This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer File: RbUATsPPXBp1UYXW9AaDxkbMlOw.cer (raw, json) Hash identifier: d8d9Qa0qZ/gy/MEiF1hrFSx0GSbYaJF5zMA8Hgtt+tA= Subject key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC819B1DF3AB6F39587ED319DA69944 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200494 IP: 94.101.111.0/24 IP: 2a13:5dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:19:b1:df:3a:b6:f3:95:87:ed:31:9d:a6:99:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:79:bc:7c:6b:ce:7f:63:47:9e:25:63:26: c6:d4:d9:66:c7:f7:f0:19:ef:18:82:07:6e:3f:52: b3:bf:f9:71:3e:71:8e:92:98:d0:16:76:22:30:51: ae:40:1d:46:84:2d:9d:17:06:7a:ed:f5:5d:7e:91: 05:b6:1d:a3:f9:dd:31:97:86:d1:21:0b:53:8e:bc: 0f:23:9a:2c:21:0c:c6:41:6f:af:d7:63:69:ff:f6: 1d:48:fd:ed:80:fe:64:f3:a9:e5:94:9a:ad:ec:a0: ef:3a:b7:ca:45:f4:a0:3c:8e:f5:21:85:1f:b2:a4: 25:30:72:9d:03:a8:d7:f2:69:87:60:ca:83:3f:2c: 5a:86:4c:01:44:7b:07:b5:47:49:38:65:a8:46:25: 58:d5:c0:68:fd:ff:4f:81:88:a3:11:a1:78:ea:05: 8b:ed:b2:86:65:a8:0b:b0:17:f7:bd:49:e7:fa:2c: a7:0a:38:4a:83:77:f6:b0:f8:a5:0b:51:04:e5:78: 97:a6:a1:0e:eb:96:f0:b8:5a:a4:b2:09:66:b1:74: 90:5d:bd:bc:d3:ed:e4:91:5d:6b:57:e6:19:2c:42: f0:af:cc:b6:0c:f5:23:f7:81:e5:0b:0b:0e:7c:7d: 58:00:2f:aa:6c:1c:f0:6e:46:92:87:9d:47:db:c7: fb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.111.0/24 IPv6: 2a13:5dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200494 Signature Algorithm: sha256WithRSAEncryption 8a:c2:82:78:5c:82:28:04:95:04:b8:75:40:56:50:7b:5b:5b: 2a:78:2c:e0:af:5f:ca:3b:01:05:92:fe:86:ef:3b:29:ed:c1: ee:d3:98:9d:62:85:33:5c:36:5b:78:3f:6a:53:ed:2d:af:cd: ac:7a:b1:97:11:20:2c:34:6a:75:a7:a2:79:81:64:92:52:f0: 7f:19:4e:b5:48:47:81:1d:7b:35:1c:97:af:c3:40:16:dc:02: c6:cd:b3:11:1e:37:91:56:9d:9d:0e:d5:6f:40:96:bc:75:0c: 81:21:b5:6f:37:3c:27:b1:e6:67:05:26:09:ed:04:5a:93:75: c6:81:cf:b2:5e:2b:0d:11:45:6e:ad:61:4e:15:2e:1a:20:15: eb:a4:a1:e8:a4:db:ee:f9:39:63:2e:15:91:d4:b3:d5:fb:9f: 10:1f:12:11:ad:08:45:9c:ea:1a:21:58:7d:9c:b9:0e:d5:7e: f3:39:ca:1b:21:e9:fd:9e:9b:23:e7:d9:58:b6:d7:25:fc:8f: 90:4d:a1:db:dc:84:2a:69:8a:fb:45:62:e4:52:7f:7e:49:7b: 8f:f3:60:e3:30:4f:f1:07:93:c9:a1:ae:e4:81:da:c7:9a:29: f3:3a:b5:3b:34:02:60:8a:f1:69:5d:ef:c1:3d:39:77:65:7b: 94:84:32:ba -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yBmx3zq285WH7TGdpplEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWI1MDA0ZWMzY2Y1YzFhNzU1MTg1ZDZmNDA2ODNjNjQ2Y2M5NGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d15vHxrzn9jR54lYybG1Nlmx/fw Ge8YggduP1Kzv/lxPnGOkpjQFnYiMFGuQB1GhC2dFwZ67fVdfpEFth2j+d0xl4bR IQtTjrwPI5osIQzGQW+v12Np//YdSP3tgP5k86nllJqt7KDvOrfKRfSgPI71IYUf sqQlMHKdA6jX8mmHYMqDPyxahkwBRHsHtUdJOGWoRiVY1cBo/f9PgYijEaF46gWL 7bKGZagLsBf3vUnn+iynCjhKg3f2sPilC1EE5XiXpqEO65bwuFqksglmsXSQXb28 0+3kkV1rV+YZLELwr8y2DPUj94HlCwsOfH1YAC+qbBzwbkaSh51H28f7uQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEW1AE7Dz1wadVGF1vQGg8ZGzJTsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2M1ZTUy YS04MDIzLTQ3YWMtYjI3YS00YWViZWZhYzQ5YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvYzVlNTJh LTgwMjMtNDdhYy1iMjdhLTRhZWJlZmFjNDliMS8xL1JiVUFUc1BQWEJwMVVZWFc5 QWFEeGtiTWxPdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXmVvMA0EAgACMAcDBQMqE13AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMPLjANBgkqhkiG9w0BAQsFAAOCAQEAisKCeFyCKASV BLh1QFZQe1tbKngs4K9fyjsBBZL+hu87Ke3B7tOYnWKFM1w2W3g/alPtLa/NrHqx lxEgLDRqdaeieYFkklLwfxlOtUhHgR17NRyXr8NAFtwCxs2zER43kVadnQ7Vb0CW vHUMgSG1bzc8J7HmZwUmCe0EWpN1xoHPsl4rDRFFbq1hThUuGiAV66Sh6KTb7vk5 Yy4VkdSz1fufEB8SEa0IRZzqGiFYfZy5DtV+8znKGyHp/Z6bI+fZWLbXJfyPkE2h 29yEKmmK+0Vi5FJ/fkl7j/Ng4zBP8QeTyaGu5IHax5op8zq1OzQCYIrxaV3vwT05 d2V7lIQyug== -----END CERTIFICATE-----Generated at Mon Jan 26 01:55:51 2026 by rpki-client