This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer File: A-uwAVKCgXNL9clLxL729umaN34.cer (raw, json) Hash identifier: dQbrowIiGy8qNhd5TYbRENm0FJH0h1WWCaVtonp/yC0= Subject key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F04823556688ECA2CE7560B7B6B15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42878 IP: 91.193.200.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:04:82:35:56:68:8e:ca:2c:e7:56:0b:7b:6b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:f8:9d:fe:22:01:51:30:d0:e9:b7:f0:7d: 0b:fa:d7:a4:ae:ff:70:bb:62:eb:74:83:c3:7d:51: 92:68:07:92:21:ad:27:69:62:fb:82:9d:d6:3d:9c: 70:f4:7e:9c:58:1e:ac:90:48:33:d3:1d:f6:45:f9: a3:95:db:a5:8f:e1:d5:85:c6:2e:dc:a3:72:f4:74: bb:41:0c:c0:03:9e:c3:de:d1:3d:da:85:e3:13:47: 42:5d:0f:98:b7:0c:8b:3e:c8:91:15:2d:60:b8:d8: fe:04:1f:6a:e3:32:31:7d:d8:da:7b:8a:1b:da:d5: a5:e4:d0:3e:91:c2:73:85:c3:df:a2:35:39:e9:a7: 61:e7:36:26:89:b1:5f:4f:9d:88:6b:f9:6c:95:87: 94:85:5b:fd:44:95:b1:53:43:9b:05:35:90:26:37: fb:37:48:bb:9f:f1:b3:97:fd:ee:e7:a2:21:b0:86: c8:08:91:54:38:f4:d6:2d:2f:17:db:54:92:b3:89: fa:a4:f7:53:41:42:b9:ea:6b:72:33:bf:6c:cb:fb: c2:88:8a:76:6d:3e:f6:65:eb:f4:19:59:f4:bf:09: dd:f3:74:0d:bf:e1:e8:f9:28:e0:e5:7c:df:9e:5b: ac:d5:1b:c4:da:32:a9:1b:2d:19:fc:2d:85:ce:c7: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.200.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42878 Signature Algorithm: sha256WithRSAEncryption 80:af:57:df:b2:09:2e:e0:33:c1:3d:92:ed:9a:a4:1b:46:f7: 87:28:e8:cb:16:94:a2:d0:1f:57:4d:e0:81:9b:7d:77:a2:80: 55:e4:ce:0c:e1:0a:31:19:65:fc:e4:79:c2:a3:5a:70:e7:b2: cc:3d:d5:a9:b5:b1:3e:5e:3d:82:04:61:1c:c4:5f:40:6a:62: 08:57:4e:8a:d8:86:0b:b3:28:db:a7:04:28:74:56:de:8f:a7: c7:99:7f:c3:a7:6f:97:f9:39:c0:5a:e0:70:f9:84:16:45:11: d8:7d:bd:b1:2f:55:98:1f:70:83:dc:4e:fc:53:18:56:5b:b5: 7b:47:09:a5:a6:2b:18:c9:25:6e:0e:a5:83:26:e3:82:23:e5: 5e:90:05:e5:f3:60:0f:a6:7e:8c:8c:e5:59:7e:b7:24:f6:3c: fd:dd:e4:b3:c3:58:b3:80:c1:57:e5:57:f1:3a:e3:6a:6f:3a: c1:8c:16:e3:56:2c:80:10:1a:a7:eb:66:b0:c5:d7:6b:30:2a: 96:ea:50:e8:87:c1:12:1e:9d:d8:06:09:bf:0a:b8:09:c1:7f: 9b:ba:dc:ed:4a:82:2f:2a:da:09:ef:71:cd:e2:53:9c:69:0d: cd:94:e1:ba:d2:b8:da:1c:14:b8:4c:77:17:d0:71:0d:59:23: 2b:6d:4a:6e -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt5fwSCNVZojsos51YLe2sVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2ViYjAwMTUyODI4MTczNGJmNWM5NGJjNGJlZjZmNmU5OWEzNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcP4nf4iAVEw0Om38H0L+tekrv9w u2LrdIPDfVGSaAeSIa0naWL7gp3WPZxw9H6cWB6skEgz0x32Rfmjldulj+HVhcYu 3KNy9HS7QQzAA57D3tE92oXjE0dCXQ+YtwyLPsiRFS1guNj+BB9q4zIxfdjae4ob 2tWl5NA+kcJzhcPfojU56adh5zYmibFfT52Ia/lslYeUhVv9RJWxU0ObBTWQJjf7 N0i7n/Gzl/3u56IhsIbICJFUOPTWLS8X21SSs4n6pPdTQUK56mtyM79sy/vCiIp2 bT72Zev0GVn0vwnd83QNv+Ho+Sjg5Xzfnlus1RvE2jKpGy0Z/C2FzsePawIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAPrsAFSgoFzS/XJS8S+9vbpmjd+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzBkM2Y1 MS1hZjczLTQwNDUtYTBmMS1lYWI4MjhlY2E0NWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvMGQzZjUx LWFmNzMtNDA0NS1hMGYxLWVhYjgyOGVjYTQ1Yi8xL0EtdXdBVktDZ1hOTDljbEx4 TDcyOXVtYU4zNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW8HIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCnfjANBgkqhkiG9w0BAQsFAAOCAQEAgK9X37IJLuAzwT2S7ZqkG0b3hyjoyxaU otAfV03ggZt9d6KAVeTODOEKMRll/OR5wqNacOeyzD3VqbWxPl49ggRhHMRfQGpi CFdOitiGC7Mo26cEKHRW3o+nx5l/w6dvl/k5wFrgcPmEFkUR2H29sS9VmB9wg9xO /FMYVlu1e0cJpaYrGMklbg6lgybjgiPlXpAF5fNgD6Z+jIzlWX63JPY8/d3ks8NY s4DBV+VX8Trjam86wYwW41YsgBAap+tmsMXXazAqlupQ6IfBEh6d2AYJvwq4CcF/ m7rc7UqCLyraCe9xzeJTnGkNzZThutK42hwUuEx3F9BxDVkjK21Kbg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:13 2026 by rpki-client