This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer File: u0WFtGeSNzbELHly4QQvGy4w3GY.cer (raw, json) Hash identifier: gXR0td4ui1r7Jbt42LFVuFc6KE2XJjIQGKD2VkR9HVY= Subject key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EBA0F1D9FE24CC1D1A43022ABD284D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25479 IP: 185.26.44.0/22 IP: 217.16.240.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a0:f1:d9:fe:24:cc:1d:1a:43:02:2a:bd:28:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb4585b467923736c42c7972e1042f1b2e30dc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:d1:81:48:20:f1:ef:5f:77:de:7a:d5:d2: 54:80:4e:44:09:c4:69:9d:d9:db:7c:33:46:ad:91: ad:2a:11:9f:22:3f:be:00:be:c5:2c:ff:b4:b6:a9: 10:c6:00:bb:d8:6c:64:7b:98:85:ea:70:97:79:c9: b3:58:3c:93:21:4f:4a:de:25:94:ed:6f:26:b4:fd: 41:87:85:fb:28:52:ae:60:ac:4a:dc:60:32:25:30: 3d:47:d0:71:be:c5:55:13:2b:0f:29:75:33:14:a8: e3:73:4a:87:d6:91:2d:fb:e2:17:85:fb:f3:56:be: 13:4e:9b:d1:cf:c2:60:48:4b:76:e6:58:30:52:f7: 35:5f:23:7d:b2:6d:a7:a8:75:91:c2:08:10:c0:97: 68:aa:5f:51:fe:d8:a7:c6:91:79:e5:95:86:0c:5c: d2:b5:9d:88:6a:5c:15:ae:c2:d5:1e:56:54:36:4d: 6a:b5:22:64:29:61:f0:01:5f:93:27:3b:79:27:86: 0c:2e:78:aa:27:bc:96:b6:20:f8:f5:c9:58:a7:38: d6:69:b6:cc:52:6f:8f:c7:f5:21:9d:4a:d5:6d:48: 7b:c5:cc:dd:c6:eb:55:80:b3:b5:9c:d3:c4:8f:a9: 3e:e1:4f:20:6e:31:c8:f3:5d:f3:8a:a7:4d:0c:42: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.26.44.0/22 217.16.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25479 Signature Algorithm: sha256WithRSAEncryption 80:b4:a1:e2:be:73:30:a3:6a:0f:f8:a3:7d:73:d3:ff:ac:ef: 98:c6:bf:5a:a7:c0:8a:88:ee:15:88:c8:ab:a9:c8:08:9c:09: 84:a0:d0:ef:4b:cb:44:0f:c0:d2:10:1b:ac:71:87:05:05:e5: a7:9d:41:0c:b2:8a:f5:b8:a0:76:6e:9b:fa:b7:5c:88:17:1e: 02:72:ad:4a:d7:aa:e6:dc:98:6e:8a:5d:0e:7a:29:94:09:ee: 3a:bf:e5:04:2a:30:99:58:ac:31:50:ec:86:59:01:5e:73:0c: 6a:8c:df:15:12:31:de:f3:16:5c:d7:60:54:a5:94:9a:92:45: 80:6a:7d:e7:89:aa:f3:54:03:e6:c3:ec:81:88:4d:35:f1:17: e1:0c:be:26:bb:fa:df:e5:b9:4a:e5:de:ce:2a:c7:f5:ec:35: c5:ea:3b:1d:39:95:6d:41:34:2d:67:aa:26:15:47:ae:25:8a: 51:00:bb:a8:d0:67:34:41:78:b0:7c:b0:7e:91:fe:5d:e2:1f: 07:9a:31:bc:69:79:85:fa:f4:0d:20:f3:92:79:20:e4:94:dc: fe:93:71:12:14:de:b2:f5:2f:aa:71:de:2f:a4:6c:30:5e:96: 35:14:df:06:ab:78:6c:ac:0a:58:8c:0b:ed:20:04:3d:80:ff: ce:4f:57:2e -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt266Dx2f4kzB0aQwIqvShNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjQ1ODViNDY3OTIzNzM2YzQyYzc5NzJlMTA0MmYxYjJlMzBkYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1LRgUgg8e9fd9561dJUgE5ECcRp ndnbfDNGrZGtKhGfIj++AL7FLP+0tqkQxgC72Gxke5iF6nCXecmzWDyTIU9K3iWU 7W8mtP1Bh4X7KFKuYKxK3GAyJTA9R9BxvsVVEysPKXUzFKjjc0qH1pEt++IXhfvz Vr4TTpvRz8JgSEt25lgwUvc1XyN9sm2nqHWRwggQwJdoql9R/tinxpF55ZWGDFzS tZ2IalwVrsLVHlZUNk1qtSJkKWHwAV+TJzt5J4YMLniqJ7yWtiD49clYpzjWabbM Um+Px/UhnUrVbUh7xczdxutVgLO1nNPEj6k+4U8gbjHI813ziqdNDEKyfwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFLtFhbRnkjc2xCx5cuEELxsuMNxmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2RjYjg0 Ni0zZmEyLTQ1N2YtODk4NS02NjM4MTAxZTMxOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvZGNiODQ2 LTNmYTItNDU3Zi04OTg1LTY2MzgxMDFlMzE5Yi8xL3UwV0Z0R2VTTnpiRUxIbHk0 UVF2R3k0dzNHWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCuRosAwQE2RDwMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAmOHMA0GCSqGSIb3DQEBCwUAA4IBAQCAtKHivnMwo2oP+KN9c9P/rO+Y xr9ap8CKiO4ViMirqcgInAmEoNDvS8tED8DSEBuscYcFBeWnnUEMsor1uKB2bpv6 t1yIFx4Ccq1K16rm3Jhuil0OeimUCe46v+UEKjCZWKwxUOyGWQFecwxqjN8VEjHe 8xZc12BUpZSakkWAan3niarzVAPmw+yBiE018RfhDL4mu/rf5blK5d7OKsf17DXF 6jsdOZVtQTQtZ6omFUeuJYpRALuo0Gc0QXiwfLB+kf5d4h8HmjG8aXmF+vQNIPOS eSDklNz+k3ESFN6y9S+qcd4vpGwwXpY1FN8Gq3hsrApYjAvtIAQ9gP/OT1cu -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:57 2026 by rpki-client