This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer (raw, json) Hash identifier: +7PHt1CFPNxqhwN3qC5ruCk7kTNzbQkPD1ZcNPi0mkU= Subject key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED6401141E9B216F21411F1825B080 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50563 IP: 5.83.48.0/21 IP: 5.83.64.0/19 IP: 153.92.120.0/22 IP: 185.3.116.0/22 IP: 185.67.104.0/22 IP: 212.85.240.0/21 IP: 2a02:5540::/32 IP: 2a05:dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:64:01:14:1e:9b:21:6f:21:41:1f:18:25:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03e53d18f5f212ae0802a17ee5994c3331a43524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:bd:73:99:02:25:00:27:1e:d5:d4:48:3b: 6d:39:2f:b3:61:7c:ba:69:24:00:fd:4f:f3:e5:62: 65:09:5c:3b:e8:88:f2:08:cb:6c:4b:18:41:2f:80: 28:d7:35:c3:56:15:d1:5f:69:ca:a6:62:e3:28:8f: b9:9e:b4:83:a7:c4:a0:be:d6:48:72:bd:51:e8:dd: 03:f5:c7:99:5c:e9:1b:a3:a9:f2:3c:16:fa:1d:d8: be:0c:dd:7b:ba:c8:b3:8a:7c:8d:35:98:54:65:0c: 0d:19:67:ee:92:5a:04:44:2a:0f:61:9d:d2:e0:1c: 0f:9a:47:ab:0c:e1:ed:e1:a6:50:70:a4:5c:15:cf: bb:63:ce:eb:b9:fe:ac:78:2c:94:41:20:b3:6f:f8: 53:db:8f:f8:e9:73:d6:a3:01:fb:6e:ed:41:e2:31: 9c:4e:8f:e0:0d:5d:9f:9d:0f:a6:ab:14:75:7d:a7: 4c:f4:ae:dd:8a:39:74:5d:eb:5f:32:25:95:b8:22: 2b:9f:02:0e:52:3f:18:2e:04:fc:99:fa:ce:11:40: d3:30:30:79:f2:62:ce:7e:d0:9d:71:bc:a1:fd:a1: bf:bc:f6:ec:cf:80:a4:fe:a5:c5:81:05:91:6b:bb: f7:f9:3e:18:5a:db:4d:67:73:92:fd:fe:fb:3b:f3: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.48.0/21 5.83.64.0/19 153.92.120.0/22 185.3.116.0/22 185.67.104.0/22 212.85.240.0/21 IPv6: 2a02:5540::/32 2a05:dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50563 Signature Algorithm: sha256WithRSAEncryption 8c:f3:3c:f0:21:48:e5:a7:06:1d:b0:ff:10:c0:23:a3:53:8c: d3:49:6f:db:09:04:ae:1d:1a:b2:a8:d3:7a:ff:c9:49:fa:d2: 32:e8:9c:29:d6:cd:c6:be:d5:78:09:b4:58:6d:a8:b4:6a:b0: 6e:56:a5:9b:4b:4a:56:26:e4:bb:1c:8b:bd:26:cd:77:67:7e: d8:a1:a2:12:dd:ce:70:bd:48:9a:fb:d4:29:ad:34:44:d4:36: b3:2a:95:b7:52:57:c8:b2:17:75:c7:d4:96:aa:03:9d:24:37: c3:5a:9b:96:c7:b9:c1:93:64:92:b6:c9:b2:bb:9a:b8:b3:b6: dd:3f:0a:78:9e:1c:0e:53:dc:0a:89:dc:78:dc:6d:2d:3d:af: 10:c9:c7:a3:94:1b:39:d9:cc:60:1c:75:0c:9e:ec:c1:bf:13: ad:d1:85:2e:13:dd:ce:b1:14:bf:b5:ee:cb:17:50:06:95:a6: 3b:49:59:fd:d5:96:cc:5a:fc:26:8d:4c:38:fe:f7:bc:38:c6: 92:d7:62:24:1a:be:50:9e:fb:5e:ef:0b:4c:ee:dd:b9:18:88: 52:77:30:65:60:b8:e8:e2:15:e7:16:c7:92:9d:bf:e8:f0:2d: f3:fb:e2:8a:82:eb:b2:08:87:73:52:01:0c:c6:69:dc:e1:23: 97:e1:e6:4d -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgISAZt57WQBFB6bIW8hQR8YJbCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2U1M2QxOGY1ZjIxMmFlMDgwMmExN2VlNTk5NGMzMzMxYTQzNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPu9c5kCJQAnHtXUSDttOS+zYXy6 aSQA/U/z5WJlCVw76IjyCMtsSxhBL4Ao1zXDVhXRX2nKpmLjKI+5nrSDp8SgvtZI cr1R6N0D9ceZXOkbo6nyPBb6Hdi+DN17usizinyNNZhUZQwNGWfukloERCoPYZ3S 4BwPmkerDOHt4aZQcKRcFc+7Y87ruf6seCyUQSCzb/hT24/46XPWowH7bu1B4jGc To/gDV2fnQ+mqxR1fadM9K7dijl0XetfMiWVuCIrnwIOUj8YLgT8mfrOEUDTMDB5 8mLOftCdcbyh/aG/vPbsz4Ck/qXFgQWRa7v3+T4YWttNZ3OS/f77O/MdsQIDAQAB o4IC1DCCAtAwHQYDVR0OBBYEFAPlPRj18hKuCAKhfuWZTDMxpDUkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2RkZDlm MS0wZjJlLTRkNWYtODU3ZC0wMmJhYjlmNmY5NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvZGRkOWYx LTBmMmUtNGQ1Zi04NTdkLTAyYmFiOWY2Zjk1NS8xL0EtVTlHUFh5RXE0SUFxRi01 WmxNTXpHa05TUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQDBVMwAwQFBVNAAwQCmVx4AwQCuQN0AwQCuUNo AwQD1FXwMBQEAgACMA4DBQAqAlVAAwUDKgUNwDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMAxYMwDQYJKoZIhvcNAQELBQADggEBAIzzPPAhSOWnBh2w/xDAI6NTjNNJ b9sJBK4dGrKo03r/yUn60jLonCnWzca+1XgJtFhtqLRqsG5WpZtLSlYm5Lsci70m zXdnftihohLdznC9SJr71CmtNETUNrMqlbdSV8iyF3XH1JaqA50kN8Nam5bHucGT ZJK2ybK7mriztt0/CnieHA5T3AqJ3HjcbS09rxDJx6OUGznZzGAcdQye7MG/E63R hS4T3c6xFL+17ssXUAaVpjtJWf3Vlsxa/CaNTDj+97w4xpLXYiQavlCe+17vC0zu 3bkYiFJ3MGVguOjiFecWx5Kdv+jwLfP74oqC67IIh3NSAQzGadzhI5fh5k0= -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:22 2026 by rpki-client