This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer File: urwezBf2YNW9ieFhZ7nVAxv2oMs.cer (raw, json) Hash identifier: U9oGs43Jr1b9Qb/hhftg8ZxBkzl4jg1xRZMtwFgg4eM= Subject key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75291E0C16CDB5675962FED8D6B19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199697 IP: 193.37.158.0/24 IP: 2a12:6040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:91:e0:c1:6c:db:56:75:96:2f:ed:8d:6b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:0a:cc:5a:b5:46:16:86:45:23:fd:52:80: 97:90:ae:a4:5d:1b:88:ff:2c:e9:f3:8a:95:09:0e: 0a:d3:a7:de:72:59:1e:56:54:8e:84:a3:c8:34:41: c3:71:fd:47:15:98:0e:e8:13:a4:28:a9:74:bc:05: 15:29:2d:27:26:32:6b:a5:4d:74:15:c6:42:cf:bb: c2:31:ba:3f:87:ec:ac:a2:9e:20:f5:32:49:f3:03: cf:a9:9d:00:84:85:5f:a3:d7:d7:59:49:d9:81:1c: f9:9f:04:36:7d:2f:49:56:d4:30:89:c8:35:b1:8f: 93:cd:ce:f4:42:64:89:d9:fa:bf:5e:c6:da:a0:26: de:c8:12:e3:04:9e:b1:8d:ba:ab:b8:9a:61:ac:b1: 21:d8:9c:1b:b2:4a:69:6a:f6:0e:94:ba:e1:c7:d0: a5:45:38:20:d5:2f:1a:a2:2a:ff:59:c7:b7:a7:f8: 26:4d:4a:34:f0:e9:2e:05:a2:e4:62:c4:7d:22:0d: c5:62:d7:a9:55:3d:87:65:e0:af:e4:eb:12:ee:e5: 71:ce:08:83:26:c9:13:3f:7c:a3:75:fb:e6:f1:14: a9:ca:e2:c0:6b:9e:20:2b:55:7b:6c:58:b0:7a:e6: 39:5a:3d:d4:51:f5:10:eb:c7:5a:7f:4e:b0:b8:22: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.158.0/24 IPv6: 2a12:6040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199697 Signature Algorithm: sha256WithRSAEncryption 51:b2:d2:54:7a:88:db:6f:f9:2c:01:4f:5d:b4:04:79:4c:e4: cb:47:f6:2b:8a:da:40:57:17:c9:34:c0:15:f0:17:15:55:67: 20:c6:25:dc:d4:7e:01:a6:52:8e:d7:73:f8:b4:b7:f5:31:b8: 31:0b:19:cc:de:06:78:20:90:f5:94:73:32:78:b9:ce:87:0b: 96:d7:66:99:d6:fc:b9:73:0c:6e:3d:b2:9d:b4:ac:2e:6c:8d: 64:23:d6:8f:59:9d:a2:36:24:b6:b5:d4:6b:bc:aa:69:71:f1: ca:19:9a:40:f7:ea:b4:1e:3d:2a:09:2e:f6:e9:e5:65:ca:bf: 08:de:f6:4a:a9:7c:58:bb:ae:04:5b:76:7f:92:41:76:c5:97: dc:78:b6:55:6f:d5:db:4b:78:f3:f8:5f:87:18:c8:ee:4c:32: 89:00:cc:fb:f8:2a:11:ca:60:e9:0d:42:40:ab:1f:a0:00:fc: a5:43:49:d7:45:a8:8f:48:39:cf:73:81:11:82:4f:e6:d0:15: b4:ac:69:e7:f7:8f:ce:ae:26:69:f7:86:21:95:db:6b:d5:ea: a2:5d:a3:c7:a3:1d:cc:7b:c5:d3:43:67:3c:04:73:d7:6e:d5: e3:51:47:97:25:23:3b:84:9c:c2:84:74:74:98:eb:61:c1:bf: ea:61:75:52 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3x1KR4MFs21Z1li/tjWsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWJjMWVjYzE3ZjY2MGQ1YmQ4OWUxNjE2N2I5ZDUwMzFiZjZhMGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDkKzFq1RhaGRSP9UoCXkK6kXRuI /yzp84qVCQ4K06feclkeVlSOhKPINEHDcf1HFZgO6BOkKKl0vAUVKS0nJjJrpU10 FcZCz7vCMbo/h+ysop4g9TJJ8wPPqZ0AhIVfo9fXWUnZgRz5nwQ2fS9JVtQwicg1 sY+Tzc70QmSJ2fq/XsbaoCbeyBLjBJ6xjbqruJphrLEh2JwbskppavYOlLrhx9Cl RTgg1S8aoir/Wce3p/gmTUo08OkuBaLkYsR9Ig3FYtepVT2HZeCv5OsS7uVxzgiD JskTP3yjdfvm8RSpyuLAa54gK1V7bFiweuY5Wj3UUfUQ68daf06wuCJ58QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLq8HswX9mDVvYnhYWe51QMb9qDLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwL2NmMTBk Yi03NTgyLTQ1NTMtYmYxYi0xNzkxMTU5NGFlNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvY2YxMGRi LTc1ODItNDU1My1iZjFiLTE3OTExNTk0YWU1MS8xL3Vyd2V6QmYyWU5XOWllRmha N25WQXh2Mm9Ncy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSWeMA0EAgACMAcDBQMqEmBAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMMETANBgkqhkiG9w0BAQsFAAOCAQEAUbLSVHqI22/5 LAFPXbQEeUzky0f2K4raQFcXyTTAFfAXFVVnIMYl3NR+AaZSjtdz+LS39TG4MQsZ zN4GeCCQ9ZRzMni5zocLltdmmdb8uXMMbj2ynbSsLmyNZCPWj1mdojYktrXUa7yq aXHxyhmaQPfqtB49Kgku9unlZcq/CN72Sql8WLuuBFt2f5JBdsWX3Hi2VW/V20t4 8/hfhxjI7kwyiQDM+/gqEcpg6Q1CQKsfoAD8pUNJ10Woj0g5z3OBEYJP5tAVtKxp 5/ePzq4mafeGIZXba9Xqol2jx6MdzHvF00NnPARz127V41FHlyUjO4ScwoR0dJjr YcG/6mF1Ug== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:39 2026 by rpki-client