This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer (raw, json) Hash identifier: XecneSz2pwBbCfi+msk/FRxCsZdj200HUAeuCZtK9SM= Subject key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B5CC76294E038A3979978AF7626F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205265 AS: 206976 IP: 185.222.16.0/22 IP: 2a0c:f000::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5c:c7:62:94:e0:38:a3:97:99:78:af:76:26:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=535a0905ad5684f414182c99e1ed998163093001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:56:0d:b7:22:47:c5:65:0e:e6:a3:d8:a1: 58:28:4e:6c:24:5d:f5:bf:0c:b4:ae:8a:8b:50:d3: 4c:a2:7c:ad:d4:13:25:a5:85:5d:a7:c1:05:e3:33: fb:30:26:6d:cc:b1:ed:35:e7:1e:4d:c7:89:7f:83: 3c:a9:9c:d4:03:ee:0d:0f:a9:8a:44:c2:61:bf:6c: dc:b2:75:ec:60:b2:29:57:44:dc:b2:32:b5:de:89: 31:e5:6b:88:40:0e:5b:8b:10:4c:3e:64:ed:5f:4a: a8:2d:fc:44:b0:c9:ee:ee:56:d9:d7:f7:91:d0:83: c0:81:f9:3f:d5:f9:3b:f6:a5:6b:7a:ac:51:0a:52: 6d:10:29:0c:4e:28:a8:e3:53:ab:9e:d0:de:a4:81: b4:f9:53:51:6e:dd:15:44:29:af:d7:2e:b7:2a:f2: 00:5c:74:22:7e:2c:b1:1e:62:35:be:83:c7:e3:8f: 37:9c:77:13:6f:81:b5:45:62:70:5c:11:e4:99:e5: 1d:22:cd:ca:ab:90:1f:b8:48:fd:4f:0c:28:01:15: 5e:96:54:82:97:19:cb:60:dd:7c:ca:63:c9:ee:6b: 86:23:9d:76:83:b1:7e:eb:4d:77:ba:b6:03:f3:db: ec:5a:cc:aa:11:ad:bc:91:e6:f7:a2:c5:10:0a:cc: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.16.0/22 IPv6: 2a0c:f000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205265 206976 Signature Algorithm: sha256WithRSAEncryption 5e:0f:0d:dc:43:06:6f:fb:a5:e9:0e:78:c5:28:09:99:c8:4f: f6:9e:eb:3b:bc:d7:26:ea:cf:a1:40:a1:9e:e3:58:4a:65:06: ca:7e:c5:d0:96:cf:01:5e:dd:1c:2a:50:6d:85:58:43:e5:19: 38:33:29:89:98:db:48:86:98:43:93:d8:c8:61:a4:eb:60:c9: 2d:55:d3:ac:98:1f:34:6e:ae:fa:11:40:ff:20:05:e9:0f:4f: d0:09:4b:6f:f0:d0:ef:91:31:1b:58:23:10:dc:5d:8e:ec:a6: f3:38:21:b5:8d:5f:63:54:58:48:72:25:61:2a:75:a6:57:91: 7c:69:3c:f8:48:db:33:e0:33:c1:07:a3:2a:6a:07:9d:7d:62: a1:ad:c3:e8:1c:ff:2e:df:1b:e3:ba:12:fe:34:6d:78:d2:ae: d4:2c:d2:0a:aa:44:98:07:5a:b0:15:a9:bc:b3:9f:93:0d:52: e1:2b:03:cd:37:47:9a:bd:e5:7c:57:b2:bb:b7:04:2a:25:57: d0:fa:c9:6b:ad:50:9a:00:6e:72:41:5b:ca:03:1b:a1:72:a1: 63:2b:ae:32:4e:7b:7b:cc:7b:49:f9:31:46:af:e4:00:92:34: 0c:75:83:a6:9d:b1:d3:ec:c8:2e:ee:f0:e1:7a:26:20:35:04: 87:f9:f7:d0 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt6W1zHYpTgOKOXmXivdib4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzVhMDkwNWFkNTY4NGY0MTQxODJjOTllMWVkOTk4MTYzMDkzMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi11WDbciR8VlDuaj2KFYKE5sJF31 vwy0roqLUNNMonyt1BMlpYVdp8EF4zP7MCZtzLHtNeceTceJf4M8qZzUA+4ND6mK RMJhv2zcsnXsYLIpV0TcsjK13okx5WuIQA5bixBMPmTtX0qoLfxEsMnu7lbZ1/eR 0IPAgfk/1fk79qVreqxRClJtECkMTiio41OrntDepIG0+VNRbt0VRCmv1y63KvIA XHQifiyxHmI1voPH4483nHcTb4G1RWJwXBHkmeUdIs3Kq5AfuEj9TwwoARVellSC lxnLYN18ymPJ7muGI512g7F+6013urYD89vsWsyqEa28keb3osUQCsyZAwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFFNaCQWtVoT0FBgsmeHtmYFjCTABMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2IyN2Jh Zi1lNjgxLTRhYjYtYjkwMy02YTEwYzZlMzIyMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvYjI3YmFm LWU2ODEtNGFiNi1iOTAzLTZhMTBjNmUzMjIyZC8xL1Uxb0pCYTFXaFBRVUdDeVo0 ZTJaZ1dNSk1BRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCud4QMA0EAgACMAcDBQAqDPAAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMh0QIDAyiAMA0GCSqGSIb3DQEBCwUAA4IBAQBeDw3c QwZv+6XpDnjFKAmZyE/2nus7vNcm6s+hQKGe41hKZQbKfsXQls8BXt0cKlBthVhD 5Rk4MymJmNtIhphDk9jIYaTrYMktVdOsmB80bq76EUD/IAXpD0/QCUtv8NDvkTEb WCMQ3F2O7KbzOCG1jV9jVFhIciVhKnWmV5F8aTz4SNsz4DPBB6MqagedfWKhrcPo HP8u3xvjuhL+NG140q7ULNIKqkSYB1qwFam8s5+TDVLhKwPNN0eaveV8V7K7twQq JVfQ+slrrVCaAG5yQVvKAxuhcqFjK64yTnt7zHtJ+TFGr+QAkjQMdYOmnbHT7Mgu 7vDheiYgNQSH+ffQ -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:03 2026 by rpki-client