This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cUnH5wIxqJKP1dBDV6zrbMD0pps.cer File: cUnH5wIxqJKP1dBDV6zrbMD0pps.cer (raw, json) Hash identifier: /SNvrVACDbVMQWaTKj99BbWNdcCzn3WT0XRtjLBjW34= Subject key identifier: 71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B30DE543DB44ECA98CE0D7B006FC0EAD4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 09:50:35 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 202850 IP: 185.152.168.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:de:54:3d:b4:4e:ca:98:ce:0d:7b:00:6f:c0:ea:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 09:50:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7149c7e70231a8928fd5d04357aceb6cc0f4a69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:45:68:14:5d:af:5a:5d:46:7c:75:c4:fc: ee:2d:5f:55:e5:36:94:0a:6e:f0:a3:e5:2e:8d:22: 72:15:6c:b2:71:e5:c2:f9:71:6e:a3:81:60:65:b4: 07:1d:9a:f6:4b:c7:4f:2a:30:49:21:eb:50:ea:e9: 17:89:ac:bb:ee:36:b9:5d:26:26:d5:ed:b5:60:0d: 23:48:f8:97:42:f0:4b:75:65:10:87:b4:04:9e:c5: 5e:08:1b:15:41:bc:14:ad:94:87:bf:cd:fd:ee:3c: 33:6c:92:a5:bc:62:3d:f0:66:e2:4f:d7:64:09:fa: c8:c9:55:7c:4c:4f:ef:d0:6e:e2:d4:d0:2d:08:99: a8:47:c6:ba:c1:6f:99:bd:34:e5:33:70:dd:0c:27: 56:62:a6:a6:14:8a:10:f8:19:71:03:b5:ed:4f:49: 4f:c2:ec:9b:08:e1:3c:07:65:14:e5:6f:93:69:15: 2e:b6:c2:7c:62:5d:ed:0e:d5:65:0a:21:8a:e7:81: 92:1e:24:0a:ad:0a:10:cb:3c:03:fd:73:f3:3f:b8: d5:2f:21:06:0a:a0:33:4b:7a:e1:58:e9:c6:5c:95: b4:73:76:b7:c7:a1:a7:bd:b1:2f:fd:40:2a:16:cb: 98:f4:48:76:60:e1:41:3f:51:64:8d:35:31:69:56: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:49:C7:E7:02:31:A8:92:8F:D5:D0:43:57:AC:EB:6C:C0:F4:A6:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fbe883-03af-4172-9081-8c994d741956/1/cUnH5wIxqJKP1dBDV6zrbMD0pps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.168.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202850 Signature Algorithm: sha256WithRSAEncryption 9b:2c:5f:c0:22:05:b2:8d:fa:23:8f:0f:7a:95:27:c2:40:6b: 64:c5:26:0d:1e:fe:c8:97:19:a6:83:a9:b8:5c:b8:dc:f2:ad: 76:5f:9b:79:4f:29:06:a2:a3:de:89:03:b1:41:83:87:c1:87: 41:e8:df:1a:ea:01:0a:d7:e6:8a:48:36:42:7e:22:ba:d7:84: 70:a1:44:a8:23:2a:f4:c8:a6:3b:1f:79:4e:7c:fa:bb:2d:31: 6e:0b:db:54:52:d6:78:86:0b:de:1a:89:99:f3:07:26:8b:27: 7c:00:a8:af:5f:af:c1:b9:28:ea:c6:e3:de:0f:1c:25:c4:d2: 87:42:10:cf:c8:28:f3:39:b3:a5:95:bb:dc:bf:a8:9d:e6:f7: 27:7b:58:84:72:f1:91:03:20:6c:8d:22:e0:c7:8c:4a:8f:f6: b1:80:ba:ac:8f:51:3c:0c:1a:8a:86:43:e6:d0:34:80:ed:73: d5:94:72:4d:e4:7e:fe:08:5b:00:f1:32:80:de:26:36:80:bd: 25:7f:d3:ce:b3:a6:fa:f8:ec:cf:29:35:56:93:03:87:7d:2c: 2a:9d:0f:a5:5a:89:88:05:c2:67:ed:da:13:39:f2:8e:8a:ff: b1:55:6e:b6:1d:10:15:89:64:4e:44:a9:38:92:9f:0c:07:d5: 59:26:ad:48 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZsw3lQ9tE7KmM4NewBvwOrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MDk1MDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTQ5YzdlNzAyMzFhODkyOGZkNWQwNDM1N2FjZWI2Y2MwZjRhNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMJFaBRdr1pdRnx1xPzuLV9V5TaU Cm7wo+UujSJyFWyyceXC+XFuo4FgZbQHHZr2S8dPKjBJIetQ6ukXiay77ja5XSYm 1e21YA0jSPiXQvBLdWUQh7QEnsVeCBsVQbwUrZSHv8397jwzbJKlvGI98GbiT9dk CfrIyVV8TE/v0G7i1NAtCJmoR8a6wW+ZvTTlM3DdDCdWYqamFIoQ+BlxA7XtT0lP wuybCOE8B2UU5W+TaRUutsJ8Yl3tDtVlCiGK54GSHiQKrQoQyzwD/XPzP7jVLyEG CqAzS3rhWOnGXJW0c3a3x6GnvbEv/UAqFsuY9Eh2YOFBP1FkjTUxaVaqDQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHFJx+cCMaiSj9XQQ1es62zA9KabMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2ZiZTg4 My0wM2FmLTQxNzItOTA4MS04Yzk5NGQ3NDE5NTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZmJlODgz LTAzYWYtNDE3Mi05MDgxLThjOTk0ZDc0MTk1Ni8xL2NVbkg1d0l4cUpLUDFkQkRW NnpyYk1EMHBwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuZioMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMYYjANBgkqhkiG9w0BAQsFAAOCAQEAmyxfwCIFso36I48PepUnwkBrZMUmDR7+ yJcZpoOpuFy43PKtdl+beU8pBqKj3okDsUGDh8GHQejfGuoBCtfmikg2Qn4iuteE cKFEqCMq9MimOx95Tnz6uy0xbgvbVFLWeIYL3hqJmfMHJosnfACor1+vwbko6sbj 3g8cJcTSh0IQz8go8zmzpZW73L+oneb3J3tYhHLxkQMgbI0i4MeMSo/2sYC6rI9R PAwaioZD5tA0gO1z1ZRyTeR+/ghbAPEygN4mNoC9JX/TzrOm+vjszyk1VpMDh30s Kp0PpVqJiAXCZ+3aEznyjor/sVVuth0QFYlkTkSpOJKfDAfVWSatSA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:26 2025 by rpki-client