This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer File: rUZjafOSfaDIn7X0s-qeMk-SioQ.cer (raw, json) Hash identifier: 2whg9cKRULKnDVMyo1oeK6aZHfyPonsl2kTLDvj49Nw= Subject key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7B434D5EB8DB85E759ABFC408BA48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35525 IP: 185.164.0.0/22 IP: 2a06:4980::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b4:34:d5:eb:8d:b8:5e:75:9a:bf:c4:08:ba:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d4:25:8a:e2:3d:0c:7b:55:2f:f7:17:eb:4f: 6b:dc:e4:d9:73:5c:ec:31:16:61:28:0e:dd:e0:c8: e8:84:e5:d6:c4:7c:7d:3c:1f:6f:3e:ea:b3:8a:38: db:8e:9b:94:46:0c:87:48:61:9c:35:e4:23:ec:75: d3:7f:19:66:4f:51:83:ff:c0:68:04:73:20:09:7b: 67:ba:29:41:db:4a:9a:02:f5:76:49:a9:71:77:0c: 7e:2e:b7:d5:a1:06:71:06:4d:51:57:71:aa:de:fe: 76:24:33:ad:a2:19:e7:5a:40:0a:30:ce:d9:e8:2d: 18:f0:63:fe:d3:2f:36:88:df:76:c2:75:53:e0:40: e4:56:8a:30:86:41:43:22:e6:06:b5:e8:a0:d8:22: 8e:47:74:a3:20:6c:97:e6:c3:95:04:65:94:14:53: ec:e5:a4:ad:ab:e3:85:88:51:e0:a5:70:eb:d7:5b: 28:e2:59:2f:74:e1:c9:5d:7b:d7:a8:55:0d:51:05: e2:91:77:0d:cd:a8:3b:8e:80:c2:cf:5b:5c:ee:84: dd:53:e5:b0:77:bb:5c:62:6d:f6:f7:6d:9c:85:f1: 22:37:6b:0b:de:20:f8:e9:fc:32:41:5d:70:c2:ad: 16:68:01:3c:a5:64:af:db:f6:49:10:b8:2b:b6:ba: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.0.0/22 IPv6: 2a06:4980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35525 Signature Algorithm: sha256WithRSAEncryption a9:29:96:e5:f5:ea:67:9a:80:63:68:fc:89:fb:61:c6:2c:a2: 0f:bc:73:c8:b9:e7:0a:f8:12:09:85:44:c2:d0:43:52:8f:3c: 69:09:48:73:d1:a7:c0:69:59:0b:3b:95:28:3e:33:27:c8:f2: 7f:66:ad:a5:20:48:1f:b8:e8:f4:29:58:d2:91:86:9e:d3:3a: a8:3e:c1:1b:5c:e8:30:f8:f1:5b:88:32:f0:fa:6a:6e:24:d1: f3:1d:6d:07:e0:50:02:e4:15:2e:76:6b:6b:25:5d:d8:2f:e2: e4:7d:55:7e:4e:d6:a5:dc:3a:a7:c4:66:8f:21:42:74:bc:fb: 9e:82:90:05:f4:c4:b0:10:c4:5e:4d:86:07:5c:57:70:02:40: ff:d6:d6:4f:b2:b2:e5:b8:75:01:c9:0a:68:92:e2:f6:f6:4f: 08:17:1c:cb:83:34:31:37:6e:2d:2a:d6:a4:bd:b5:f9:5e:95: 4e:21:1e:55:d4:39:3b:52:e0:df:7d:85:88:3f:64:51:a6:bf: e2:bc:92:86:21:2d:29:d8:e6:12:45:89:75:ae:97:49:5b:bd: 69:78:18:da:a2:21:a6:2b:af:54:f6:11:ef:d6:7a:e2:88:57: d4:02:eb:10:19:86:3f:d9:25:ec:d5:02:13:07:c9:09:e6:15: b4:ba:72:5e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x7Q01euNuF51mr/ECLpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDQ2NjM2OWYzOTI3ZGEwYzg5ZmI1ZjRiM2VhOWUzMjRmOTI4YTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNQliuI9DHtVL/cX609r3OTZc1zs MRZhKA7d4MjohOXWxHx9PB9vPuqzijjbjpuURgyHSGGcNeQj7HXTfxlmT1GD/8Bo BHMgCXtnuilB20qaAvV2Salxdwx+LrfVoQZxBk1RV3Gq3v52JDOtohnnWkAKMM7Z 6C0Y8GP+0y82iN92wnVT4EDkVoowhkFDIuYGteig2CKOR3SjIGyX5sOVBGWUFFPs 5aStq+OFiFHgpXDr11so4lkvdOHJXXvXqFUNUQXikXcNzag7joDCz1tc7oTdU+Ww d7tcYm32922chfEiN2sL3iD46fwyQV1wwq0WaAE8pWSv2/ZJELgrtrrzlwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK1GY2nzkn2gyJ+19LPqnjJPkoqEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzI3YzZh MS0xYzk0LTRhNDktOGUzZC05ZmQ1MDM5NzBmZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMjdjNmEx LTFjOTQtNGE0OS04ZTNkLTlmZDUwMzk3MGZmMC8xL3JVWmphZk9TZmFESW43WDBz LXFlTWstU2lvUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaQAMA0EAgACMAcDBQAqBkmAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCKxTANBgkqhkiG9w0BAQsFAAOCAQEAqSmW5fXqZ5qA Y2j8ifthxiyiD7xzyLnnCvgSCYVEwtBDUo88aQlIc9GnwGlZCzuVKD4zJ8jyf2at pSBIH7jo9ClY0pGGntM6qD7BG1zoMPjxW4gy8PpqbiTR8x1tB+BQAuQVLnZrayVd 2C/i5H1Vfk7Wpdw6p8RmjyFCdLz7noKQBfTEsBDEXk2GB1xXcAJA/9bWT7Ky5bh1 AckKaJLi9vZPCBccy4M0MTduLSrWpL21+V6VTiEeVdQ5O1Lg332FiD9kUaa/4ryS hiEtKdjmEkWJda6XSVu9aXgY2qIhpiuvVPYR79Z64ohX1ALrEBmGP9kl7NUCEwfJ CeYVtLpyXg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:03 2026 by rpki-client