This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer (raw, json) Hash identifier: vkYRontlYVMJMeb4pxiTXeHIsGuwgi9ioqaKvPgVY44= Subject key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C66C2AE943E46DEDF46A5535E8844A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48659 IP: 195.8.52.0/23 IP: 195.46.36.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6c:2a:e9:43:e4:6d:ed:f4:6a:55:35:e8:84:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:e7:1e:7a:a2:fa:b8:83:55:2a:e6:89:4d: 2c:47:3f:e6:b9:1a:e7:52:55:6b:76:10:8e:aa:d8: dc:9d:00:64:26:70:23:28:cc:0e:79:d8:e0:3a:29: 2c:ef:f2:db:5e:57:c8:0f:2c:7e:b8:71:c2:1a:af: 6d:5a:95:71:0f:8c:ab:f1:48:02:e3:70:66:77:ad: bb:4d:dd:7f:12:cd:df:c8:42:53:f7:94:04:f6:4f: ce:98:18:62:d0:a5:80:1b:48:8f:22:e1:35:e9:e8: 74:48:5d:78:82:a7:09:7d:8e:47:2b:d0:d9:cc:0a: d4:c0:19:f3:0f:39:4b:34:59:1b:a9:73:87:ef:3b: a1:18:86:16:98:61:df:28:7b:b5:da:cf:9d:12:46: 6b:21:2c:a2:44:a9:81:5f:26:9b:7f:b4:83:fe:86: 92:a6:7d:71:5d:cb:1b:78:d3:ac:f2:4d:17:75:ee: 18:07:46:5b:07:e4:57:8d:ab:58:fa:21:7f:cc:66: cf:3d:5a:ad:60:33:f1:91:a2:2f:ba:22:97:a7:93: 0c:3e:42:00:fa:ef:0d:c5:15:c8:91:50:aa:38:50: cb:7c:aa:25:42:77:4c:3a:e3:0b:21:b5:89:e5:50: 6a:a4:83:8c:13:cf:ca:f6:d4:e8:cb:fb:7f:6b:b1: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.52.0/23 195.46.36.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48659 Signature Algorithm: sha256WithRSAEncryption 36:a8:15:c4:ca:c5:c7:0c:ef:e6:a3:83:0f:b3:19:25:cb:37: 2e:88:05:3b:02:e5:92:4e:bb:83:f4:87:18:57:bc:62:bf:8e: 84:6c:01:a4:ed:52:17:a7:fa:32:02:ec:58:ab:7f:1d:a9:38: bf:46:b7:d0:a8:36:71:e7:a2:6c:9a:da:ec:3b:c9:1a:72:e5: 9c:d7:8f:7c:21:c1:25:86:a9:fb:c9:fc:65:c1:b8:8e:c8:89: 7e:71:01:92:22:24:d4:ae:8d:a8:cd:8a:4d:50:d7:63:1d:0a: a8:4d:b4:dc:19:c2:c8:6a:cf:28:53:2b:5b:92:35:de:17:21: 6b:61:21:0a:a6:d6:69:ca:ba:d4:96:c1:db:90:54:5b:5b:69: 5a:41:d3:1e:71:e1:b1:60:62:de:fa:5d:b5:c1:ca:d9:f7:00: 04:93:ba:d7:ae:27:78:a2:2c:33:80:20:6c:2d:bb:88:89:45: 31:c9:e0:30:12:0d:b3:0e:84:60:61:f8:cb:5a:d6:34:61:74: 6d:42:55:2e:34:4f:51:22:72:f1:eb:25:09:cd:d3:5a:1f:6f: 72:ad:d6:88:ec:d8:5f:10:b1:87:c7:7e:7b:df:29:50:a5:d2: a1:6c:5a:6e:8b:45:29:1e:fa:21:98:70:f3:a6:94:8a:02:95: 24:9b:a0:4d -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt3xmwq6UPkbe30alU16IRKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDNmNzNmZWZlOWRiZDE2NTYxNDM3NWExOGEzNGNkY2ZiNGEzMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueTnHnqi+riDVSrmiU0sRz/muRrn UlVrdhCOqtjcnQBkJnAjKMwOedjgOiks7/LbXlfIDyx+uHHCGq9tWpVxD4yr8UgC 43Bmd627Td1/Es3fyEJT95QE9k/OmBhi0KWAG0iPIuE16eh0SF14gqcJfY5HK9DZ zArUwBnzDzlLNFkbqXOH7zuhGIYWmGHfKHu12s+dEkZrISyiRKmBXyabf7SD/oaS pn1xXcsbeNOs8k0Xde4YB0ZbB+RXjatY+iF/zGbPPVqtYDPxkaIvuiKXp5MMPkIA +u8NxRXIkVCqOFDLfKolQndMOuMLIbWJ5VBqpIOME8/K9tToy/t/a7EWLwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFFA/c/7+nb0WVhQ3WhijTNz7SjHuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2RkNTQz ZC1kMWY1LTRmNDktODkwZi01OTQ0ZDhlYzI3M2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZGQ1NDNk LWQxZjUtNGY0OS04OTBmLTU5NDRkOGVjMjczYy8xL1VEOXpfdjZkdlJaV0ZEZGFH S05NM1B0S01lNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwwg0AwQBwy4kMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC+EzANBgkqhkiG9w0BAQsFAAOCAQEANqgVxMrFxwzv5qODD7MZJcs3 LogFOwLlkk67g/SHGFe8Yr+OhGwBpO1SF6f6MgLsWKt/Hak4v0a30Kg2ceeibJra 7DvJGnLlnNePfCHBJYap+8n8ZcG4jsiJfnEBkiIk1K6NqM2KTVDXYx0KqE203BnC yGrPKFMrW5I13hcha2EhCqbWacq61JbB25BUW1tpWkHTHnHhsWBi3vpdtcHK2fcA BJO6164neKIsM4AgbC27iIlFMcngMBINsw6EYGH4y1rWNGF0bUJVLjRPUSJy8esl Cc3TWh9vcq3WiOzYXxCxh8d+e98pUKXSoWxabotFKR76IZhw86aUigKVJJugTQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:02:17 2026 by rpki-client