This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer File: u_D5EC2y6-GvHQdRaEQ4anlj71w.cer (raw, json) Hash identifier: bbE0M2gZ7+MjS2mgvHWPodWwhKQP0hg94Z+bFXplaCM= Subject key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED5034CE1046919C6ED0E71508CBFD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215145 IP: 195.88.119.0/24 IP: 2a14:31c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:50:34:ce:10:46:91:9c:6e:d0:e7:15:08:cb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:5b:0a:c0:e8:e3:fa:33:8a:8e:f4:47:09: ec:6a:4a:18:f9:51:c8:36:7d:ca:6a:db:20:3f:59: 5f:52:8f:85:b4:0d:96:a7:dd:12:04:c7:a0:2a:ae: 36:b4:26:80:a4:b1:19:9a:1a:5b:2f:a7:b8:ef:7e: e4:e9:35:da:a6:a4:7f:e0:a8:77:3c:66:d4:83:23: f1:e1:eb:a6:16:dc:a9:5b:3d:61:d4:74:82:c6:66: 12:ba:2e:21:a7:aa:18:15:06:38:dd:27:bb:d8:9b: ed:81:98:c4:e4:d8:fa:8e:16:02:2a:9d:e8:53:21: a6:80:b3:74:30:0b:b1:ff:14:29:a8:9c:e2:12:12: c7:5b:2c:53:7e:f5:4b:10:b9:cb:94:a4:09:9e:e7: 1c:30:49:d4:30:e6:d1:52:a9:3e:c7:65:08:d5:64: f8:f8:fb:1f:5d:4a:a5:ba:85:e8:1b:68:36:38:d5: ea:1d:73:d4:57:8c:85:7f:07:46:3e:9d:16:37:27: 52:02:05:be:ce:50:fd:26:42:e6:0b:e6:25:9e:63: 3e:f8:a5:db:a8:90:60:ff:7a:14:64:d0:81:df:cd: fb:e5:89:24:42:c0:c4:ec:38:8a:00:c4:5b:37:c6: 09:e8:4c:33:e6:62:c9:b6:25:de:70:27:9c:71:41: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.119.0/24 IPv6: 2a14:31c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215145 Signature Algorithm: sha256WithRSAEncryption af:8a:17:44:36:06:ac:5c:36:e0:6c:9f:82:af:01:06:4c:2d: fb:d5:73:08:19:6b:53:7b:59:01:33:38:ef:fa:81:c6:d5:5c: 1c:57:21:91:db:fa:2a:db:43:6e:82:05:d7:35:59:64:b5:6d: 3b:8a:37:e9:9f:cc:34:bf:d3:4b:53:7a:19:83:95:41:dd:5b: ec:17:81:d9:72:e4:e9:e7:d4:dd:47:3e:66:db:14:84:74:29: 04:16:db:48:27:72:f6:79:b1:64:d3:ae:bf:ee:02:a9:52:ed: 2c:85:05:3f:65:25:c9:91:2e:7a:4d:3a:11:18:96:23:2f:fc: f8:3c:d2:21:67:bc:5e:3a:0a:c8:ac:db:fd:3a:e8:a4:0d:f9: ae:23:67:2a:25:5e:bf:40:dc:76:53:fe:ed:e7:e2:db:43:d9: 85:de:02:99:89:6d:3c:f8:10:92:2e:59:5f:64:4c:3c:e7:b3: 0e:7f:ec:08:57:50:7f:32:fb:63:7b:e6:95:45:d1:9e:67:78: f7:d9:14:9d:17:bb:03:65:5a:62:8d:3e:37:7a:53:b6:5e:50: 7d:13:47:9c:20:c9:d7:67:a1:86:54:f2:61:a4:4e:08:8a:eb: 3a:5c:b2:d1:1e:d0:a7:30:7e:c6:c1:a3:51:1c:ed:6e:e4:d4: ce:21:d8:a8 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87VA0zhBGkZxu0OcVCMv9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmYwZjkxMDJkYjJlYmUxYWYxZDA3NTE2ODQ0Mzg2YTc5NjNlZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sZbCsDo4/ozio70RwnsakoY+VHI Nn3KatsgP1lfUo+FtA2Wp90SBMegKq42tCaApLEZmhpbL6e4737k6TXapqR/4Kh3 PGbUgyPx4eumFtypWz1h1HSCxmYSui4hp6oYFQY43Se72JvtgZjE5Nj6jhYCKp3o UyGmgLN0MAux/xQpqJziEhLHWyxTfvVLELnLlKQJnuccMEnUMObRUqk+x2UI1WT4 +PsfXUqluoXoG2g2ONXqHXPUV4yFfwdGPp0WNydSAgW+zlD9JkLmC+YlnmM++KXb qJBg/3oUZNCB38375YkkQsDE7DiKAMRbN8YJ6Ewz5mLJtiXecCeccUHBbwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLvw+RAtsuvhrx0HUWhEOGp5Y+9cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2QwZGE0 ZC05NTdjLTQyYjMtYjcxYy0wNzI3Mzk2ODMzNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvZDBkYTRk LTk1N2MtNDJiMy1iNzFjLTA3MjczOTY4MzM0Ni8xL3VfRDVFQzJ5Ni1HdkhRZFJh RVE0YW5sajcxdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAw1h3MA0EAgACMAcDBQMqFDHAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNIaTANBgkqhkiG9w0BAQsFAAOCAQEAr4oXRDYGrFw2 4Gyfgq8BBkwt+9VzCBlrU3tZATM47/qBxtVcHFchkdv6KttDboIF1zVZZLVtO4o3 6Z/MNL/TS1N6GYOVQd1b7BeB2XLk6efU3Uc+ZtsUhHQpBBbbSCdy9nmxZNOuv+4C qVLtLIUFP2UlyZEuek06ERiWIy/8+DzSIWe8XjoKyKzb/TropA35riNnKiVev0Dc dlP+7efi20PZhd4CmYltPPgQki5ZX2RMPOezDn/sCFdQfzL7Y3vmlUXRnmd499kU nRe7A2VaYo0+N3pTtl5QfRNHnCDJ12ehhlTyYaROCIrrOlyy0R7QpzB+xsGjURzt buTUziHYqA== -----END CERTIFICATE-----Generated at Tue Jan 27 10:22:22 2026 by rpki-client