This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer File: SeUWlMTUa0_MAvrnHl25QqcQjkc.cer (raw, json) Hash identifier: fe/IqmwEhU6yHpTpKS+CbYYbyDAqLpJopemuH8x8IJ8= Subject key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDFD2818BC8E706ABF1C6F2BD89B1B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39616 AS: 209408 IP: 45.66.224.0/22 IP: 80.71.224.0/20 IP: 81.29.144.0/20 IP: 194.242.63.0/24 IP: 2a09:6c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fd:28:18:bc:8e:70:6a:bf:1c:6f:2b:d8:9b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:02:e2:5e:88:3e:42:f9:7a:a6:94:62:ac: 9a:17:fb:33:15:16:6b:5e:d5:46:c2:7e:94:40:46: 2a:e1:e2:1b:cc:ce:10:05:e5:6b:d4:83:f8:75:ae: 6a:8b:ae:60:99:90:ab:ae:f9:bd:fa:0e:c2:88:8a: 6b:cb:63:0d:90:8a:29:42:1d:2c:92:e6:f2:98:51: 0c:13:c6:e6:ec:eb:08:d7:58:45:49:e6:5e:0f:11: 11:36:f8:10:64:4f:6c:5f:ce:1d:19:f1:19:ee:18: 9c:1b:82:c1:44:95:63:ee:34:35:1e:b4:4b:0a:79: a3:ad:82:2c:4c:95:b2:26:dc:77:15:e2:44:ff:2d: 2b:4b:2f:54:7d:fb:ef:e4:48:55:cc:2b:8f:60:c4: 16:57:08:76:af:25:69:ef:cc:e6:c3:b1:84:8d:01: 28:cd:87:43:1d:85:af:fc:9d:f8:88:62:15:1a:d1: b1:e7:46:7f:8f:f9:64:0f:bd:d6:25:ae:82:f1:d7: b2:55:c4:84:6b:c4:1b:83:d0:d4:9d:ba:a7:28:66: 05:c5:7b:51:b2:98:08:18:24:35:86:e9:62:10:0f: 23:e6:44:8c:e9:b2:66:44:20:37:01:62:23:bb:8a: 85:87:55:26:c3:21:d8:52:bc:a5:eb:1d:dd:52:3f: 81:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.224.0/22 80.71.224.0/20 81.29.144.0/20 194.242.63.0/24 IPv6: 2a09:6c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39616 209408 Signature Algorithm: sha256WithRSAEncryption 5c:aa:66:18:bb:b0:04:08:16:d0:81:1e:1d:60:65:4c:06:90: dd:7c:c1:26:52:9d:b9:99:c4:d4:3b:2d:c7:9e:7a:48:b5:1a: 9e:83:d0:4a:f1:24:24:5d:c1:8c:b9:67:77:a6:e9:70:a3:e9: 4b:b2:9e:f2:59:ac:e1:67:7f:bc:b7:78:ce:6d:2f:30:82:05: 08:3a:fe:e4:63:06:6f:be:8c:a0:26:32:13:fb:f4:3b:5c:4e: a2:d2:57:9e:fe:e4:90:a6:44:7a:2d:17:84:01:1c:62:55:1c: 4c:c4:3e:e2:e1:ed:ab:18:b9:53:65:ee:06:50:ce:7a:0c:56: 87:53:be:be:aa:d9:d6:ee:45:e3:d0:0e:e5:0f:b5:c1:3d:39: 2d:e0:f6:b9:16:53:92:db:30:9f:ee:12:48:db:f6:8f:7a:cc: ea:dc:6b:31:24:e5:d7:9a:43:f6:d7:45:1d:b0:16:f6:6e:2a: 03:cc:e7:8b:1c:6a:3b:6a:5c:14:17:2f:39:52:80:1f:7f:69: 3f:66:f2:df:de:aa:3d:74:f0:fc:3e:8f:65:f9:42:45:2a:a9: 29:49:11:00:db:a0:1e:bf:30:bc:ef:03:f1:9a:46:36:ba:1f: b1:d2:83:f6:2c:b8:ac:ee:f5:3d:81:de:4d:da:4a:f0:87:ce: 45:ab:61:ed -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt87f0oGLyOcGq/HG8r2JsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWU1MTY5NGM0ZDQ2YjRmY2MwMmZhZTcxZTVkYjk0MmE3MTA4ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/sC4l6IPkL5eqaUYqyaF/szFRZr XtVGwn6UQEYq4eIbzM4QBeVr1IP4da5qi65gmZCrrvm9+g7CiIpry2MNkIopQh0s kubymFEME8bm7OsI11hFSeZeDxERNvgQZE9sX84dGfEZ7hicG4LBRJVj7jQ1HrRL CnmjrYIsTJWyJtx3FeJE/y0rSy9Uffvv5EhVzCuPYMQWVwh2ryVp78zmw7GEjQEo zYdDHYWv/J34iGIVGtGx50Z/j/lkD73WJa6C8deyVcSEa8Qbg9DUnbqnKGYFxXtR spgIGCQ1huliEA8j5kSM6bJmRCA3AWIju4qFh1UmwyHYUryl6x3dUj+B2wIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFEnlFpTE1GtPzAL65x5duUKnEI5HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzlkYjUy NS0xMDU5LTRjMDctYTVhZC0xOTE4OWIzYzljN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvOWRiNTI1 LTEwNTktNGMwNy1hNWFkLTE5MTg5YjNjOWM3ZC8xL1NlVVdsTVRVYTBfTUF2cm5I bDI1UXFjUWprYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLULgAwQEUEfgAwQEUR2QAwQAwvI/MA0EAgAC MAcDBQMqCWxAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCawAIDAzIAMA0GCSqG SIb3DQEBCwUAA4IBAQBcqmYYu7AECBbQgR4dYGVMBpDdfMEmUp25mcTUOy3HnnpI tRqeg9BK8SQkXcGMuWd3pulwo+lLsp7yWazhZ3+8t3jObS8wggUIOv7kYwZvvoyg JjIT+/Q7XE6i0lee/uSQpkR6LReEARxiVRxMxD7i4e2rGLlTZe4GUM56DFaHU76+ qtnW7kXj0A7lD7XBPTkt4Pa5FlOS2zCf7hJI2/aPeszq3GsxJOXXmkP210UdsBb2 bioDzOeLHGo7alwUFy85UoAff2k/ZvLf3qo9dPD8Po9l+UJFKqkpSREA26AevzC8 7wPxmkY2uh+x0oP2LLis7vU9gd5N2krwh85Fq2Ht -----END CERTIFICATE-----Generated at Mon Jan 19 13:38:17 2026 by rpki-client