This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer File: ufR3lXXLm_BYJDKH6YI03sqRH8k.cer (raw, json) Hash identifier: XiB0OhmFV1MEWVDL5Ez+dbyULAuOzIfTu0GH1yuQuAo= Subject key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E86E449AAFFEF38D6BAE018FDBE51 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208675 IP: 45.89.136.0/22 IP: 2a0b:d300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:86:e4:49:aa:ff:ef:38:d6:ba:e0:18:fd:be:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9f4779575cb9bf058243287e98234deca911fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:0d:0a:a5:6c:c3:69:02:3c:89:63:37:a0: 0f:db:15:05:be:55:ea:f8:5f:52:ce:43:30:50:75: ba:b2:d9:aa:73:89:03:91:53:01:a6:5a:f8:10:29: b3:c8:e9:72:e6:dd:b5:71:f1:33:c4:f1:79:0c:40: 2e:a8:85:15:7e:5e:7b:5d:8f:b1:a8:d1:89:c4:dd: 0f:d7:e3:67:7f:63:4a:ae:f3:de:a1:cb:8c:0d:db: 26:be:65:a2:d5:bc:98:40:d2:26:30:2e:41:f7:68: cb:0b:39:8e:d9:42:be:c5:e1:f0:51:66:2d:ee:b6: b6:7c:66:b5:08:d5:3c:47:95:6b:ce:40:92:12:1b: 3a:9e:ac:ff:6c:6d:1c:e4:58:40:a6:72:22:cd:9c: 33:93:4f:3c:f5:3f:ec:ce:56:21:9b:d5:f0:4c:dd: 7e:b0:fb:da:e2:c7:c5:1d:03:d2:f9:3f:f3:b7:37: df:45:72:bf:d3:f4:66:fe:b1:39:45:02:f0:08:84: b3:c9:86:3b:f9:b4:02:2b:e2:64:ce:e3:df:fb:fe: 97:f8:fc:5a:5c:70:e0:11:ab:b3:e2:2b:7a:89:e6: 1b:53:f0:e3:89:6e:4c:16:64:52:85:45:d7:92:3d: 74:83:61:d0:4d:c0:c5:d2:78:c0:75:11:c7:47:2d: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.136.0/22 IPv6: 2a0b:d300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208675 Signature Algorithm: sha256WithRSAEncryption 57:9b:f6:6b:ef:1c:fe:7f:d3:4c:16:ec:22:57:df:53:9e:e9: fd:72:7c:af:2c:3e:91:4e:72:04:51:1d:a2:73:52:ae:05:0e: ab:f4:82:b3:aa:af:19:c9:21:2a:c0:f2:10:33:57:2e:72:4a: 5f:d5:54:f2:c8:3a:e0:6e:a3:c8:b2:3d:1f:a2:fd:83:b0:3d: 9e:32:27:8c:1e:37:3c:99:1f:ec:92:e4:e7:b5:2b:f4:a4:31: eb:86:d3:6d:52:bf:ff:87:43:5e:84:de:c0:32:67:51:4d:aa: 52:90:79:32:98:eb:d8:67:5f:2f:2f:f6:8c:c9:91:22:01:a4: ae:35:51:f4:c9:f6:b8:55:53:92:cd:8d:99:8a:c6:c4:27:d9: fa:90:6d:a0:3c:fc:ac:39:34:68:b9:ef:89:38:6c:b9:d3:17: ce:80:03:59:a8:d2:d0:bb:f0:15:72:7b:fc:34:88:af:90:59: 3a:9e:c7:57:23:15:97:a2:fd:42:27:d4:9e:3a:33:e0:86:82: 64:84:86:fb:06:bd:3b:7a:be:b9:d5:f9:81:10:a7:d5:3f:8c: 22:60:62:35:0f:45:18:cc:db:9d:71:fc:d6:f1:f2:60:31:d2: 73:5d:cc:13:70:2f:85:2d:0c:a4:27:37:0d:c1:5d:10:cf:83: 84:7c:6f:ac -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5fobkSar/7zjWuuAY/b5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWY0Nzc5NTc1Y2I5YmYwNTgyNDMyODdlOTgyMzRkZWNhOTExZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1INCqVsw2kCPIljN6AP2xUFvlXq +F9SzkMwUHW6stmqc4kDkVMBplr4ECmzyOly5t21cfEzxPF5DEAuqIUVfl57XY+x qNGJxN0P1+Nnf2NKrvPeocuMDdsmvmWi1byYQNImMC5B92jLCzmO2UK+xeHwUWYt 7ra2fGa1CNU8R5VrzkCSEhs6nqz/bG0c5FhApnIizZwzk0889T/szlYhm9XwTN1+ sPva4sfFHQPS+T/ztzffRXK/0/Rm/rE5RQLwCISzyYY7+bQCK+JkzuPf+/6X+Pxa XHDgEauz4it6ieYbU/DjiW5MFmRShUXXkj10g2HQTcDF0njAdRHHRy1cBwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLn0d5V1y5vwWCQyh+mCNN7KkR/JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2Y2ZDJk ZC0wM2E3LTRmMWYtYjg5MC1jZDlmZjA1NTJmOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvZjZkMmRk LTAzYTctNGYxZi1iODkwLWNkOWZmMDU1MmY5Mi8xL3VmUjNsWFhMbV9CWUpES0g2 WUkwM3NxUkg4ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLVmIMA0EAgACMAcDBQMqC9MAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMvIzANBgkqhkiG9w0BAQsFAAOCAQEAV5v2a+8c/n/T TBbsIlffU57p/XJ8ryw+kU5yBFEdonNSrgUOq/SCs6qvGckhKsDyEDNXLnJKX9VU 8sg64G6jyLI9H6L9g7A9njInjB43PJkf7JLk57Ur9KQx64bTbVK//4dDXoTewDJn UU2qUpB5Mpjr2GdfLy/2jMmRIgGkrjVR9Mn2uFVTks2NmYrGxCfZ+pBtoDz8rDk0 aLnviThsudMXzoADWajS0LvwFXJ7/DSIr5BZOp7HVyMVl6L9QifUnjoz4IaCZISG +wa9O3q+udX5gRCn1T+MImBiNQ9FGMzbnXH81vHyYDHSc13ME3AvhS0MpCc3DcFd EM+DhHxvrA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:49 2026 by rpki-client