This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer File: ueqJNvjlMGO0s73w87FbKuZn7xM.cer (raw, json) Hash identifier: MURdROAEtpprwRUnSsuH/8LFlc6l0QZkekyhf6ZX1Bc= Subject key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED43805D644EF3C39E720DEEF3EB4E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3285 AS: 8915 IP: 80.90.176.0/20 IP: 95.140.144.0/20 IP: 185.69.220.0/22 IP: 185.125.200.0/22 IP: 2a00:1818::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:43:80:5d:64:4e:f3:c3:9e:72:0d:ee:f3:eb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:9e:e0:fd:22:e2:3f:e9:51:33:6a:b5:d9: d4:6d:60:d0:72:1b:f6:c5:76:cb:97:22:5b:2a:f5: 30:74:44:d2:a5:b5:4e:fb:e2:7e:b9:47:3b:d1:ce: 4a:51:6f:29:53:63:26:5a:10:b1:bd:a4:3a:00:ef: 69:f6:98:75:e8:2e:a4:1b:9c:31:e1:c8:d6:ba:53: 0e:46:47:33:ef:6c:f1:cb:c5:34:0b:29:c3:68:73: 97:f8:2c:70:3b:5b:62:99:b4:3f:1b:f9:59:6e:e2: 53:a9:85:6d:0d:1b:35:e1:18:2b:eb:da:b2:e8:75: 81:20:66:83:fe:8d:05:39:e5:62:98:82:b4:93:dd: c2:92:b9:cd:0a:46:f8:cc:33:de:a5:c5:bc:a4:04: 1f:1b:d2:8c:d7:28:b6:2a:c4:d1:f3:b0:62:08:94: 4d:ab:42:aa:c7:5b:a4:28:a7:a6:e6:f0:d9:d2:5d: e6:90:fc:97:04:9f:62:72:82:df:96:d3:48:ab:89: 40:6d:59:30:7e:d4:3f:59:7d:42:3e:fc:ff:3d:77: ab:e9:93:53:a9:a5:6b:ff:f2:02:b5:c3:dc:f4:d3: 92:10:d0:f0:03:77:80:69:b9:bd:93:9e:51:be:77: 1d:e5:52:8a:e3:93:ed:31:f3:e7:2d:55:fd:c0:44: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.176.0/20 95.140.144.0/20 185.69.220.0/22 185.125.200.0/22 IPv6: 2a00:1818::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3285 8915 Signature Algorithm: sha256WithRSAEncryption 11:b2:c4:42:90:64:85:84:b7:e4:0c:30:e3:be:90:f6:e5:e9: f8:18:cd:33:58:46:6c:00:59:11:5f:49:1e:dc:40:3c:ed:d3: 2d:b8:37:db:37:c6:f3:0e:f9:5f:65:a7:c2:77:44:b5:3d:29: 10:32:d7:17:9e:f8:37:1a:c8:fd:e8:a2:5f:6c:ce:c7:c1:13: 29:4e:36:3d:e1:b7:62:f2:c7:40:0c:40:16:d1:24:89:07:24: cb:38:20:30:a6:98:6f:be:df:1b:fa:01:07:30:37:75:09:99: 5c:5d:9a:c3:c9:22:a6:34:64:93:8e:6f:37:a6:0b:14:6f:bb: 4b:21:1e:0e:af:87:2a:9b:0e:b7:67:89:7d:84:c4:fd:07:4b: fd:6d:23:cd:1e:ef:fb:fb:4e:6e:0d:f7:43:d7:22:39:29:a5: 79:c0:9a:97:39:cd:be:8f:2c:83:27:b8:17:37:a1:92:05:12: d9:bb:f5:68:ac:ae:a8:d9:99:a7:d7:d5:ad:23:fb:06:32:7f: 65:69:82:75:aa:fd:5f:58:df:53:2e:b4:08:5f:80:db:91:18: 86:09:d5:22:19:56:0b:5c:3a:14:b4:42:65:f7:a3:66:8f:e3: 5a:6a:05:e2:9c:47:bc:40:fb:c8:31:8b:85:99:89:fa:9e:a1: 77:ed:41:81 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgISAZt57UOAXWRO88Oecg3u8+tOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWVhODkzNmY4ZTUzMDYzYjRiM2JkZjBmM2IxNWIyYWU2NjdlZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P2e4P0i4j/pUTNqtdnUbWDQchv2 xXbLlyJbKvUwdETSpbVO++J+uUc70c5KUW8pU2MmWhCxvaQ6AO9p9ph16C6kG5wx 4cjWulMORkcz72zxy8U0CynDaHOX+CxwO1timbQ/G/lZbuJTqYVtDRs14Rgr69qy 6HWBIGaD/o0FOeVimIK0k93CkrnNCkb4zDPepcW8pAQfG9KM1yi2KsTR87BiCJRN q0Kqx1ukKKem5vDZ0l3mkPyXBJ9icoLfltNIq4lAbVkwftQ/WX1CPvz/PXer6ZNT qaVr//ICtcPc9NOSENDwA3eAabm9k55Rvncd5VKK45PtMfPnLVX9wERbIQIDAQAB o4ICxDCCAsAwHQYDVR0OBBYEFLnqiTb45TBjtLO98POxWyrmZ+8TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzL2VjMjll Mi0zNDQwLTQwOWEtOTg2YS1iMjUwOTk3ZmM3NWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvZWMyOWUy LTM0NDAtNDA5YS05ODZhLWIyNTA5OTdmYzc1ZC8xL3VlcUpOdmpsTUdPMHM3M3c4 N0ZiS3Vabjd4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQEUFqwAwQEX4yQAwQCuUXcAwQCuX3IMA0EAgAC MAcDBQAqABgYMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAgzVAgIi0zANBgkqhkiG 9w0BAQsFAAOCAQEAEbLEQpBkhYS35Aww476Q9uXp+BjNM1hGbABZEV9JHtxAPO3T Lbg32zfG8w75X2WnwndEtT0pEDLXF574NxrI/eiiX2zOx8ETKU42PeG3YvLHQAxA FtEkiQckyzggMKaYb77fG/oBBzA3dQmZXF2aw8kipjRkk45vN6YLFG+7SyEeDq+H KpsOt2eJfYTE/QdL/W0jzR7v+/tObg33Q9ciOSmlecCalznNvo8sgye4FzehkgUS 2bv1aKyuqNmZp9fVrSP7BjJ/ZWmCdar9X1jfUy60CF+A25EYhgnVIhlWC1w6FLRC ZfejZo/jWmoF4pxHvED7yDGLhZmJ+p6hd+1BgQ== -----END CERTIFICATE-----Generated at Wed Jan 21 12:47:32 2026 by rpki-client