This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer File: UDUgXD0BcT-di1sA41OWGbIzUjI.cer (raw, json) Hash identifier: wjNxZZuf5Jn3zGY8+SuWfG7hIrC6Pk0zSwJUeO+tQ7Y= Subject key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775917E995518C1E9F03B8F8D90D4350 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203622 IP: 37.18.58.0/24 IP: 185.26.184.0/22 IP: 185.129.0.0/22 IP: 2a0f:7040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:17:e9:95:51:8c:1e:9f:03:b8:f8:d9:0d:43:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5035205c3d01713f9d8b5b00e3539619b2335232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:52:c7:8c:e5:4d:7e:e1:ce:52:c3:a0:55: a5:08:9c:85:02:a5:19:12:6c:8b:bd:37:04:db:92: 53:3f:5c:b5:79:1b:3f:8a:91:2f:5e:81:c2:b0:e2: b3:6a:c9:ee:e6:81:15:60:8d:8a:c5:af:da:51:91: 2d:bf:91:a0:6b:0b:4b:f4:b0:65:c2:e1:0e:55:59: 3b:3c:b4:a4:8b:38:29:6d:fb:3b:c9:3c:ea:e5:8b: d5:a4:b0:4c:36:8d:9e:7d:0a:02:15:be:12:74:14: d9:43:7a:19:ff:1b:b2:a0:07:95:fe:28:a3:a7:6f: a6:20:4e:95:5b:7a:f5:e6:62:87:60:ba:40:95:38: 73:bc:d2:5d:05:84:ee:89:96:66:bd:96:43:61:56: bd:02:9f:99:ba:44:37:db:b1:07:0f:06:df:df:b9: d1:0f:29:bf:30:dd:7a:a8:d2:b8:d8:2b:7c:56:d3: 34:16:11:06:1b:d9:ef:de:03:b2:34:37:22:21:fe: 1a:98:fc:53:02:bd:1c:e6:2d:e8:70:47:f1:66:ec: 88:21:ef:61:16:23:9c:3d:51:8c:a7:89:08:63:6a: ff:80:4f:21:5c:4d:18:de:8f:3f:32:8e:8b:e1:2b: 97:bf:45:75:63:de:6f:f7:91:b9:fb:da:4b:50:3a: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.58.0/24 185.26.184.0/22 185.129.0.0/22 IPv6: 2a0f:7040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203622 Signature Algorithm: sha256WithRSAEncryption 16:65:83:15:43:20:56:69:6b:f5:6e:d3:6a:d2:c3:cd:1a:91: ee:e3:91:1f:7a:82:6f:91:5e:dd:1a:f3:fc:47:c4:4b:2f:c0: e4:f8:20:dc:d2:c6:f5:6d:d9:a0:f2:fd:ba:92:99:3c:03:b0: 7b:46:a0:b7:1f:b7:40:cd:18:c0:ff:a3:57:5f:64:42:ee:e0: 5f:b6:28:7d:60:01:40:0e:94:06:5b:67:14:9a:1c:30:5b:e8: 07:97:8e:fa:21:92:15:ca:9d:95:62:19:55:8b:b7:0c:af:47: 30:0e:c3:42:7d:6a:7d:72:bf:dc:41:19:33:0c:d6:0d:0a:27: 48:6b:85:6a:3f:38:43:51:32:e9:92:25:54:2f:47:c9:07:86: 85:db:f6:4e:87:be:fd:9b:fc:15:5a:e9:bf:95:7a:5c:1b:22: 7b:13:8b:7d:7d:89:c5:b5:47:8c:12:90:8b:c5:c7:dc:70:e7: e5:63:39:24:87:59:b6:5a:cf:25:fd:a1:87:19:38:b8:ef:4b: a3:c5:4b:0b:53:32:4b:2a:24:de:64:be:19:f3:61:e7:e1:76: 95:17:ad:29:1b:19:cb:20:71:f5:f2:c5:a8:b2:4c:00:a6:08: 23:9f:e8:0e:ba:c5:cf:45:a1:6f:b3:9c:1e:20:f4:24:e9:ef: f3:dd:5b:c9 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt3WRfplVGMHp8DuPjZDUNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDM1MjA1YzNkMDE3MTNmOWQ4YjViMDBlMzUzOTYxOWIyMzM1MjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolVSx4zlTX7hzlLDoFWlCJyFAqUZ EmyLvTcE25JTP1y1eRs/ipEvXoHCsOKzasnu5oEVYI2Kxa/aUZEtv5GgawtL9LBl wuEOVVk7PLSkizgpbfs7yTzq5YvVpLBMNo2efQoCFb4SdBTZQ3oZ/xuyoAeV/iij p2+mIE6VW3r15mKHYLpAlThzvNJdBYTuiZZmvZZDYVa9Ap+ZukQ327EHDwbf37nR Dym/MN16qNK42Ct8VtM0FhEGG9nv3gOyNDciIf4amPxTAr0c5i3ocEfxZuyIIe9h FiOcPVGMp4kIY2r/gE8hXE0Y3o8/Mo6L4SuXv0V1Y95v95G5+9pLUDqHFQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFFA1IFw9AXE/nYtbAONTlhmyM1IyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzk3Yjlj MS1jMWRlLTQxYWMtYTljYi0xNjAyZDZhZDE0MWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvOTdiOWMx LWMxZGUtNDFhYy1hOWNiLTE2MDJkNmFkMTQxYS8xL1VEVWdYRDBCY1QtZGkxc0E0 MU9XR2JJelVqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAJRI6AwQCuRq4AwQCuYEAMA0EAgACMAcDBQAq D3BAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMbZjANBgkqhkiG9w0BAQsFAAOC AQEAFmWDFUMgVmlr9W7TatLDzRqR7uORH3qCb5Fe3Rrz/EfESy/A5Pgg3NLG9W3Z oPL9upKZPAOwe0agtx+3QM0YwP+jV19kQu7gX7YofWABQA6UBltnFJocMFvoB5eO +iGSFcqdlWIZVYu3DK9HMA7DQn1qfXK/3EEZMwzWDQonSGuFaj84Q1Ey6ZIlVC9H yQeGhdv2Toe+/Zv8FVrpv5V6XBsiexOLfX2JxbVHjBKQi8XH3HDn5WM5JIdZtlrP Jf2hhxk4uO9Lo8VLC1MySyok3mS+GfNh5+F2lRetKRsZyyBx9fLFqLJMAKYII5/o DrrFz0Whb7OcHiD0JOnv891byQ== -----END CERTIFICATE-----Generated at Tue Feb 3 22:52:03 2026 by rpki-client