This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer File: ddUf2ReUrgygfzkwcw0Gmqwbku0.cer (raw, json) Hash identifier: VGpCbrNILXcsqwej6FwKT7ha7npOSrnPhYGzfLaAT9g= Subject key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F153B04A189E496AA05062C565D329B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42318 IP: 2.57.244.0/22 IP: 83.223.0.0/19 IP: 2a05:5580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3b:04:a1:89:e4:96:aa:05:06:2c:56:5d:32:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:a2:a3:85:e0:89:0d:f3:52:4c:e8:5e:1f: 2d:30:51:50:c6:eb:65:1e:35:27:32:5d:01:74:b4: 2d:c3:4d:01:bc:f8:07:5d:1e:56:1c:b8:c2:97:3b: 48:85:5c:32:1d:c0:cd:45:9a:52:0a:c5:8c:e2:55: b8:47:54:1b:86:39:fd:ac:7b:08:b4:bf:52:61:24: aa:2a:bc:1e:84:08:5c:d3:a6:c5:7c:7b:47:85:02: 3a:36:36:91:b4:1b:f3:73:f8:5e:1d:ce:cf:25:3b: 53:0e:ca:d9:f4:16:69:eb:97:ae:f5:0f:97:05:2a: 3a:92:96:e1:38:f2:e9:7a:4e:39:38:62:9c:ea:85: 5c:ad:8a:5f:45:56:06:20:16:d9:1f:78:f9:43:c8: 82:b2:8a:28:4a:e3:d6:d0:da:19:ec:25:16:11:cc: 1f:a9:b3:8e:bf:ac:41:eb:61:4d:09:5b:89:8b:fb: c4:cc:25:ec:01:3d:a9:be:e7:29:94:b1:f1:c2:13: 64:03:0f:39:53:c7:a4:c4:c1:06:24:75:7a:6b:c1: 2d:14:ce:90:8f:74:70:b4:63:55:b3:b3:1d:0d:db: 05:60:a0:ff:7b:1b:ce:97:10:28:f9:0a:75:61:90: f7:fa:a7:7d:4b:60:7c:36:3e:db:a8:e8:9b:7b:f3: 0a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.244.0/22 83.223.0.0/19 IPv6: 2a05:5580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42318 Signature Algorithm: sha256WithRSAEncryption a4:5a:62:17:01:95:62:c1:0e:64:e6:e6:bd:e6:51:0e:22:4e: dc:c2:b2:72:ce:f6:07:bd:8d:b8:d3:85:b5:23:26:91:82:58: 32:5e:15:44:a1:f1:9b:19:b3:5f:91:39:d1:62:fe:6a:20:f3: e7:a3:16:ec:c3:cd:9e:7a:6d:ca:a7:f1:84:5e:74:b5:7f:c5: d3:10:b9:8c:29:19:a8:a1:7a:bb:f7:e0:cb:32:01:85:56:cc: 5f:a6:06:9b:01:84:a1:d0:48:21:9b:13:78:fb:bd:a5:7a:f5: 59:71:b1:a8:f9:d3:91:a7:15:91:fd:35:e1:79:ce:d3:a3:89: f8:49:27:00:24:83:4e:00:75:af:73:4b:df:6c:a6:16:37:f2: 59:97:81:45:c7:78:a7:8b:6a:6c:f2:9c:e4:52:f3:7c:f7:3f: cd:22:b6:dc:fb:87:01:89:06:82:e2:7c:6e:d8:6a:6c:24:78: 97:48:fd:3d:f5:0e:b8:83:98:3a:01:18:5a:3a:6c:e8:e7:63: 6d:98:95:e3:b9:b2:6e:b6:b5:48:0b:e7:36:4e:86:c7:0a:b5: 30:da:3a:83:6a:75:bf:6b:a5:af:18:fc:5e:b0:f1:c9:7a:d1: 71:71:7f:a4:c4:2c:66:bd:62:3b:45:89:00:0b:d5:e6:43:2a: 25:e5:90:8c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FTsEoYnklqoFBixWXTKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWQ1MWZkOTE3OTRhZTBjYTA3ZjM5MzA3MzBkMDY5YWFjMWI5MmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz2io4XgiQ3zUkzoXh8tMFFQxutl HjUnMl0BdLQtw00BvPgHXR5WHLjClztIhVwyHcDNRZpSCsWM4lW4R1Qbhjn9rHsI tL9SYSSqKrwehAhc06bFfHtHhQI6NjaRtBvzc/heHc7PJTtTDsrZ9BZp65eu9Q+X BSo6kpbhOPLpek45OGKc6oVcrYpfRVYGIBbZH3j5Q8iCsoooSuPW0NoZ7CUWEcwf qbOOv6xB62FNCVuJi/vEzCXsAT2pvucplLHxwhNkAw85U8ekxMEGJHV6a8EtFM6Q j3RwtGNVs7MdDdsFYKD/exvOlxAo+Qp1YZD3+qd9S2B8Nj7bqOibe/MKpwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHXVH9kXlK4MoH85MHMNBpqsG5LtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzkxMTAx Yy0zNDM3LTRmM2MtYjEyMC03NTJjOTMzNjM5ZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvOTExMDFj LTM0MzctNGYzYy1iMTIwLTc1MmM5MzM2MzllNS8xL2RkVWYyUmVVcmd5Z2Z6a3dj dzBHbXF3Ymt1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCAjn0AwQFU98AMA0EAgACMAcDBQMqBVWAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwClTjANBgkqhkiG9w0BAQsFAAOCAQEApFpi FwGVYsEOZObmveZRDiJO3MKycs72B72NuNOFtSMmkYJYMl4VRKHxmxmzX5E50WL+ aiDz56MW7MPNnnptyqfxhF50tX/F0xC5jCkZqKF6u/fgyzIBhVbMX6YGmwGEodBI IZsTePu9pXr1WXGxqPnTkacVkf014XnO06OJ+EknACSDTgB1r3NL32ymFjfyWZeB Rcd4p4tqbPKc5FLzfPc/zSK23PuHAYkGguJ8bthqbCR4l0j9PfUOuIOYOgEYWjps 6OdjbZiV47mybra1SAvnNk6Gxwq1MNo6g2p1v2ulrxj8XrDxyXrRcXF/pMQsZr1i O0WJAAvV5kMqJeWQjA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:24 2026 by rpki-client