This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer File: U7EFBlwNkTm1_-3DLJAM9ktDEus.cer (raw, json) Hash identifier: RqUeFbn8VjTUWPOFgK63UYLaLCM0joRTvD5aQTV5nIE= Subject key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF438633718F4DFCD680D8D9E49B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.41.124.0/22 IP: 2a04:8b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f4:38:63:37:18:f4:df:cd:68:0d:8d:9e:49:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:df:01:3a:f9:3a:96:60:e3:77:6a:43:ca:4b: ea:d6:37:01:7f:68:14:6a:ca:22:79:12:17:d1:7c: ce:a3:71:10:b6:d5:f4:0f:1d:58:7b:c8:9c:37:0a: ca:32:d2:ce:78:d6:93:3b:dd:ef:c1:49:a6:4b:0e: 35:f6:7c:fb:a9:bb:ba:87:93:83:d6:8c:88:da:5d: 59:dd:1b:89:43:4d:56:ef:4c:38:f8:24:c0:fd:e9: 56:20:e9:6c:2c:26:27:40:1e:7e:79:a4:0c:4d:10: 8b:78:e8:93:99:0d:35:5e:94:18:c2:54:65:b5:08: ea:21:3b:6c:62:90:9f:82:15:c3:67:bd:6e:fe:92: 7c:6c:c0:28:2e:7d:01:f9:8d:bd:d9:97:64:ac:ed: 33:e0:52:1a:1c:d9:1f:e1:33:a6:45:a7:f3:ad:18: 11:6c:1f:29:29:54:6b:a0:b2:61:0e:9f:27:df:4c: 01:8a:bc:48:df:60:17:46:ba:5e:52:35:cf:1c:12: 9c:f5:12:e3:d6:92:67:9b:f2:f0:0f:db:77:83:54: e7:0d:69:ca:98:bf:d4:a8:90:98:66:55:aa:d4:66: e6:cb:56:61:ef:f1:18:ae:22:1f:37:05:bf:b1:2a: 3a:3c:0b:2f:ed:d8:68:53:89:56:fd:2e:6a:46:c9: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.124.0/22 IPv6: 2a04:8b00::/29 Signature Algorithm: sha256WithRSAEncryption 9e:42:a9:e7:eb:3a:da:2a:d6:3e:a6:eb:b0:ab:7a:f0:af:50: 47:73:59:f5:9a:b1:64:e1:26:ed:a9:fa:94:df:65:6c:98:59: d3:64:ff:32:6e:ed:dc:ab:c9:36:ea:1e:0d:df:bc:8d:59:a9: 05:09:37:83:4b:21:34:cb:8d:8b:12:61:4b:5e:39:9a:55:2e: 54:9d:a3:17:2e:58:a1:0f:fe:00:4c:17:38:e9:17:ba:c3:69: 63:b8:51:46:d9:4f:c9:d7:36:fa:75:0d:4d:ec:35:31:72:2f: 09:62:85:7f:8e:46:a3:c9:82:ff:7f:c2:7b:27:a6:f5:1e:43: 0c:90:14:40:ce:03:44:c6:c3:61:2e:ec:8c:69:56:6a:1c:86: 83:a1:63:a7:5c:1d:bc:2c:c6:07:fd:c0:75:64:4e:e3:fe:a5: 04:df:1f:33:99:f8:39:bc:1e:3d:f7:3c:4a:3b:61:eb:cd:9b: d1:1c:c8:51:81:84:62:f3:3e:71:51:d1:c9:02:35:c8:eb:b3: e4:31:68:2e:38:10:c6:7f:b3:72:09:80:94:d0:dd:de:c7:78: 6a:a0:fe:9f:53:ba:a9:fc:5d:44:c5:bd:c6:cd:4a:43:19:66: cc:07:de:f1:c3:a2:04:67:cc:6f:91:72:63:b2:c9:1c:da:73: 8f:a7:01:16 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5fvQ4YzcY9N/NaA2Nnkm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2IxMDUwNjVjMGQ5MTM5YjVmZmVkYzMyYzkwMGNmNjRiNDMxMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz98BOvk6lmDjd2pDykvq1jcBf2gU asoieRIX0XzOo3EQttX0Dx1Ye8icNwrKMtLOeNaTO93vwUmmSw419nz7qbu6h5OD 1oyI2l1Z3RuJQ01W70w4+CTA/elWIOlsLCYnQB5+eaQMTRCLeOiTmQ01XpQYwlRl tQjqITtsYpCfghXDZ71u/pJ8bMAoLn0B+Y292ZdkrO0z4FIaHNkf4TOmRafzrRgR bB8pKVRroLJhDp8n30wBirxI32AXRrpeUjXPHBKc9RLj1pJnm/LwD9t3g1TnDWnK mL/UqJCYZlWq1Gbmy1Zh7/EYriIfNwW/sSo6PAsv7dhoU4lW/S5qRsn+bQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFOxBQZcDZE5tf/twyyQDPZLQxLrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzgxYzA5 MS0wYTRlLTQwMDUtYmUyMi1hN2U4NjQ1M2FiY2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvODFjMDkx LTBhNGUtNDAwNS1iZTIyLWE3ZTg2NDUzYWJjZC8xL1U3RUZCbHdOa1RtMV8tM0RM SkFNOWt0REV1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSl8MA0EAgACMAcDBQMqBIsAMA0GCSqGSIb3 DQEBCwUAA4IBAQCeQqnn6zraKtY+puuwq3rwr1BHc1n1mrFk4SbtqfqU32VsmFnT ZP8ybu3cq8k26h4N37yNWakFCTeDSyE0y42LEmFLXjmaVS5UnaMXLlihD/4ATBc4 6Re6w2ljuFFG2U/J1zb6dQ1N7DUxci8JYoV/jkajyYL/f8J7J6b1HkMMkBRAzgNE xsNhLuyMaVZqHIaDoWOnXB28LMYH/cB1ZE7j/qUE3x8zmfg5vB499zxKO2HrzZvR HMhRgYRi8z5xUdHJAjXI67PkMWguOBDGf7NyCYCU0N3ex3hqoP6fU7qp/F1Exb3G zUpDGWbMB97xw6IEZ8xvkXJjsskc2nOPpwEW -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:39 2026 by rpki-client