This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer (raw, json) Hash identifier: J50Hpf7actxioNb4xXTW5eQVEQkcYc5Q/GINh7mhCLs= Subject key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1299951F7FCD29C00E236215991024 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20766 AS: 35616 AS: 62242 IP: 45.94.16.0/22 IP: 80.67.160.0/19 IP: 185.57.124.0/22 IP: 193.23.28.0/22 IP: 2001:910::/29 IP: 2a04:9ac0::/29 IP: 2a0f:6780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:99:95:1f:7f:cd:29:c0:0e:23:62:15:99:10:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9b:0f:44:fc:25:2f:b6:a7:2e:1b:b9:a2:4f: 2a:1d:d8:98:94:a0:ff:d5:1c:84:5f:2a:2c:e7:4e: 21:93:35:fd:5a:50:52:7e:d3:39:9d:22:f6:4b:21: e6:39:3e:dd:7e:e6:c2:53:bf:4f:60:18:da:08:0b: 15:2b:80:44:79:0b:85:bf:11:47:68:fe:62:f4:5c: ab:24:ff:68:a0:d8:01:a4:c4:89:1b:a6:e1:31:d1: 41:28:3f:ed:16:92:20:42:1d:70:d7:37:c6:11:64: de:0c:fd:3f:7b:a2:ae:15:8d:b4:14:b3:c4:e9:5c: 54:e5:d1:6d:fa:0a:b7:22:f5:06:68:23:a8:b0:55: 77:b1:6c:4e:f5:70:db:ff:f2:85:04:ea:3b:c8:73: 2e:6a:56:11:86:7c:8d:2f:0b:c2:0d:32:05:6a:b8: 1d:e6:dd:30:0e:43:6d:80:98:79:35:c9:a5:fe:ac: c1:82:b9:cf:62:6e:b6:51:2d:b8:f0:1a:be:55:48: 9c:54:37:3a:0b:7a:65:8a:5b:10:9a:ec:b8:85:e9: b3:05:a1:a1:d6:da:7d:75:24:36:87:47:c8:34:20: be:98:90:62:da:97:62:5f:81:b5:5b:04:d2:6e:cd: b5:d9:d2:c0:f6:82:6d:ff:06:74:cb:79:c5:55:e4: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.16.0/22 80.67.160.0/19 185.57.124.0/22 193.23.28.0/22 IPv6: 2001:910::/29 2a04:9ac0::/29 2a0f:6780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20766 35616 62242 Signature Algorithm: sha256WithRSAEncryption 99:5f:21:7d:85:c8:00:ee:11:c3:1c:ef:14:d5:78:5e:15:4f: fe:be:e3:fb:54:e9:dc:f4:8a:3c:c1:6e:4a:a6:82:8a:b3:c9: 8e:30:ad:b7:bd:ce:68:55:76:25:1e:13:41:03:af:b3:da:62: 0c:03:36:da:33:55:30:2b:43:6d:6a:55:8e:1f:6f:b1:43:fc: 32:22:b2:9c:b5:43:e1:42:be:9a:a5:36:d4:41:4c:d2:b9:ab: c0:4d:a8:cc:39:c4:9a:49:e8:e6:26:dd:6b:8c:2b:a5:c4:63: fc:c5:d2:26:a2:f3:35:b0:b5:e8:7c:5c:75:ae:c2:ea:6e:c8: 9b:f5:b2:09:79:02:72:19:7c:01:82:db:4c:34:06:a9:e3:3f: 3e:82:f3:d4:a8:87:30:d7:a9:d8:2a:90:9c:20:67:4d:29:0f: 7e:36:5c:3a:26:26:21:d2:2f:40:51:f0:3c:2b:a1:88:54:74: 3f:ec:eb:8d:17:c8:2d:28:ee:58:89:d8:05:75:83:2c:14:e4: 48:2a:05:f2:1f:34:ad:48:b3:33:6e:ef:e1:ae:58:37:57:fb: 38:d8:14:06:75:81:73:e3:43:0a:75:56:fb:24:7a:d3:20:56: 56:58:5a:cf:f3:b0:57:fd:ac:b4:ef:bd:63:5a:35:11:54:53: 41:f1:05:9d -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt8EpmVH3/NKcAOI2IVmRAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmVkMmZiYjcyMTNmYmYzMmFkNGMwODdmOGIwYjIyY2VjZWY0ZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JsPRPwlL7anLhu5ok8qHdiYlKD/ 1RyEXyos504hkzX9WlBSftM5nSL2SyHmOT7dfubCU79PYBjaCAsVK4BEeQuFvxFH aP5i9FyrJP9ooNgBpMSJG6bhMdFBKD/tFpIgQh1w1zfGEWTeDP0/e6KuFY20FLPE 6VxU5dFt+gq3IvUGaCOosFV3sWxO9XDb//KFBOo7yHMualYRhnyNLwvCDTIFargd 5t0wDkNtgJh5Ncml/qzBgrnPYm62US248Bq+VUicVDc6C3plilsQmuy4hemzBaGh 1tp9dSQ2h0fINCC+mJBi2pdiX4G1WwTSbs212dLA9oJt/wZ0y3nFVeS+8QIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFHLtL7tyE/vzKtTAh/iwsizs70/qMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2U1YTg5 Mi0yM2Y1LTQ5ZmEtYjZhOS1hNjUyMzNiM2U5NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZTVhODky LTIzZjUtNDlmYS1iNmE5LWE2NTIzM2IzZTk3NS8xL2N1MHZ1M0lULV9NcTFNQ0gt TEN5TE96dlQtby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME4GCCsGAQUF BwEHAQH/BD8wPTAeBAIAATAYAwQCLV4QAwQFUEOgAwQCuTl8AwQCwRccMBsEAgAC MBUDBQMgAQkQAwUDKgSawAMFAyoPZ4AwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgIC UR4CAwCLIAIDAPMiMA0GCSqGSIb3DQEBCwUAA4IBAQCZXyF9hcgA7hHDHO8U1Xhe FU/+vuP7VOnc9Io8wW5KpoKKs8mOMK23vc5oVXYlHhNBA6+z2mIMAzbaM1UwK0Nt alWOH2+xQ/wyIrKctUPhQr6apTbUQUzSuavATajMOcSaSejmJt1rjCulxGP8xdIm ovM1sLXofFx1rsLqbsib9bIJeQJyGXwBgttMNAap4z8+gvPUqIcw16nYKpCcIGdN KQ9+Nlw6JiYh0i9AUfA8K6GIVHQ/7OuNF8gtKO5YidgFdYMsFORIKgXyHzStSLMz bu/hrlg3V/s42BQGdYFz40MKdVb7JHrTIFZWWFrP87BX/ay0771jWjURVFNB8QWd -----END CERTIFICATE-----Generated at Thu Jan 29 12:01:42 2026 by rpki-client