This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U3h815RuENiGRqx53lfMbsWeQTI.cer File: U3h815RuENiGRqx53lfMbsWeQTI.cer (raw, json) Hash identifier: mc4qFOqJ9dDbOUlUYoKcghhRV/pwxJQvXK38okC7UoQ= Subject key identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7D48BD62AE3ADC2FCF1A19C2992F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.54.124.0/22 IP: 2a01:bde0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7d:48:bd:62:ae:3a:dc:2f:cf:1a:19:c2:99:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53787cd7946e10d88646ac79de57cc6ec59e4132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e9:a2:e7:41:cf:d6:db:89:c9:fb:b8:5a:27: cb:5d:95:83:fa:b6:1b:34:ac:48:ae:42:9c:58:74: 43:bf:bd:9e:61:94:f6:33:24:44:bc:b8:b4:9f:38: 51:d4:b0:62:9e:04:dc:52:21:e2:94:0d:5f:6d:b2: d0:ca:37:c7:d7:1a:13:5e:e2:c9:4d:0d:18:0e:26: 09:fc:85:19:b6:7b:35:3b:92:5b:b1:26:35:0c:c5: 51:ad:b2:43:f1:db:eb:52:36:03:c0:fa:42:62:b8: ee:94:eb:db:27:c9:1a:83:40:39:15:c2:49:a0:88: d8:d3:72:4a:d0:94:f1:5c:a4:3b:02:ec:04:e4:96: 4c:7c:a1:0d:ef:15:c9:27:5c:a1:ee:3d:ba:f7:d2: b8:6a:de:ac:99:06:62:fa:4a:5b:46:2a:19:bd:87: 29:af:4a:6f:ef:85:1e:97:3f:e5:bc:00:f1:6b:1d: 61:25:b4:e9:7b:a4:40:69:85:1c:26:0f:ac:96:f3: be:3d:d8:7b:48:52:95:53:23:b5:68:41:68:22:f6: d8:ca:74:f3:3c:5c:7b:6d:67:96:86:aa:2c:64:69: 21:24:c9:5d:fd:df:1f:45:24:8a:ef:5b:a3:60:32: fa:cf:81:dd:ba:79:c3:44:18:7c:ea:20:e8:a1:28: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:7C:D7:94:6E:10:D8:86:46:AC:79:DE:57:CC:6E:C5:9E:41:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c77825-68a3-4b3e-bc90-523fd86a07c7/1/U3h815RuENiGRqx53lfMbsWeQTI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.124.0/22 IPv6: 2a01:bde0::/32 Signature Algorithm: sha256WithRSAEncryption 59:1c:1f:07:a5:26:3f:ed:e4:22:a2:58:40:24:42:68:1d:59: 04:44:69:47:36:fd:df:dd:9f:d4:11:a4:9e:1f:00:f4:c0:e1: a1:35:4b:66:a1:c1:42:c7:2c:bc:88:10:29:6f:2a:c8:26:9d: f1:96:ee:3b:64:3d:1e:bb:bb:d2:85:e0:f3:9b:64:28:0e:a1: dd:a6:b3:f8:c7:43:61:4f:2a:8e:7d:c6:2b:a6:a9:7c:9a:0b: 23:78:72:e9:b6:58:a6:24:36:eb:15:03:5a:df:dc:1d:e8:8e: dd:49:f3:86:ed:31:d0:dd:d8:d6:49:61:3d:7c:ef:61:d9:54: 19:8c:c5:52:99:46:ce:1c:57:b7:2a:ab:66:4b:f0:c3:85:a8: f9:a5:2a:67:76:24:7c:f1:bb:a3:16:04:c5:5a:5b:59:9b:6c: 99:33:2b:27:5a:b6:fb:cb:01:21:9c:47:39:bd:91:45:23:74: f0:67:29:3c:b1:d9:36:1c:6e:2e:00:be:24:ce:d9:c6:bc:05: 6a:1e:bb:8b:ed:bc:ed:33:a7:94:aa:f1:d9:c7:0d:56:bf:00: c6:96:88:fa:bb:a8:01:69:45:47:da:3c:6b:de:a1:6e:d2:b2: 2a:e7:0f:41:e8:47:bd:58:77:fb:3e:ba:7e:7f:d7:a9:ef:69: 4d:d7:e8:7a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt2631IvWKuOtwvzxoZwpkvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mzc4N2NkNzk0NmUxMGQ4ODY0NmFjNzlkZTU3Y2M2ZWM1OWU0MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9emi50HP1tuJyfu4WifLXZWD+rYb NKxIrkKcWHRDv72eYZT2MyREvLi0nzhR1LBingTcUiHilA1fbbLQyjfH1xoTXuLJ TQ0YDiYJ/IUZtns1O5JbsSY1DMVRrbJD8dvrUjYDwPpCYrjulOvbJ8kag0A5FcJJ oIjY03JK0JTxXKQ7AuwE5JZMfKEN7xXJJ1yh7j2699K4at6smQZi+kpbRioZvYcp r0pv74Uelz/lvADxax1hJbTpe6RAaYUcJg+slvO+Pdh7SFKVUyO1aEFoIvbYynTz PFx7bWeWhqosZGkhJMld/d8fRSSK71ujYDL6z4HdunnDRBh86iDooSiqfwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFN4fNeUbhDYhkased5XzG7FnkEyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2M3Nzgy NS02OGEzLTRiM2UtYmM5MC01MjNmZDg2YTA3YzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvYzc3ODI1 LTY4YTMtNGIzZS1iYzkwLTUyM2ZkODZhMDdjNy8xL1UzaDgxNVJ1RU5pR1JxeDUz bGZNYnNXZVFUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTZ8MA0EAgACMAcDBQAqAb3gMA0GCSqGSIb3 DQEBCwUAA4IBAQBZHB8HpSY/7eQiolhAJEJoHVkERGlHNv3f3Z/UEaSeHwD0wOGh NUtmocFCxyy8iBApbyrIJp3xlu47ZD0eu7vSheDzm2QoDqHdprP4x0NhTyqOfcYr pql8mgsjeHLptlimJDbrFQNa39wd6I7dSfOG7THQ3djWSWE9fO9h2VQZjMVSmUbO HFe3KqtmS/DDhaj5pSpndiR88bujFgTFWltZm2yZMysnWrb7ywEhnEc5vZFFI3Tw Zyk8sdk2HG4uAL4kztnGvAVqHruL7bztM6eUqvHZxw1WvwDGloj6u6gBaUVH2jxr 3qFu0rIq5w9B6Ee9WHf7Prp+f9ep72lN1+h6 -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:44 2026 by rpki-client