This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer File: UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer (raw, json) Hash identifier: af/6xfqDE8LC/cbTu6CdsZOi2JDRGALC2TlGYZUlHlM= Subject key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1521A697AC812ADEDFE131F00312DF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209528 IP: 45.135.64.0/22 IP: 185.162.136.0/22 IP: 2a09:2bc0::/32 IP: 2a0e:8940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:21:a6:97:ac:81:2a:de:df:e1:31:f0:03:12:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:16:51:85:27:7e:80:98:89:18:33:53:8f: 84:34:10:db:c7:28:ea:20:1d:58:fa:59:3c:63:e4: 64:05:db:17:9e:ec:73:e7:4a:50:4b:7b:c8:db:81: 54:38:c9:47:e2:da:62:d4:26:a0:2e:e8:37:bd:65: bf:8c:96:49:fc:7a:e7:78:29:d6:10:15:ab:e6:d6: a2:73:5e:f3:37:72:da:ad:12:27:15:14:bb:74:84: 97:8a:6e:81:73:10:47:a5:98:b7:bf:85:94:f3:42: ce:61:21:45:e4:f0:a2:8e:60:d2:74:b6:09:43:91: 43:31:7e:f4:d1:b3:73:a5:41:c8:63:6d:56:24:5c: be:21:ad:01:1a:98:39:ca:88:45:5a:ae:2f:81:c2: 40:c7:c6:ff:d8:d1:aa:bb:4c:ef:04:b9:80:bd:76: 73:7d:6e:62:6f:c6:13:85:8c:dc:3f:c1:0d:34:e0: b2:20:47:96:06:f1:8a:7f:0e:4c:8d:4a:94:3e:3b: 5d:d8:64:6b:36:a4:f6:37:cb:5b:65:21:d3:ae:a5: 3b:f1:5c:38:cd:39:d0:94:f1:ae:f8:b9:fc:a0:56: 22:b2:d8:87:24:cb:a9:78:b0:a8:ba:e7:e1:53:30: 7f:79:aa:22:e2:89:38:9d:a8:ce:8c:f8:d8:fe:b4: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.64.0/22 185.162.136.0/22 IPv6: 2a09:2bc0::/32 2a0e:8940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209528 Signature Algorithm: sha256WithRSAEncryption 89:45:52:61:bf:9c:69:1d:3f:30:7a:c9:b1:43:be:a8:72:64: d1:f6:57:bf:2c:55:ef:05:89:7d:98:41:d0:70:72:bb:54:b7: 0f:e9:16:47:10:06:68:48:ef:3a:94:8d:bd:23:a4:fb:d3:17: b3:50:6c:76:73:84:30:4b:f0:01:c3:ff:8d:16:46:86:3a:2f: a5:25:3c:3c:c5:f3:c1:b7:77:c4:45:cc:45:ee:85:b8:86:ff: 6e:01:05:68:2a:23:49:22:71:70:d5:df:03:76:1b:ab:df:ef: 25:f9:c2:7d:a5:a0:30:af:fa:9f:83:32:3f:f9:bb:d4:a0:62: 3e:28:cd:f2:4a:1d:91:a6:46:1a:b5:70:e0:6b:08:16:ce:e5: ba:9c:18:c4:46:4b:05:6e:22:e2:df:9e:da:2b:91:79:97:e2: d0:b2:93:68:73:8a:54:00:71:ef:54:42:a4:3a:96:f8:f2:2d: 4d:51:23:70:40:21:78:65:f7:38:32:22:9f:f9:85:c1:62:b8: ee:10:21:a6:91:9d:6c:05:68:be:21:0f:d6:a1:d6:8e:b9:51: ec:95:a6:b1:f5:9c:f0:f9:20:81:01:54:ad:ad:15:21:21:91: 04:2b:5f:78:98:4c:1a:69:1d:a6:63:e3:85:1a:42:4c:2d:d4: 4c:a5:bb:0e -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt/FSGml6yBKt7f4THwAxLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDFjMTA1N2JjYjlkMWUwZDE1NzQ4YjdmMzJjNTlmOGM3YjcyYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoMWUYUnfoCYiRgzU4+ENBDbxyjq IB1Y+lk8Y+RkBdsXnuxz50pQS3vI24FUOMlH4tpi1CagLug3vWW/jJZJ/HrneCnW EBWr5taic17zN3LarRInFRS7dISXim6BcxBHpZi3v4WU80LOYSFF5PCijmDSdLYJ Q5FDMX700bNzpUHIY21WJFy+Ia0BGpg5yohFWq4vgcJAx8b/2NGqu0zvBLmAvXZz fW5ib8YThYzcP8ENNOCyIEeWBvGKfw5MjUqUPjtd2GRrNqT2N8tbZSHTrqU78Vw4 zTnQlPGu+Ln8oFYistiHJMupeLCouufhUzB/eaoi4ok4najOjPjY/rTN+QIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFFAcEFe8udHg0VdIt/MsWfjHtypOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2JhM2Zh MS1mOWQwLTQwOTctYmRjOS1kNzE3ZTRkZmNiM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYmEzZmEx LWY5ZDAtNDA5Ny1iZGM5LWQ3MTdlNGRmY2IzZC8xL1VCd1FWN3k1MGVEUlYwaTM4 eXhaLU1lM0trNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCLYdAAwQCuaKIMBQEAgACMA4DBQAqCSvAAwUD Kg6JQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDMngwDQYJKoZIhvcNAQELBQAD ggEBAIlFUmG/nGkdPzB6ybFDvqhyZNH2V78sVe8FiX2YQdBwcrtUtw/pFkcQBmhI 7zqUjb0jpPvTF7NQbHZzhDBL8AHD/40WRoY6L6UlPDzF88G3d8RFzEXuhbiG/24B BWgqI0kicXDV3wN2G6vf7yX5wn2loDCv+p+DMj/5u9SgYj4ozfJKHZGmRhq1cOBr CBbO5bqcGMRGSwVuIuLfntorkXmX4tCyk2hzilQAce9UQqQ6lvjyLU1RI3BAIXhl 9zgyIp/5hcFiuO4QIaaRnWwFaL4hD9ah1o65UeyVprH1nPD5IIEBVK2tFSEhkQQr X3iYTBppHaZj44UaQkwt1Eyluw4= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:08 2026 by rpki-client