This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer File: uQ9AvbnmZHaekXWQ942253GT11E.cer (raw, json) Hash identifier: V43JXDYwo0jBNiGWO7RGsuY1HMC6Vh97NTjlhmOOsz0= Subject key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC22051D02B19A75AA331D2886296A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204851 IP: 185.237.240.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:22:05:1d:02:b1:9a:75:aa:33:1d:28:86:29:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b90f40bdb9e664769e917590f78db6e77193d751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:b0:c0:bf:e2:0c:17:5b:af:69:bc:87:d0: dc:d5:fc:05:70:52:7a:b4:ab:c4:a5:26:4b:a6:09: 1c:3f:21:d3:86:8a:72:b8:a5:97:83:b1:70:f1:37: b0:61:dd:93:35:c8:bf:14:1e:2f:81:f0:38:64:b7: e9:df:d7:63:f9:ac:a6:a4:4a:2d:b9:eb:53:fa:de: 0c:a2:94:70:c2:3c:e8:4f:67:6a:ab:f7:26:79:4d: 2f:2d:a8:5e:8b:11:a8:0c:6b:d1:47:a9:3a:41:9d: 09:6b:cb:ce:77:35:ea:53:fc:92:28:a7:49:a8:fd: 0b:86:c5:1e:04:3b:41:cf:30:8f:46:4d:53:e9:16: 34:47:31:88:fe:d0:8e:e8:7b:86:78:7d:6f:c5:fb: 4a:31:b4:6b:16:e5:be:b0:b0:18:c1:e5:85:96:28: 22:53:65:bd:25:08:ee:b7:d0:c0:87:a3:78:1e:f1: 05:e0:25:90:c9:2c:4a:23:96:c1:5f:af:d0:c1:90: e6:72:fe:b4:a1:c6:60:71:3e:c3:13:41:26:b8:d9: 1d:64:06:5b:70:59:c7:e8:84:8a:e4:91:73:06:23: e3:83:78:45:de:b2:ba:e5:a7:64:1a:4e:80:4a:bb: 57:fc:56:c7:fb:c2:bb:28:e5:35:4d:70:b0:be:55: 94:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.237.240.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204851 Signature Algorithm: sha256WithRSAEncryption 5a:da:fd:36:30:e5:3d:e2:3a:54:7d:cd:d8:1e:22:39:94:19: d9:3b:df:b7:90:3e:bb:0b:18:46:f6:60:a6:be:cc:3d:43:b8: 74:be:e4:a6:57:2d:06:0d:be:8e:96:a6:42:7e:c9:4b:eb:d7: b6:ae:39:a6:fe:ee:45:91:d1:fc:26:86:fd:4e:e3:b1:3b:90: 3f:0a:7c:77:9e:78:f9:08:b8:23:5f:c5:73:24:70:f9:28:89: 0a:65:5a:84:0b:91:68:b9:65:3e:dc:4c:04:f4:8a:ee:88:eb: 91:2f:7c:e4:08:3c:23:ef:a5:80:e5:93:65:8e:65:97:73:24: 63:a3:c3:c4:0f:b3:2b:ff:43:16:e8:4a:b5:4b:46:91:16:20: 79:d6:82:74:2a:00:97:04:b9:69:3f:be:8a:69:28:7c:82:9e: 0d:36:1d:c7:12:de:c4:9a:1c:19:c4:c9:0e:5e:ee:70:99:1d: f8:c1:9b:0a:28:b0:3c:33:a8:11:e2:1c:cc:76:74:a4:ce:29: 41:0c:03:43:18:16:36:70:dc:7d:6f:1a:32:9a:db:8c:2e:94: 47:8a:3c:db:59:1b:d6:da:d4:c0:77:c1:8c:73:02:17:8f:f0: f4:23:03:9a:0b:7e:ce:f5:f8:c1:ed:06:7e:24:d7:2a:a5:fd: 12:f1:5a:e2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt57CIFHQKxmnWqMx0ohilqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTBmNDBiZGI5ZTY2NDc2OWU5MTc1OTBmNzhkYjZlNzcxOTNkNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUywwL/iDBdbr2m8h9Dc1fwFcFJ6 tKvEpSZLpgkcPyHThopyuKWXg7Fw8TewYd2TNci/FB4vgfA4ZLfp39dj+aympEot uetT+t4MopRwwjzoT2dqq/cmeU0vLaheixGoDGvRR6k6QZ0Ja8vOdzXqU/ySKKdJ qP0LhsUeBDtBzzCPRk1T6RY0RzGI/tCO6HuGeH1vxftKMbRrFuW+sLAYweWFligi U2W9JQjut9DAh6N4HvEF4CWQySxKI5bBX6/QwZDmcv60ocZgcT7DE0EmuNkdZAZb cFnH6ISK5JFzBiPjg3hF3rK65adkGk6ASrtX/FbH+8K7KOU1TXCwvlWUEQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLkPQL255mR2npF1kPeNtudxk9dRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2I5MmNj My1kZGYxLTQzY2ItYjRiMS00MTU0ZGE1Y2ViOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYjkyY2Mz LWRkZjEtNDNjYi1iNGIxLTQxNTRkYTVjZWI5Yi8xL3VROUF2Ym5tWkhhZWtYV1E5 NDIyNTNHVDExRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCue3wMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMgMzANBgkqhkiG9w0BAQsFAAOCAQEAWtr9NjDlPeI6VH3N2B4iOZQZ2Tvft5A+ uwsYRvZgpr7MPUO4dL7kplctBg2+jpamQn7JS+vXtq45pv7uRZHR/CaG/U7jsTuQ Pwp8d554+Qi4I1/FcyRw+SiJCmVahAuRaLllPtxMBPSK7ojrkS985Ag8I++lgOWT ZY5ll3MkY6PDxA+zK/9DFuhKtUtGkRYgedaCdCoAlwS5aT++imkofIKeDTYdxxLe xJocGcTJDl7ucJkd+MGbCiiwPDOoEeIczHZ0pM4pQQwDQxgWNnDcfW8aMprbjC6U R4o821kb1trUwHfBjHMCF4/w9CMDmgt+zvX4we0GfiTXKqX9EvFa4g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:26 2026 by rpki-client