This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer File: urRT2Xui9KBFhD5rSpU7PlEG6vI.cer (raw, json) Hash identifier: xm9rjF6MPyjiAl+JdVBCGO5h0JD2FhEh6L4lV6AOVyk= Subject key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B9DCCA5054C8960B1EA105B585EAC2307 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 08 Jan 2026 13:29:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29385 IP: 94.230.224.0/24 IP: 94.230.227.0/24 IP: 213.206.32.0 -- 213.206.38.255 IP: 213.206.43.0/24 IP: 2a02:c8c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:cc:a5:05:4c:89:60:b1:ea:10:5b:58:5e:ac:23:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 8 13:29:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:8f:4c:b2:95:6f:4d:9f:ff:91:7b:b0:e3: c2:d4:83:fe:67:76:7d:00:67:98:36:49:37:6a:6a: 42:d9:11:4f:02:c0:ad:55:25:64:17:d2:78:4e:fb: 24:81:57:b3:bf:4e:20:cf:6a:20:d4:48:51:1b:f1: 3e:36:21:95:fa:ee:fc:95:9d:46:87:a2:cb:f8:59: b5:46:35:f8:70:ba:66:3f:0f:08:af:4d:03:cc:fe: 7d:17:ba:96:49:c0:54:93:45:d6:d1:6a:5a:7b:dc: 50:ab:0d:3d:46:bb:7c:4d:63:25:2d:42:8d:91:84: 35:eb:e3:07:fd:f6:7a:3c:19:6e:11:eb:68:24:a1: 10:b7:bd:61:9b:b8:b8:00:30:c9:62:dc:20:b8:70: 50:46:50:7e:44:f2:91:9c:49:78:bf:2c:c7:b7:eb: dc:94:3c:da:db:b7:f1:08:9a:1e:01:12:db:81:9c: 7a:13:87:c0:2b:81:57:75:d1:dc:75:3c:a5:4c:25: 6f:6a:47:29:1a:1d:43:bd:6d:c6:03:12:98:49:35: 20:88:96:5e:c8:d5:2d:8e:fc:88:f4:5c:95:b2:42: 2f:b3:85:a7:39:8f:7a:3d:f2:a1:2d:14:bd:ef:09: 31:1e:25:01:15:af:86:85:db:5e:f8:da:1a:0c:ad: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.230.224.0/24 94.230.227.0/24 213.206.32.0-213.206.38.255 213.206.43.0/24 IPv6: 2a02:c8c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29385 Signature Algorithm: sha256WithRSAEncryption 8e:7c:b7:71:81:a4:7b:76:20:70:04:5d:d8:bf:77:31:30:10: 88:f9:91:03:07:05:76:e2:af:f0:41:bf:95:0c:b8:14:ad:c0: 0d:cc:9a:4e:48:4c:29:3d:52:82:96:d3:94:7e:bb:7f:a3:2d: c7:1e:b5:42:54:c8:ae:24:78:58:22:16:d0:d4:70:73:24:14: e9:13:3e:9b:f4:ad:ba:af:12:79:0d:10:24:22:59:84:36:65: ae:e8:64:a3:42:be:ce:dd:9d:87:6d:2b:9d:fb:ce:6e:ba:94: b2:1e:21:fb:c0:ce:94:95:ff:37:fe:1e:48:ce:70:ed:32:57: 9b:dd:dd:3c:91:a0:c8:79:33:12:a3:d4:6e:d1:72:a3:55:c8: 9c:20:93:96:b7:aa:01:03:e1:87:ab:8b:5a:46:1c:a7:5a:a0: 0a:35:d6:12:32:96:dc:aa:f6:b1:cd:3f:7c:ab:e9:e0:57:65: 73:b8:29:74:77:97:2d:bf:d2:90:8f:f4:61:cb:0a:1a:9e:19: dc:1a:66:58:5d:db:25:d0:58:f8:8d:fc:49:f3:49:64:e4:f4: 22:eb:d1:a2:96:c6:26:31:45:6b:21:6a:b4:dc:f5:a4:dc:69: 92:db:d6:da:5c:ad:94:3d:69:4f:c0:6a:26:a8:b6:29:be:df: a9:f9:e7:74 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgISAZudzKUFTIlgseoQW1herCMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA4MTMyOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWI0NTNkOTdiYTJmNGEwNDU4NDNlNmI0YTk1M2IzZTUxMDZlYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj6PTLKVb02f/5F7sOPC1IP+Z3Z9 AGeYNkk3ampC2RFPAsCtVSVkF9J4TvskgVezv04gz2og1EhRG/E+NiGV+u78lZ1G h6LL+Fm1RjX4cLpmPw8Ir00DzP59F7qWScBUk0XW0Wpae9xQqw09Rrt8TWMlLUKN kYQ16+MH/fZ6PBluEetoJKEQt71hm7i4ADDJYtwguHBQRlB+RPKRnEl4vyzHt+vc lDza27fxCJoeARLbgZx6E4fAK4FXddHcdTylTCVvakcpGh1DvW3GAxKYSTUgiJZe yNUtjvyI9FyVskIvs4WnOY96PfKhLRS97wkxHiUBFa+Ghdte+NoaDK1XUwIDAQAB o4ICyDCCAsQwHQYDVR0OBBYEFLq0U9l7ovSgRYQ+a0qVOz5RBuryMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhLzY3MDNj YS1jZWQ0LTQyMDctYWIwNS00YTZmNTU3NzFiZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvNjcwM2Nh LWNlZDQtNDIwNy1hYjA1LTRhNmY1NTc3MWJkMS8xL3VyUlQyWHVpOUtCRmhENXJT cFU3UGxFRzZ2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgAwQAXubgAwQAXubjMAwDBAXVziADBADVziYDBADV ziswDQQCAAIwBwMFAyoCyMAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICcskwDQYJ KoZIhvcNAQELBQADggEBAI58t3GBpHt2IHAEXdi/dzEwEIj5kQMHBXbir/BBv5UM uBStwA3Mmk5ITCk9UoKW05R+u3+jLccetUJUyK4keFgiFtDUcHMkFOkTPpv0rbqv EnkNECQiWYQ2Za7oZKNCvs7dnYdtK537zm66lLIeIfvAzpSV/zf+HkjOcO0yV5vd 3TyRoMh5MxKj1G7RcqNVyJwgk5a3qgED4Yeri1pGHKdaoAo11hIyltyq9rHNP3yr 6eBXZXO4KXR3ly2/0pCP9GHLChqeGdwaZlhd2yXQWPiN/EnzSWTk9CLr0aKWxiYx RWsharTc9aTcaZLb1tpcrZQ9aU/Aaiaotim+36n553Q= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:48 2026 by rpki-client