This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer File: UaDZglED2dpHYe-pGmDqLKdY0AM.cer (raw, json) Hash identifier: sjE2/cV7J85kVgASdmVx1e+LSGfQOdEW+u31nIIN1Ek= Subject key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B49C095CE4CCA893A56EEF6DE24D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.156.96.0/22 IP: 2a0f:1c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:49:c0:95:ce:4c:ca:89:3a:56:ee:f6:de:24:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51a0d9825103d9da4761efa91a60ea2ca758d003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6e:c8:b2:da:30:4c:98:1a:08:f7:52:53:e0: de:15:c2:47:88:d1:a8:2a:91:4a:04:5c:84:28:30: 01:3d:19:cd:31:3d:45:e2:20:bc:48:c1:74:fd:50: 2e:2d:cd:ee:0c:52:df:80:e8:1d:e6:81:77:95:ee: 18:b2:da:5f:b9:1c:b8:3f:c0:f5:1e:31:11:6b:14: 09:cd:63:84:36:24:4f:10:72:32:c4:42:19:20:00: a2:02:70:e6:f4:bc:5a:7e:89:4e:f4:c9:77:69:c1: 8d:4a:85:f2:22:4e:ca:a7:a2:67:d6:b7:9f:a4:a4: 1e:4c:9b:4e:df:71:b5:c6:2b:f4:19:78:4d:6d:3f: 6a:f5:51:85:cf:5b:9c:69:5c:c5:ae:ea:96:89:c0: 93:d0:7e:93:27:11:be:78:e4:84:81:cc:e5:a9:4f: 8a:28:f5:26:98:0e:29:ce:23:35:8e:30:7c:02:7b: 95:94:1f:44:be:5c:2c:ae:2e:62:62:29:3a:f4:63: d1:60:6e:ba:92:30:11:9e:d2:77:84:58:0b:2e:83: ab:45:38:95:6b:51:5f:3b:b2:0a:e5:e1:a9:90:70: e7:06:3d:e4:d6:16:25:8b:1a:ed:44:04:8b:f0:6b: 7d:6b:a4:f2:48:ec:15:df:e9:38:7f:ea:af:15:69: 7d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.156.96.0/22 IPv6: 2a0f:1c80::/29 Signature Algorithm: sha256WithRSAEncryption 5d:d1:12:55:ff:1d:1e:a8:25:59:dd:d7:7c:2d:d5:c2:25:89: ea:54:c7:00:12:58:e8:2f:b6:f6:7a:e7:ca:b0:4b:00:f3:eb: 26:3a:3d:c5:d1:fc:d1:4d:0b:f3:2b:0f:4b:9a:06:0f:01:7d: 52:d8:db:6e:7d:02:f7:9e:29:9b:8e:04:71:12:98:80:3e:b1: bf:3b:8e:c1:11:87:cd:b9:4d:8e:5e:0c:2d:b4:4e:75:e4:a8: f4:7d:1a:e8:4e:24:bc:aa:ea:6e:2e:de:15:11:33:34:a5:42: 04:73:04:4b:4f:d0:71:7a:06:25:aa:95:69:38:03:07:81:fc: 95:af:88:c1:30:05:ac:78:93:94:1d:05:33:f1:64:df:3b:99: 3d:4c:65:a7:0a:39:02:4f:07:a7:d9:11:e3:b2:d6:0f:59:3c: cb:70:2d:ad:a7:24:38:86:fd:01:b6:8d:5a:71:d2:52:d8:65: 8c:fd:f4:52:f9:e4:8c:f6:28:f4:d5:6d:27:a2:f2:7e:97:b5: f1:8e:be:87:dc:62:1f:2b:e2:f3:54:b9:dd:3f:88:b6:6e:7f: 92:22:f6:c6:8d:5a:43:39:55:22:19:70:a4:84:a3:35:4a:97: 94:20:b7:eb:ca:f3:78:af:41:34:ef:75:08:bc:f1:46:38:d6: c6:aa:99:69 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6W0nAlc5Myok6Vu723iTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWEwZDk4MjUxMDNkOWRhNDc2MWVmYTkxYTYwZWEyY2E3NThkMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA427IstowTJgaCPdSU+DeFcJHiNGo KpFKBFyEKDABPRnNMT1F4iC8SMF0/VAuLc3uDFLfgOgd5oF3le4YstpfuRy4P8D1 HjERaxQJzWOENiRPEHIyxEIZIACiAnDm9LxafolO9Ml3acGNSoXyIk7Kp6Jn1ref pKQeTJtO33G1xiv0GXhNbT9q9VGFz1ucaVzFruqWicCT0H6TJxG+eOSEgczlqU+K KPUmmA4pziM1jjB8AnuVlB9Evlwsri5iYik69GPRYG66kjARntJ3hFgLLoOrRTiV a1FfO7IK5eGpkHDnBj3k1hYlixrtRASL8Gt9a6TySOwV3+k4f+qvFWl90QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFGg2YJRA9naR2HvqRpg6iynWNADMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2I0ZjQ5 Yi03NWU1LTQ4NjQtOTA4ZS02YTNkZjAxYTMyMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvYjRmNDli LTc1ZTUtNDg2NC05MDhlLTZhM2RmMDFhMzIzNi8xL1VhRFpnbEVEMmRwSFllLXBH bURxTEtkWTBBTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZxgMA0EAgACMAcDBQMqDxyAMA0GCSqGSIb3 DQEBCwUAA4IBAQBd0RJV/x0eqCVZ3dd8LdXCJYnqVMcAEljoL7b2eufKsEsA8+sm Oj3F0fzRTQvzKw9LmgYPAX1S2NtufQL3nimbjgRxEpiAPrG/O47BEYfNuU2OXgwt tE515Kj0fRroTiS8qupuLt4VETM0pUIEcwRLT9BxegYlqpVpOAMHgfyVr4jBMAWs eJOUHQUz8WTfO5k9TGWnCjkCTwen2RHjstYPWTzLcC2tpyQ4hv0Bto1acdJS2GWM /fRS+eSM9ij01W0novJ+l7Xxjr6H3GIfK+LzVLndP4i2bn+SIvbGjVpDOVUiGXCk hKM1SpeUILfryvN4r0E073UIvPFGONbGqplp -----END CERTIFICATE-----Generated at Sun Jan 25 15:20:13 2026 by rpki-client