This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer File: 2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer (raw, json) Hash identifier: MXg4pxq7f7JBT8Vww9hStrJT9nCS/JuR0eSGoIzNMMc= Subject key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1226EB4E0A775558435EB0B837A183 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58073 IP: 2.58.20.0/22 IP: 37.220.32.0/21 IP: 45.10.116.0/22 IP: 45.82.44.0/22 IP: 45.88.16.0/22 IP: 45.93.32.0/22 IP: 45.129.176.0/22 IP: 45.145.252.0/22 IP: 45.152.192.0/22 IP: 46.182.104.0/21 IP: 185.38.12.0/22 IP: 193.104.186.0/24 IP: 2a02:2a38::/32 IP: 2a09:e040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:26:eb:4e:0a:77:55:58:43:5e:b0:b8:37:a1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d94bddafb5df098419020a8fbc7a90b16e341d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:5e:fa:56:28:35:07:c3:8b:be:2f:c5:58: 5b:46:84:17:0c:eb:85:4c:85:68:c3:c1:a3:d8:1a: 9c:da:70:a6:c1:08:74:f1:88:2d:3e:dc:42:dd:da: e4:4c:3c:39:77:00:d6:67:74:bc:86:ed:19:ff:93: 6b:d9:1e:b2:3d:af:89:ff:25:ad:a4:15:0d:a7:f2: 4f:18:71:e0:30:11:ac:48:24:78:6f:4b:b6:12:3f: 9b:51:31:b1:f1:d3:d0:12:fe:9c:f7:14:d9:98:6e: c9:37:3e:01:51:9c:e0:77:43:c7:2e:f1:64:9b:c4: 7e:b1:05:18:27:44:43:a9:72:ba:d5:5c:31:f5:59: 0b:7b:88:fc:01:aa:56:47:4b:f9:0a:93:18:5c:1f: 88:e0:73:8f:91:ab:c6:2b:fa:20:6e:a9:fa:b7:6b: c1:2a:dd:fb:c3:ba:ad:5c:2a:73:51:82:fb:a9:ec: 06:19:9d:88:80:05:65:03:66:8f:19:07:7c:9d:e0: 3e:d0:1a:ba:9c:f3:90:06:8c:a0:43:e5:06:ce:5d: c4:b3:ee:84:c3:0c:ab:a9:20:c8:3b:24:c2:67:71: e6:d1:bd:55:dd:77:86:b9:57:0c:86:af:c2:7c:3a: 57:9a:34:b2:a5:59:04:43:24:fd:47:b5:b6:2e:0a: 0c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.20.0/22 37.220.32.0/21 45.10.116.0/22 45.82.44.0/22 45.88.16.0/22 45.93.32.0/22 45.129.176.0/22 45.145.252.0/22 45.152.192.0/22 46.182.104.0/21 185.38.12.0/22 193.104.186.0/24 IPv6: 2a02:2a38::/32 2a09:e040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58073 Signature Algorithm: sha256WithRSAEncryption 6f:d0:59:f5:52:3a:51:75:3e:99:35:3d:bb:a1:cc:70:b4:1a: bf:f3:e3:ef:76:30:b8:f5:ce:9d:5e:ea:06:72:8b:fd:81:83: 07:5c:b5:5b:af:bd:99:c3:44:2b:0d:79:18:5b:8c:00:1e:87: 5f:fc:ac:9f:d3:25:36:3a:c5:bf:c1:5a:c3:83:94:71:c8:9c: e1:d2:bd:5c:d0:31:3f:7a:25:64:bc:03:79:5a:76:be:46:19: ff:1a:11:07:13:b0:e8:60:3e:7d:e0:f4:eb:64:80:75:7c:59: 5e:d9:d2:4f:db:00:95:8d:7b:ae:7b:42:c9:c0:9d:41:3e:a5: 84:1c:77:f3:5c:a3:52:63:aa:eb:b1:3b:3e:88:f2:2c:0d:02: 8d:cc:81:65:dc:59:bb:4f:fb:26:40:c6:c9:57:01:b5:4e:51: 16:7d:b1:bf:2a:ef:9d:fb:3d:78:bf:5d:da:e3:71:4e:31:ee: 29:57:a3:fe:5f:28:fb:16:a0:74:c3:01:6c:15:c6:50:b7:5e: 4d:95:13:bc:14:a0:ac:2f:cf:d9:47:3b:01:bf:53:9d:45:bb: 70:6f:15:1a:4c:48:54:22:5d:2c:e0:ca:13:26:d5:c5:48:01: 5a:72:6e:06:85:69:66:15:2c:49:6b:36:b1:8c:12:b6:ab:56: ea:71:54:de -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgISAZt8EibrTgp3VVhDXrC4N6GDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTRiZGRhZmI1ZGYwOTg0MTkwMjBhOGZiYzdhOTBiMTZlMzQxZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulBe+lYoNQfDi74vxVhbRoQXDOuF TIVow8Gj2Bqc2nCmwQh08YgtPtxC3drkTDw5dwDWZ3S8hu0Z/5Nr2R6yPa+J/yWt pBUNp/JPGHHgMBGsSCR4b0u2Ej+bUTGx8dPQEv6c9xTZmG7JNz4BUZzgd0PHLvFk m8R+sQUYJ0RDqXK61Vwx9VkLe4j8AapWR0v5CpMYXB+I4HOPkavGK/ogbqn6t2vB Kt37w7qtXCpzUYL7qewGGZ2IgAVlA2aPGQd8neA+0Bq6nPOQBoygQ+UGzl3Es+6E wwyrqSDIOyTCZ3Hm0b1V3XeGuVcMhq/CfDpXmjSypVkEQyT9R7W2LgoMOwIDAQAB o4IC+DCCAvQwHQYDVR0OBBYEFNlL3a+13wmEGQIKj7x6kLFuNB1jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1L2NkZTc1 Ny03NjcyLTQ3MjAtOGNlMS02ZTI2YjkxZjY5MTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvY2RlNzU3 LTc2NzItNDcyMC04Y2UxLTZlMjZiOTFmNjkxMC8xLzJVdmRyN1hmQ1lRWkFncVB2 SHFRc1c0MEhXTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHcGCCsGAQUF BwEHAQH/BGgwZjBOBAIAATBIAwQCAjoUAwQDJdwgAwQCLQp0AwQCLVIsAwQCLVgQ AwQCLV0gAwQCLYGwAwQCLZH8AwQCLZjAAwQDLrZoAwQCuSYMAwQAwWi6MBQEAgAC MA4DBQAqAio4AwUAKgngQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA4tkwDQYJ KoZIhvcNAQELBQADggEBAG/QWfVSOlF1Ppk1PbuhzHC0Gr/z4+92MLj1zp1e6gZy i/2BgwdctVuvvZnDRCsNeRhbjAAeh1/8rJ/TJTY6xb/BWsODlHHInOHSvVzQMT96 JWS8A3ladr5GGf8aEQcTsOhgPn3g9OtkgHV8WV7Z0k/bAJWNe657QsnAnUE+pYQc d/Nco1JjquuxOz6I8iwNAo3MgWXcWbtP+yZAxslXAbVOURZ9sb8q7537PXi/Xdrj cU4x7ilXo/5fKPsWoHTDAWwVxlC3Xk2VE7wUoKwvz9lHOwG/U51Fu3BvFRpMSFQi XSzgyhMm1cVIAVpybgaFaWYVLElrNrGMErarVupxVN4= -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:01 2026 by rpki-client