This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer (raw, json) Hash identifier: 9ZoszoeFxGV/diNkTqz+x+dcffIdv9jxLdDXTmzhgXA= Subject key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2A00A5717D722C8DA2F079EE76501 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199570 IP: 45.143.44.0/22 IP: 92.243.83.0/24 IP: 149.62.33.0/24 IP: 188.213.232.0/24 IP: 2a13:ad00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a0:0a:57:17:d7:22:c8:da:2f:07:9e:e7:65:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:0e:86:19:2f:93:d5:2c:90:a3:a3:dd:f0: ed:bb:1c:04:1d:a7:96:1f:39:5a:63:d6:76:fc:8f: 39:64:6f:85:d0:89:76:00:d0:c3:ba:34:03:49:c5: 79:15:fe:64:67:f3:6e:37:ec:12:ad:d7:75:1d:a3: ab:ed:be:30:fd:f7:0f:73:24:a3:01:c7:ce:09:86: 6b:7f:ba:2d:05:61:eb:7e:3c:29:bf:c2:dc:9e:69: cc:a3:85:9a:bb:08:02:5d:7b:b4:77:37:20:0a:2d: 51:c8:9f:dc:30:95:c9:48:62:9e:4a:1e:fd:0a:a7: fa:a6:c2:ba:f6:af:86:69:fe:58:6d:32:73:87:f5: 23:50:21:06:d8:d4:4c:84:91:6a:66:0b:5d:35:1a: 37:a4:60:b1:ec:67:bc:40:89:8e:14:c4:f3:2d:9c: b3:41:2e:0b:66:00:65:53:2c:1e:30:7d:49:dd:2a: 5c:d2:e0:1f:ce:c6:86:f3:66:5b:f0:23:48:4f:be: c2:11:88:2e:55:04:4e:02:a8:97:a9:9f:4c:de:30: 07:a2:73:4b:6a:24:8f:ee:8e:10:f5:e0:65:b6:03: b2:0e:5a:5c:9b:6b:8d:74:03:2e:c7:5a:e7:dd:86: 0d:3b:ed:7e:f2:04:ce:a7:ba:0c:e0:d2:68:76:0f: 5a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.44.0/22 92.243.83.0/24 149.62.33.0/24 188.213.232.0/24 IPv6: 2a13:ad00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199570 Signature Algorithm: sha256WithRSAEncryption 38:67:39:dc:a6:6c:6b:1e:2e:1c:e4:5e:d6:04:89:d0:09:9f: 45:e5:6e:9d:3a:03:a6:71:15:bc:78:62:b7:4c:1a:08:ee:66: aa:11:a4:85:bd:2f:59:f0:9d:09:32:00:41:49:d3:46:f2:c6: 3b:b3:5f:3b:22:11:77:c1:74:3d:b5:a4:a5:92:5d:73:5e:b5: b9:e5:85:33:27:64:1d:8a:8a:0b:2c:a7:96:10:9f:aa:c2:d1: c5:4a:38:6e:b4:f3:e0:6c:a3:4d:53:74:69:d0:15:fd:5a:da: a9:07:05:4d:ec:48:67:02:22:e8:2f:b3:3c:da:98:d5:e6:82: 13:db:4a:cd:db:05:38:f8:17:c2:a2:d7:6e:81:7e:f7:bd:1a: 3e:35:fa:24:85:02:c4:a1:95:b5:f7:d6:a9:13:57:91:6e:32: 97:f6:94:60:c2:7a:d7:45:a0:bb:90:96:9d:c2:9f:ca:71:d9: a9:cc:a3:88:41:9c:ab:7e:84:5f:d7:fd:4c:dd:a4:8d:69:37: 2c:92:fd:cd:bc:50:a6:40:aa:fd:0e:c1:a4:39:5b:6b:73:4d: e5:df:e1:20:b2:a0:d4:c1:1b:4c:25:db:0b:af:f1:17:9f:9d: 69:32:66:03:11:c5:76:bd:cf:81:29:14:4a:b9:68:5f:97:3b: e8:28:91:4c -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt4oqAKVxfXIsjaLwee52UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzFkNTVhODY5ZjEwNWFmNmFiY2RmYTBjYTQwNmFmMWY0OWIyNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui8Ohhkvk9UskKOj3fDtuxwEHaeW HzlaY9Z2/I85ZG+F0Il2ANDDujQDScV5Ff5kZ/NuN+wSrdd1HaOr7b4w/fcPcySj AcfOCYZrf7otBWHrfjwpv8LcnmnMo4WauwgCXXu0dzcgCi1RyJ/cMJXJSGKeSh79 Cqf6psK69q+Gaf5YbTJzh/UjUCEG2NRMhJFqZgtdNRo3pGCx7Ge8QImOFMTzLZyz QS4LZgBlUyweMH1J3Spc0uAfzsaG82Zb8CNIT77CEYguVQROAqiXqZ9M3jAHonNL aiSP7o4Q9eBltgOyDlpcm2uNdAMux1rn3YYNO+1+8gTOp7oM4NJodg9aHwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFFMdVahp8QWvarzfoMpAavH0myTxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzL2VlYzJj ZC0zNmRlLTRmOTYtOWZiMi00ZGMxZWY4OTA0NGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvZWVjMmNk LTM2ZGUtNGY5Ni05ZmIyLTRkYzFlZjg5MDQ0Yi8xL1V4MVZxR254QmE5cXZOLWd5 a0JxOGZTYkpQRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLY8sAwQAXPNTAwQAlT4hAwQAvNXoMA0EAgAC MAcDBQMqE60AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLkjANBgkqhkiG9w0B AQsFAAOCAQEAOGc53KZsax4uHORe1gSJ0AmfReVunToDpnEVvHhit0waCO5mqhGk hb0vWfCdCTIAQUnTRvLGO7NfOyIRd8F0PbWkpZJdc161ueWFMydkHYqKCyynlhCf qsLRxUo4brTz4GyjTVN0adAV/VraqQcFTexIZwIi6C+zPNqY1eaCE9tKzdsFOPgX wqLXboF+970aPjX6JIUCxKGVtffWqRNXkW4yl/aUYMJ610Wgu5CWncKfynHZqcyj iEGcq36EX9f9TN2kjWk3LJL9zbxQpkCq/Q7BpDlba3NN5d/hILKg1MEbTCXbC6/x F5+daTJmAxHFdr3PgSkUSrloX5c76CiRTA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:30 2026 by rpki-client