This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer File: uRRTFbRMtl0qeRoK5YI2ZNDERF4.cer (raw, json) Hash identifier: nHZ1KL2xLjB8EhRSJaycqlr41MAfkKFgy3m0Z++HD5o= Subject key identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E378C5C00AF0B7574B8C1B687FC18DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61160 IP: 185.17.220.0/22 IP: 193.43.102.0/23 IP: 2a04:640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8c:5c:00:af:0b:75:74:b8:c1:b6:87:fc:18:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9145315b44cb65d2a791a0ae5823664d0c4445e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:75:c3:28:54:64:83:f7:b5:85:9c:75:e2: 65:52:5e:57:4a:ec:1f:13:fa:11:d2:5d:e6:cf:d8: a5:38:d9:34:37:34:f0:ce:30:1e:f3:fe:d1:09:1e: f2:9d:0d:77:89:40:19:ce:21:30:fc:25:c7:76:42: eb:93:63:39:aa:b3:a3:28:73:74:b7:72:cc:82:83: 2d:b6:e0:d6:1e:5a:43:39:aa:fc:7f:74:a4:5e:fb: 56:d2:52:44:c8:8f:ee:60:2f:b3:44:ee:3a:56:7d: 5f:a4:b2:6c:92:b1:bb:ff:60:82:2a:34:10:56:84: 2c:a5:51:61:f0:48:f4:a4:c5:f2:79:ef:81:52:f9: 78:2d:3d:7c:c2:3f:76:b6:e5:e6:65:08:36:bf:c0: 22:cf:d7:2a:de:43:06:47:b8:0c:b9:8f:2a:0e:c9: 6e:46:e0:50:4a:5f:47:f8:ae:87:f0:eb:85:42:af: e0:1f:1d:ee:06:18:73:44:81:18:52:49:cd:50:db: c7:c3:45:35:c7:0e:5b:38:b3:ed:a2:e4:50:0d:f3: 7c:e0:fc:02:d2:71:45:f5:89:e4:a1:79:59:a1:4e: 6c:7f:06:3d:00:20:a7:24:87:84:dc:cb:0d:a5:0c: 4f:01:93:3b:53:9a:7b:9a:a2:89:a9:36:a9:88:36: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:14:53:15:B4:4C:B6:5D:2A:79:1A:0A:E5:82:36:64:D0:C4:44:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/4f887e-3f6c-48a3-bb03-dfb946d17d0c/1/uRRTFbRMtl0qeRoK5YI2ZNDERF4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.220.0/22 193.43.102.0/23 IPv6: 2a04:640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61160 Signature Algorithm: sha256WithRSAEncryption 17:81:41:ee:01:e6:b4:00:69:bc:a4:af:a8:2c:c3:b8:1f:96: 9d:82:dc:0e:1c:85:ad:9c:2e:a3:9a:4f:35:7b:db:61:5f:55: ff:bb:1f:a3:53:4f:ca:4a:11:b7:2a:a5:3b:be:22:0f:7b:ae: c4:db:70:e4:de:fe:98:53:31:b1:fc:d6:2a:e2:f9:e8:16:ec: fd:bd:43:41:62:16:6b:8c:e9:13:ca:46:da:01:e7:3a:1f:1d: 1a:24:7f:c6:d2:03:2b:8d:f5:b8:26:8c:c9:96:bc:95:36:e2: 70:46:19:38:45:47:ab:18:b1:31:3e:41:35:10:b7:46:e0:6a: ef:2e:a3:6b:62:13:a0:62:71:a2:21:77:5a:4d:3a:37:d0:c5: 7a:cc:c4:f0:92:9e:72:99:13:8c:29:23:19:9d:39:bf:28:1e: 19:16:66:9d:da:a6:f7:a1:6a:6c:44:cf:ab:ac:df:ee:e5:75: 0f:0e:51:ab:9e:04:ab:63:d9:33:91:56:b0:9f:00:34:e5:c1: a6:76:b1:40:8a:9f:be:2f:10:0e:3f:90:35:1f:8f:9a:70:6a: 4e:da:4f:0a:02:b0:03:16:5d:5d:64:b0:98:97:d2:bc:cb:d8: af:c1:c0:7b:42:b1:c9:f8:5c:c1:32:78:df:50:42:ae:cc:c9: 62:b6:5d:29 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+N4xcAK8LdXS4wbaH/BjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTE0NTMxNWI0NGNiNjVkMmE3OTFhMGFlNTgyMzY2NGQwYzQ0NDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmch1wyhUZIP3tYWcdeJlUl5XSuwf E/oR0l3mz9ilONk0NzTwzjAe8/7RCR7ynQ13iUAZziEw/CXHdkLrk2M5qrOjKHN0 t3LMgoMttuDWHlpDOar8f3SkXvtW0lJEyI/uYC+zRO46Vn1fpLJskrG7/2CCKjQQ VoQspVFh8Ej0pMXyee+BUvl4LT18wj92tuXmZQg2v8Aiz9cq3kMGR7gMuY8qDslu RuBQSl9H+K6H8OuFQq/gHx3uBhhzRIEYUknNUNvHw0U1xw5bOLPtouRQDfN84PwC 0nFF9YnkoXlZoU5sfwY9ACCnJIeE3MsNpQxPAZM7U5p7mqKJqTapiDaWwQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLkUUxW0TLZdKnkaCuWCNmTQxEReMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzRmODg3 ZS0zZjZjLTQ4YTMtYmIwMy1kZmI5NDZkMTdkMGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvNGY4ODdl LTNmNmMtNDhhMy1iYjAzLWRmYjk0NmQxN2QwYy8xL3VSUlRGYlJNdGwwcWVSb0s1 WUkyWk5ERVJGNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuRHcAwQBwStmMA0EAgACMAcDBQMqBAZAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDu6DANBgkqhkiG9w0BAQsFAAOCAQEAF4FB 7gHmtABpvKSvqCzDuB+WnYLcDhyFrZwuo5pPNXvbYV9V/7sfo1NPykoRtyqlO74i D3uuxNtw5N7+mFMxsfzWKuL56Bbs/b1DQWIWa4zpE8pG2gHnOh8dGiR/xtIDK431 uCaMyZa8lTbicEYZOEVHqxixMT5BNRC3RuBq7y6ja2IToGJxoiF3Wk06N9DFeszE 8JKecpkTjCkjGZ05vygeGRZmndqm96FqbETPq6zf7uV1Dw5Rq54Eq2PZM5FWsJ8A NOXBpnaxQIqfvi8QDj+QNR+PmnBqTtpPCgKwAxZdXWSwmJfSvMvYr8HAe0Kxyfhc wTJ431BCrszJYrZdKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:15 2026 by rpki-client