This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer File: cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer (raw, json) Hash identifier: MnHRQCPyx2BxaWtDl3aP9AfYH4b7rELa3rotNCwQO7A= Subject key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA364B75EAF1805D5A9F632E4B6E22 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211686 IP: 185.15.199.0/24 IP: 185.95.1.0/24 IP: 194.213.25.0/24 IP: 2a13:e880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:36:4b:75:ea:f1:80:5d:5a:9f:63:2e:4b:6e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d1:b8:2a:39:28:66:b6:04:b4:29:70:81:d5: 65:a4:47:f6:83:ad:c8:60:00:d9:28:f5:d5:87:c7: a6:b2:1c:89:6e:82:62:84:11:42:21:51:b7:07:b8: 24:84:4b:65:8d:a4:9a:17:64:f9:f8:5e:4b:fd:2b: c1:95:71:6c:fd:62:20:dc:6f:5a:d4:0d:d6:da:61: 09:92:ef:74:c0:da:6a:48:7c:a3:6e:2f:32:36:76: 50:b9:0e:b9:02:c8:b2:6f:c7:9c:62:8e:1d:12:cb: 31:1c:01:30:94:f9:81:94:d4:e1:c4:29:1d:d1:20: 86:d3:1e:8f:82:a1:0a:2b:04:3c:a9:66:8a:f1:8b: 19:94:2d:f8:3a:89:cb:01:94:35:e9:ff:9a:e2:bc: ca:49:96:4b:d9:48:f0:82:93:78:c3:b5:e0:5a:cb: e6:72:1e:61:b3:98:cd:00:25:f7:98:32:7b:7f:82: 39:fa:f9:83:f3:02:32:56:36:78:04:06:f0:d2:bf: 3d:27:9d:02:36:01:5d:77:ac:ff:2c:d9:c7:e1:f3: bc:be:f5:2c:f6:d7:24:47:14:f0:d9:70:7c:49:22: cd:fd:b1:6a:b8:82:2b:e2:dc:18:b3:bf:e6:67:bd: 9a:c1:72:0a:ff:ce:57:d1:62:5b:5a:20:fb:4e:e6: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.199.0/24 185.95.1.0/24 194.213.25.0/24 IPv6: 2a13:e880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211686 Signature Algorithm: sha256WithRSAEncryption 4f:5b:6f:cd:02:8f:e5:59:c5:b4:c3:79:d9:de:a7:a7:08:ec: fe:e3:b5:0c:51:c6:79:95:12:0d:59:05:96:8e:28:dc:e0:b3: f7:7f:52:f1:82:60:3e:44:20:9a:9a:36:ff:92:2e:fa:ec:23: a5:52:e6:95:7b:24:c3:ea:90:5d:07:48:34:5b:5a:a6:5b:0b: ec:28:b5:e9:b1:fd:6a:3e:06:a5:97:84:a3:1f:73:75:5e:fe: 7e:61:7a:af:25:df:a2:ce:4b:6d:f2:47:4d:cb:0c:a9:0a:8f: 6b:f0:30:4a:eb:b7:61:57:3c:e4:86:ff:ae:fe:7d:50:15:47: 42:1b:70:3c:05:d5:7e:58:45:ac:f3:93:c6:2a:49:5d:df:98: 94:ed:96:ea:a9:b6:6d:bc:52:51:f3:3a:fc:1c:52:a7:68:31: a7:80:47:ff:3f:4b:e7:e3:1b:19:d2:f2:21:69:99:5b:9e:60: 9c:3f:ae:61:12:b8:34:e4:74:ce:b6:d5:7c:a8:10:42:9f:6b: ea:ee:6d:15:66:a3:17:bc:fc:1c:01:eb:3b:63:e9:c5:bb:46: 2a:74:2c:3c:a3:bd:e5:95:a7:f8:07:8f:2b:2d:7b:53:6c:04: 2b:61:e1:40:ba:90:d0:31:cf:1e:fc:61:fb:29:b2:19:49:5f: e0:fb:74:eb -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9yjZLderxgF1an2MuS24iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmU1YjU3YmIzOThkNWUxODM5YTNmZTQyNTRkZjcwZDcxMmNlMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtG4KjkoZrYEtClwgdVlpEf2g63I YADZKPXVh8emshyJboJihBFCIVG3B7gkhEtljaSaF2T5+F5L/SvBlXFs/WIg3G9a 1A3W2mEJku90wNpqSHyjbi8yNnZQuQ65Asiyb8ecYo4dEssxHAEwlPmBlNThxCkd 0SCG0x6PgqEKKwQ8qWaK8YsZlC34OonLAZQ16f+a4rzKSZZL2UjwgpN4w7XgWsvm ch5hs5jNACX3mDJ7f4I5+vmD8wIyVjZ4BAbw0r89J50CNgFdd6z/LNnH4fO8vvUs 9tckRxTw2XB8SSLN/bFquIIr4twYs7/mZ72awXIK/85X0WJbWiD7TuYfyQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHLltXuzmNXhg5o/5CVN9w1xLOFKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzQ3MGNi OC1lYjZhLTQ5MzQtOWQ0Ny05NjhkMGM3ZjIyYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvNDcwY2I4 LWViNmEtNDkzNC05ZDQ3LTk2OGQwYzdmMjJiYi8xL2N1VzFlN09ZMWVHRG1qX2tK VTMzRFhFczRVby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAuQ/HAwQAuV8BAwQAwtUZMA0EAgACMAcDBQMq E+iAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM65jANBgkqhkiG9w0BAQsFAAOC AQEAT1tvzQKP5VnFtMN52d6npwjs/uO1DFHGeZUSDVkFlo4o3OCz939S8YJgPkQg mpo2/5Iu+uwjpVLmlXskw+qQXQdINFtaplsL7Ci16bH9aj4GpZeEox9zdV7+fmF6 ryXfos5LbfJHTcsMqQqPa/AwSuu3YVc85Ib/rv59UBVHQhtwPAXVflhFrPOTxipJ Xd+YlO2W6qm2bbxSUfM6/BxSp2gxp4BH/z9L5+MbGdLyIWmZW55gnD+uYRK4NOR0 zrbVfKgQQp9r6u5tFWajF7z8HAHrO2PpxbtGKnQsPKO95ZWn+AePKy17U2wEK2Hh QLqQ0DHPHvxh+ymyGUlf4Pt06w== -----END CERTIFICATE-----Generated at Wed Jan 21 17:53:39 2026 by rpki-client