This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer File: u_e8bHyTo8-x4lu778TyB64lvaU.cer (raw, json) Hash identifier: 0QHv6Qf39UIBYn/Rwp9+H9KObUft/h+Ikvw/C7eyCTo= Subject key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CE9E3AB1D62FA957798937304260D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199474 IP: 46.255.24.0/24 IP: 2a13:b180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e9:e3:ab:1d:62:fa:95:77:98:93:73:04:26:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:38:f6:0b:02:ec:69:18:61:3a:29:ef:49:b7: 40:83:e4:95:90:f1:2e:78:4c:5d:38:54:3a:86:ad: 03:02:5c:84:80:89:97:6f:6b:c5:a3:f7:72:77:8c: 39:f3:1b:ee:df:19:17:a1:06:f5:e5:1f:b1:37:92: c7:c5:bf:84:2a:32:57:29:8d:2f:fb:4b:95:88:2f: 6a:80:41:07:a7:b0:58:38:ee:fe:37:8f:1b:82:20: 1e:88:fc:dc:d0:82:b3:65:1f:10:da:e1:01:c5:65: 9f:4b:31:a3:50:91:a4:f6:89:c1:2f:40:eb:77:e4: df:20:31:a2:5b:f5:2b:68:62:86:1a:21:41:48:77: 25:c5:a4:72:03:f0:1f:6d:de:f2:f2:43:fa:4b:ce: ab:30:3b:68:70:ce:d8:e7:33:fa:d3:6d:30:47:8e: 27:52:2f:c8:12:d2:80:9b:e3:84:8e:94:3a:00:7a: e7:6d:df:e6:f2:a2:22:ad:84:10:75:31:b2:ec:b8: 5e:6f:a0:3f:26:0f:0a:3b:df:95:ad:75:0f:78:8b: 06:1e:e5:e7:5b:2c:ff:45:18:93:6c:de:81:da:fa: b0:43:68:c3:df:cf:ef:b5:f9:14:41:a0:5a:78:46: da:56:b1:98:6e:e7:1e:9e:e8:ff:f5:37:d3:ab:54: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.24.0/24 IPv6: 2a13:b180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199474 Signature Algorithm: sha256WithRSAEncryption 7c:5f:1c:0c:ae:99:2d:6b:b4:b2:3a:46:05:0c:cd:15:fe:4f: ea:bc:29:30:52:41:bf:88:ed:b2:f9:98:79:41:b8:b7:1b:05: 1d:bc:e9:c2:00:67:22:e7:07:98:2f:6c:98:72:d1:a1:d5:99: 44:df:69:c9:b9:a1:16:a9:e5:09:8c:ab:20:48:ac:cb:cc:22: d7:6d:46:bc:5b:6e:bd:10:2b:1e:a0:a0:4f:81:95:4d:b4:d6: 85:bb:d8:b4:f8:e1:25:2e:64:47:19:3a:e8:8e:bd:7c:72:66: a7:fc:42:4b:40:0b:57:91:b0:b7:92:a1:1a:15:55:be:c5:90: 90:cc:32:1e:ec:18:ec:a2:3b:89:6c:0a:26:86:cb:c0:d9:c7: 18:d7:51:d4:30:12:2e:b6:44:43:97:42:bb:4d:1b:c3:12:31: 95:d4:f6:6f:d3:a7:a8:f4:a3:f9:e0:6a:5d:99:6e:9f:5a:97: f2:e5:8d:0a:de:fb:1f:af:69:59:44:ce:27:3c:b1:c9:42:f2: 75:07:fd:ea:b9:8f:2f:64:8f:f3:dd:4c:cc:62:53:fe:97:2d: 6c:5a:8d:57:4d:94:9f:b4:e3:4d:ac:9c:09:c5:da:e6:1f:f0: ff:ac:83:33:6a:dc:54:16:09:56:be:84:39:5d:85:f7:f1:77: f0:3e:69:43 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XOnjqx1i+pV3mJNzBCYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmY3YmM2YzdjOTNhM2NmYjFlMjViYmJlZmM0ZjIwN2FlMjViZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Tj2CwLsaRhhOinvSbdAg+SVkPEu eExdOFQ6hq0DAlyEgImXb2vFo/dyd4w58xvu3xkXoQb15R+xN5LHxb+EKjJXKY0v +0uViC9qgEEHp7BYOO7+N48bgiAeiPzc0IKzZR8Q2uEBxWWfSzGjUJGk9onBL0Dr d+TfIDGiW/UraGKGGiFBSHclxaRyA/Afbd7y8kP6S86rMDtocM7Y5zP6020wR44n Ui/IEtKAm+OEjpQ6AHrnbd/m8qIirYQQdTGy7Lheb6A/Jg8KO9+VrXUPeIsGHuXn Wyz/RRiTbN6B2vqwQ2jD38/vtfkUQaBaeEbaVrGYbucenuj/9TfTq1Rq7wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLv3vGx8k6PPseJbu+/E8geuJb2lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzExYzQx MS1hNzc1LTQ4NjgtOWQyNy01OTBmNTQwYzQ1NmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMTFjNDEx LWE3NzUtNDg2OC05ZDI3LTU5MGY1NDBjNDU2ZC8xL3VfZThiSHlUbzgteDRsdTc3 OFR5QjY0bHZhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALv8YMA0EAgACMAcDBQMqE7GAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLMjANBgkqhkiG9w0BAQsFAAOCAQEAfF8cDK6ZLWu0 sjpGBQzNFf5P6rwpMFJBv4jtsvmYeUG4txsFHbzpwgBnIucHmC9smHLRodWZRN9p ybmhFqnlCYyrIEisy8wi121GvFtuvRArHqCgT4GVTbTWhbvYtPjhJS5kRxk66I69 fHJmp/xCS0ALV5Gwt5KhGhVVvsWQkMwyHuwY7KI7iWwKJobLwNnHGNdR1DASLrZE Q5dCu00bwxIxldT2b9OnqPSj+eBqXZlun1qX8uWNCt77H69pWUTOJzyxyULydQf9 6rmPL2SP891MzGJT/pctbFqNV02Un7TjTaycCcXa5h/w/6yDM2rcVBYJVr6EOV2F 9/F38D5pQw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:18 2026 by rpki-client