This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer File: UuQfSAbOSPw5iEI4Hy_74EspSBg.cer (raw, json) Hash identifier: 7qRNZs4ZmadHj5bgR0r9kWJ365LFw3PA25K4+gHTCeo= Subject key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775947B09F0E176DB8E37469070E2246 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41247 IP: 91.222.184.0/24 IP: 91.222.187.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:47:b0:9f:0e:17:6d:b8:e3:74:69:07:0e:22:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52e41f4806ce48fc398842381f2ffbe04b294818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:da:c2:45:90:c9:e0:d1:c4:5b:cd:e9:01: 42:89:79:b9:34:73:1a:37:f7:43:9d:f8:0a:08:94: c9:17:c9:bf:ee:02:d2:22:a1:98:b2:cf:b4:ec:8d: 42:ec:04:03:e2:d8:b4:91:ea:38:8f:a3:7e:24:7c: 72:05:87:43:f1:45:48:12:5f:50:e7:43:7b:46:ef: 3d:14:67:97:8b:7c:46:f7:13:13:a3:2c:5c:2b:e0: 82:e6:87:de:46:ce:a2:d9:05:09:85:71:61:fd:54: 77:74:6d:92:8f:8d:f7:16:da:56:d7:a8:a5:a8:15: fd:00:9d:a3:b5:e1:d1:7d:b8:fe:86:0d:5f:51:1a: 05:4e:9a:da:98:0a:32:bb:38:9c:04:3e:2a:3c:39: 1f:66:c6:c0:f1:3f:18:f1:f1:0f:8a:5d:dc:f1:9f: bc:81:c5:9a:e3:1d:84:99:cb:f9:76:3f:98:36:ca: 8a:50:89:fb:69:b3:50:94:94:cf:a9:cb:72:6e:c4: 06:65:40:57:ae:19:61:bd:82:e0:f9:06:1a:6a:47: f4:f8:77:f5:f5:fc:d4:fc:de:ec:1c:04:8e:cf:8f: d5:ab:6b:30:a3:6a:27:a1:12:f9:b5:2a:8c:1c:fa: 90:73:b9:1c:a2:c4:87:e8:02:c9:56:3b:90:4a:8f: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.184.0/24 91.222.187.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41247 Signature Algorithm: sha256WithRSAEncryption 00:f9:32:3f:cd:85:56:94:1d:f2:9e:98:08:57:85:ab:91:89: 4b:6c:be:88:84:75:0a:f6:69:e9:60:c8:50:c5:6c:09:70:26: 30:c7:dd:e0:52:1b:74:0c:30:65:6d:99:dd:7a:9a:cb:61:c8: 36:45:47:a8:6e:d3:19:c8:0b:66:f9:5c:b1:a7:8b:7f:e4:ba: 2d:24:28:e4:d4:6b:cd:0d:c9:da:d9:ad:1d:c5:a7:ef:65:67: b5:c7:c7:9c:80:b9:b8:93:61:60:e7:d0:3e:0e:d5:62:1e:b6: 17:d1:25:1c:ed:90:43:50:56:ef:99:47:2f:21:19:23:b8:a5: aa:ba:43:8c:87:8b:67:d2:ba:65:0f:3c:7c:05:5f:49:d3:c4: 78:ca:61:b5:8b:87:cd:f2:c5:cf:9f:e3:1e:ce:3e:d2:8a:cb: 5c:b9:ef:c0:ab:87:38:2b:21:78:57:6a:73:3b:45:d4:e1:77: ea:68:25:59:58:d1:e2:dd:60:9e:cf:df:4f:3a:bb:3a:bf:6d: 97:0b:d3:4a:fa:25:3b:94:4a:39:30:a6:c1:aa:e1:e5:e7:65: 9f:d8:a6:e1:2f:b2:b7:1d:d9:44:ba:13:31:93:ec:4d:60:f1: ee:f2:82:48:e5:ee:4c:bd:67:19:2f:15:7a:22:5d:12:0b:14: fb:2d:e4:f2 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt3WUewnw4XbbjjdGkHDiJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmU0MWY0ODA2Y2U0OGZjMzk4ODQyMzgxZjJmZmJlMDRiMjk0ODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8zawkWQyeDRxFvN6QFCiXm5NHMa N/dDnfgKCJTJF8m/7gLSIqGYss+07I1C7AQD4ti0keo4j6N+JHxyBYdD8UVIEl9Q 50N7Ru89FGeXi3xG9xMToyxcK+CC5ofeRs6i2QUJhXFh/VR3dG2Sj433FtpW16il qBX9AJ2jteHRfbj+hg1fURoFTpramAoyuzicBD4qPDkfZsbA8T8Y8fEPil3c8Z+8 gcWa4x2Emcv5dj+YNsqKUIn7abNQlJTPqctybsQGZUBXrhlhvYLg+QYaakf0+Hf1 9fzU/N7sHASOz4/Vq2swo2onoRL5tSqMHPqQc7kcosSH6ALJVjuQSo9oewIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFFLkH0gGzkj8OYhCOB8v++BLKUgYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzA0MDhm Ny03NmEyLTQ5YzctYTAyMi1kZWI0NGI4NjlkMTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDQwOGY3 LTc2YTItNDljNy1hMDIyLWRlYjQ0Yjg2OWQxOS8xL1V1UWZTQWJPU1B3NWlFSTRI eV83NEVzcFNCZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW964AwQAW967MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwChHzANBgkqhkiG9w0BAQsFAAOCAQEAAPkyP82FVpQd8p6YCFeFq5GJ S2y+iIR1CvZp6WDIUMVsCXAmMMfd4FIbdAwwZW2Z3Xqay2HINkVHqG7TGcgLZvlc saeLf+S6LSQo5NRrzQ3J2tmtHcWn72VntcfHnIC5uJNhYOfQPg7VYh62F9ElHO2Q Q1BW75lHLyEZI7ilqrpDjIeLZ9K6ZQ88fAVfSdPEeMphtYuHzfLFz5/jHs4+0orL XLnvwKuHOCsheFdqcztF1OF36mglWVjR4t1gns/fTzq7Or9tlwvTSvolO5RKOTCm warh5edln9im4S+ytx3ZRLoTMZPsTWDx7vKCSOXuTL1nGS8VeiJdEgsU+y3k8g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:19 2026 by rpki-client