This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer File: U1vkU3bViYdFK9Bka5p0z562yy0.cer (raw, json) Hash identifier: a2rTD0gfYoOuf9sqP5VJI5ej5+oaGvJ3h8V5TMnFwLg= Subject key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC91528C673721F3D94EC08A711D68E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200069 IP: 45.14.148.0/22 IP: 87.253.232.0/21 IP: 185.189.236.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:15:28:c6:73:72:1f:3d:94:ec:08:a7:11:d6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:13:26:8f:da:f7:29:9b:59:b9:35:43:a0: 0b:dc:64:36:c4:cc:7a:03:ae:a8:a8:16:d7:6d:fc: 4b:e5:38:6c:df:fb:83:6d:a5:02:93:17:34:ac:86: 8a:13:09:2c:17:75:fb:35:42:fb:0b:fc:9f:b9:51: ca:6b:ef:3b:aa:67:13:54:f5:00:c7:8b:07:c3:ff: f8:20:d3:ff:5c:a6:5d:60:a5:76:c3:e1:7f:e7:f6: 72:34:00:d5:3c:6d:3f:45:04:07:d3:e9:e5:67:6a: 67:2b:46:d8:dc:be:f9:33:69:bc:4d:77:ac:43:d4: 5c:c2:87:24:5c:f3:28:1e:e1:2f:a7:f7:55:9f:51: 81:3b:c4:47:e5:85:7c:7c:f1:2d:fd:08:04:12:f0: d0:38:a3:c7:f4:ac:26:f1:ed:28:24:9b:72:fd:fb: 21:8a:43:89:8f:11:b0:85:f9:e7:06:49:89:54:43: c4:d9:c0:55:ed:be:cc:c2:4d:16:df:0d:bc:ea:05: 0d:3a:32:5b:5c:dc:70:f9:c4:ae:e1:81:93:9c:d4: 0d:29:14:93:f0:28:a1:94:ea:f9:7c:d6:e5:d4:3b: 31:40:1c:af:6d:b9:f3:01:70:45:e5:73:b4:66:04: 01:20:82:58:27:00:73:1b:01:d5:e0:4e:40:27:e4: c3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.148.0/22 87.253.232.0/21 185.189.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200069 Signature Algorithm: sha256WithRSAEncryption 3f:ba:3d:cf:2d:1f:e3:63:4b:cd:7f:af:c1:8d:66:76:ec:65: 0f:d4:bd:6b:aa:75:68:57:56:a9:16:9a:3e:89:36:6c:0a:a0: 2f:3c:60:70:df:b7:4e:fd:4b:c8:8a:aa:a7:b1:10:18:15:76: 49:6f:b4:22:1b:32:86:14:ef:ec:2b:b2:d3:9e:61:75:21:68: 78:e4:8e:7d:c2:79:ad:6a:ab:1b:e1:d9:ad:e7:62:33:0e:78: a3:0d:89:83:5a:f3:8d:0c:9c:39:32:ba:af:f4:5f:4f:9c:c7: 39:aa:cf:d9:5d:77:2a:90:27:04:a0:42:bd:56:9a:b1:7f:3c: 9c:9c:c6:1d:50:bc:b0:3c:6a:0a:fe:02:57:a3:d9:f9:cc:23: 45:2a:6c:48:19:e2:1d:e7:10:f4:17:c3:51:47:c2:a8:49:a2: 32:22:0f:8f:62:cf:c8:94:54:df:a0:ff:9b:42:0c:6b:cb:b3: 6f:83:97:03:92:55:16:77:45:e5:c1:52:35:b4:f5:82:55:e0: e1:33:e2:84:cc:72:bb:cb:a4:3b:e9:e4:34:c9:e0:6d:eb:f8: a5:94:cc:58:21:3f:7c:96:1a:8b:43:e4:1f:09:c3:95:e7:90: a6:67:50:60:09:a2:f4:82:2b:29:2f:8c:0c:90:6f:3f:d0:8e: 91:03:7c:5e -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt6yRUoxnNyHz2U7AinEdaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzViZTQ1Mzc2ZDU4OTg3NDUyYmQwNjQ2YjlhNzRjZjllYjZjYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC8TJo/a9ymbWbk1Q6AL3GQ2xMx6 A66oqBbXbfxL5Ths3/uDbaUCkxc0rIaKEwksF3X7NUL7C/yfuVHKa+87qmcTVPUA x4sHw//4INP/XKZdYKV2w+F/5/ZyNADVPG0/RQQH0+nlZ2pnK0bY3L75M2m8TXes Q9RcwockXPMoHuEvp/dVn1GBO8RH5YV8fPEt/QgEEvDQOKPH9Kwm8e0oJJty/fsh ikOJjxGwhfnnBkmJVEPE2cBV7b7Mwk0W3w286gUNOjJbXNxw+cSu4YGTnNQNKRST 8CihlOr5fNbl1DsxQByvbbnzAXBF5XO0ZgQBIIJYJwBzGwHV4E5AJ+TDBQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFFNb5FN21YmHRSvQZGuadM+etsstMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2ZiMzlh OC02MjNiLTQ0MzUtOTRmZS1jZWM5MmI1NzgwMDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZmIzOWE4 LTYyM2ItNDQzNS05NGZlLWNlYzkyYjU3ODAwNi8xL1UxdmtVM2JWaVlkRks5Qmth NXAwejU2Mnl5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCLQ6UAwQDV/3oAwQCub3sMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwMNhTANBgkqhkiG9w0BAQsFAAOCAQEAP7o9zy0f42NLzX+v wY1mduxlD9S9a6p1aFdWqRaaPok2bAqgLzxgcN+3Tv1LyIqqp7EQGBV2SW+0Ihsy hhTv7Cuy055hdSFoeOSOfcJ5rWqrG+HZrediMw54ow2Jg1rzjQycOTK6r/RfT5zH OarP2V13KpAnBKBCvVaasX88nJzGHVC8sDxqCv4CV6PZ+cwjRSpsSBniHecQ9BfD UUfCqEmiMiIPj2LPyJRU36D/m0IMa8uzb4OXA5JVFndF5cFSNbT1glXg4TPihMxy u8ukO+nkNMngbev4pZTMWCE/fJYai0PkHwnDleeQpmdQYAmi9IIrKS+MDJBvP9CO kQN8Xg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:29 2026 by rpki-client