This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer (raw, json) Hash identifier: EAu5oLhtt9EvRdKj5ruH4/KRwLp9sBKLpHxrGxcOu2o= Subject key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C76468EE04A63E51DB198F19FE7DF9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59869 IP: 45.84.132.0/22 IP: 81.22.176.0/20 IP: 178.22.224.0/21 IP: 2a07:ed80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:64:68:ee:04:a6:3e:51:db:19:8f:19:fe:7d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:39:c9:72:89:7b:bc:84:b6:93:4c:49:5e: ad:ed:85:ed:f1:c3:ab:91:6d:70:1d:76:75:7e:59: b5:90:5c:56:e3:d3:98:89:06:b1:43:04:f0:2b:ea: 6c:99:3b:b7:0a:1b:90:7a:4b:a6:e4:44:a2:80:f1: 4e:dc:08:e4:3e:48:ef:0c:fe:07:65:27:52:e0:e9: 05:21:dd:a7:40:a1:90:68:7a:9d:9f:bf:9d:f4:a7: 9c:6b:a6:ba:8d:25:80:a2:e2:34:0c:b4:70:c6:1f: 20:61:b5:27:74:c7:ff:21:35:d3:90:d4:2d:1f:c1: d1:2a:35:06:b8:5b:59:07:6c:df:90:8f:c2:e0:7a: f1:e1:20:5a:e8:74:b7:07:57:8e:5a:ea:c2:27:14: 00:45:d3:b7:b9:ed:59:9b:30:9e:f8:81:48:1c:b1: 58:0b:ca:4d:d3:fa:11:e5:14:5f:af:44:4a:5d:ab: 4d:e7:ab:78:44:32:ea:b9:cb:09:34:4b:3b:5a:42: 8b:92:82:21:31:27:c4:03:a3:70:dc:07:6e:53:15: 74:ea:e1:2b:ea:95:59:f5:4f:0e:a7:8b:6e:2d:53: b1:b0:3a:5b:b4:6c:07:6b:a5:15:c0:3a:0d:30:b4: fc:af:15:4f:5a:9b:e9:f5:d2:2d:a0:28:61:1c:08: fe:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.132.0/22 81.22.176.0/20 178.22.224.0/21 IPv6: 2a07:ed80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59869 Signature Algorithm: sha256WithRSAEncryption 76:a2:9e:f4:2d:7d:88:5d:ae:2b:95:3e:ed:ea:d6:df:12:c8: 2b:98:a8:35:c9:e2:c4:f7:55:5c:57:3a:df:da:f7:54:70:09: 2e:51:4e:c1:5d:5e:88:26:ff:12:09:eb:24:14:fa:ad:50:07: 81:14:72:19:69:b6:a6:5c:b7:d5:f6:4d:b0:5a:e3:b2:70:3b: 49:01:fa:c1:36:4f:45:ab:de:5d:af:6e:70:ad:13:68:e0:bb: 41:be:db:2c:de:1c:b9:ed:ef:ac:40:12:d4:63:e6:f3:f7:ba: 42:5e:20:71:f0:b5:69:d9:89:96:0b:97:8b:d2:48:5a:89:22: cf:c0:7c:4e:22:87:c6:5b:e2:16:86:8c:59:69:b3:d4:f7:f0: 6b:9c:f8:a6:f5:d8:d4:57:fd:ed:97:a2:bb:fb:c7:8d:a6:45: 82:04:54:b7:07:aa:98:b5:ab:1b:2a:31:87:d2:dd:cc:60:14: 6f:67:a4:4a:db:52:23:88:11:dd:6a:83:34:4e:6c:d8:d0:9c: 53:ef:0c:ac:96:0f:2a:1b:c0:c4:ef:7c:30:5d:52:66:4e:bf: e3:1c:4e:73:dc:ad:df:29:de:48:56:f0:3d:14:4b:63:47:c4: bd:b1:90:48:ee:ad:93:6f:9c:23:42:36:eb:b3:3d:ca:e3:6a: a2:fc:eb:54 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt3x2Ro7gSmPlHbGY8Z/n35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzQ2YzRkMjAwZmU1MDM1YzYxYjBjODk0Yjk0NTRlNzJkMjdjOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoc5yXKJe7yEtpNMSV6t7YXt8cOr kW1wHXZ1flm1kFxW49OYiQaxQwTwK+psmTu3ChuQekum5ESigPFO3AjkPkjvDP4H ZSdS4OkFId2nQKGQaHqdn7+d9Keca6a6jSWAouI0DLRwxh8gYbUndMf/ITXTkNQt H8HRKjUGuFtZB2zfkI/C4Hrx4SBa6HS3B1eOWurCJxQARdO3ue1ZmzCe+IFIHLFY C8pN0/oR5RRfr0RKXatN56t4RDLqucsJNEs7WkKLkoIhMSfEA6Nw3AduUxV06uEr 6pVZ9U8Op4tuLVOxsDpbtGwHa6UVwDoNMLT8rxVPWpvp9dItoChhHAj+ZQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFFNGxNIA/lA1xhsMiUuUVOctJ8kfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzU4N2E3 OS0xYjZjLTRjMmEtYjEzOS0yNGFhYjQ0ZjI1MzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvNTg3YTc5 LTFiNmMtNGMyYS1iMTM5LTI0YWFiNDRmMjUzOS8xL1UwYkUwZ0QtVURYR0d3eUpT NVJVNXkwbnlSOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLVSEAwQEURawAwQDshbgMA0EAgACMAcDBQAq B+2AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDp3TANBgkqhkiG9w0BAQsFAAOC AQEAdqKe9C19iF2uK5U+7erW3xLIK5ioNcnixPdVXFc639r3VHAJLlFOwV1eiCb/ EgnrJBT6rVAHgRRyGWm2ply31fZNsFrjsnA7SQH6wTZPRaveXa9ucK0TaOC7Qb7b LN4cue3vrEAS1GPm8/e6Ql4gcfC1admJlguXi9JIWokiz8B8TiKHxlviFoaMWWmz 1Pfwa5z4pvXY1Ff97Zeiu/vHjaZFggRUtweqmLWrGyoxh9LdzGAUb2ekSttSI4gR 3WqDNE5s2NCcU+8MrJYPKhvAxO98MF1SZk6/4xxOc9yt3yneSFbwPRRLY0fEvbGQ SO6tk2+cI0I267M9yuNqovzrVA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:08 2026 by rpki-client