUap8R0t/7rtcchwP9RD1g0HQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFLV6txi0rLOmecXbj87nKU7WvivQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3L2JhMWJl My03OTZlLTQ1YzgtOGI3Ni1jNzAwZWEwM2MyMjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvYmExYmUz LTc5NmUtNDVjOC04Yjc2LWM3MDBlYTAzYzIyNy8xL3RYcTNHTFNzczZaNXhkdVB6 dWNwVHRhLUs5QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQELhZwAwQDg3WwAwQCubc4MBQEAgACMA4DBQAq AipIAwUDKgsGgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAq00CAwMDNjANBgkq hkiG9w0BAQsFAAOCAQEAOoG5XikhMkOQ55csm9dTVO4FQIpRI2UnmwgBHdTqVDqB wwbHyy1e2Y2gPsPRPLUfuw60uAwiS/G4qna5aDms90O1347NAaGRnQ4BZp6/kn5i T/s8kazNvtCBhrq2Pf3pySpFSknR76RP3VlHK0iqhnf3pT2yAMgRp4l0RFkxurqO tkFy4T22Nxpw0PrSbvqPdON6DTS0PIioFVlP4YmFxrbpVBxDKO2VfsxVMHKsrDT4 ebiSURJ0ARNnHGpdSb+On66t9SdZCqPFPp0JDQYLoaLvWN14wDAjvP2FVHjfcd90 kbehgDfrJ8Ly+OlVg2kmk4g9rGcnzYGyti2D3Bng+g== -----END CERTIFICATE-----Generated at Sun Jan 11 22:31:28 2026 by rpki-client