This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer File: UdoAZhIua6KU0rdHk41Gx06Z-IA.cer (raw, json) Hash identifier: /o1DNZ44LWpSOCCeRBtsWBShQDgVUqJ4TXvigRl/Mls= Subject key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83F31CAD8C83116C9998655B139BFB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211644 IP: 185.252.192.0/24 IP: 2a10:b0c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f3:1c:ad:8c:83:11:6c:99:98:65:5b:13:9b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51da0066122e6ba294d2b747938d46c74e99f880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:80:8a:4e:5b:c0:3e:26:01:d7:38:22:07: b6:cf:6a:49:14:d2:f1:b9:a3:bb:f2:b6:a7:54:e9: d7:91:75:8c:ba:fe:8a:d5:f1:2a:80:3c:a7:1c:fc: 72:ce:6b:67:da:c3:ef:c8:ec:49:72:2a:05:2c:86: ea:a7:e5:e4:f4:df:b0:2f:84:66:e3:65:f0:40:f3: 83:89:01:19:20:3b:d1:c1:a7:4e:1c:94:59:3c:11: dc:b0:d2:4d:ab:a7:3d:b8:e4:53:7a:33:1c:e0:c1: b7:06:67:14:89:a0:30:64:88:eb:fe:d9:47:5a:d6: 4b:dc:df:fb:1b:dc:83:ba:7a:d4:75:8e:84:f7:ce: 75:3c:22:b2:78:02:3a:dc:d3:a7:2a:0a:5b:f9:27: 3a:29:17:f1:0e:d4:d2:d1:9a:8a:fd:7e:b2:24:35: c3:a9:6a:d0:e3:c2:49:1e:42:f1:4e:66:33:6d:e6: 44:06:57:91:a8:36:4b:0b:06:fb:48:75:92:e7:a4: 40:3f:67:d3:90:23:c5:14:85:c6:b2:aa:e1:83:c0: d9:0e:98:69:95:54:6a:11:0d:73:c6:9f:be:e7:99: 54:b6:fb:5b:66:d9:0d:70:c1:ed:60:d3:81:41:d8: 04:b6:34:0e:41:63:f8:4d:36:66:7a:7c:22:67:03: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.192.0/24 IPv6: 2a10:b0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211644 Signature Algorithm: sha256WithRSAEncryption 8a:81:d9:32:b0:bd:8d:19:d8:7f:59:16:7a:40:ec:ae:eb:67: 5e:60:a7:6c:64:62:70:2d:ea:6a:b2:9b:75:4c:55:b6:84:a2: 83:5a:45:2c:c7:3b:49:44:f4:2a:2e:47:89:fb:90:0f:0c:36: 8f:8a:d1:fc:36:30:6b:e4:f6:09:ae:96:00:de:28:70:c5:29: a8:73:7a:b1:19:85:e2:e6:d2:0c:8f:d9:9d:31:18:6b:d3:5c: 28:7b:b4:a9:0e:64:62:fc:be:d6:9a:73:f1:50:76:35:c8:2b: 67:bc:ce:80:91:fc:c7:fb:a6:48:70:1c:7a:61:81:f3:04:87: 9d:bf:d4:b4:ec:c1:31:82:a5:15:c2:f9:e1:50:d5:c4:1e:74: 40:68:8e:e5:2b:b5:26:e2:16:89:26:5c:aa:27:99:c3:ae:fe: 48:1b:47:8a:d6:56:41:51:e8:c3:1f:9d:2c:b8:f6:ae:1e:93: 19:c3:7a:fb:b8:d7:68:0f:c6:8b:46:2f:88:ce:26:4a:75:90: 69:35:12:03:e2:5d:d1:12:4c:a9:14:9d:e5:70:1c:ed:8d:7e: 60:06:6f:dc:3c:a9:06:cd:29:0e:f0:d6:e1:92:4d:15:12:9a: c5:59:24:c3:e5:60:3f:a1:9c:2d:aa:dd:71:aa:26:a9:53:07: e6:e8:5b:dd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/g/McrYyDEWyZmGVbE5v7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWRhMDA2NjEyMmU2YmEyOTRkMmI3NDc5MzhkNDZjNzRlOTlmODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhSAik5bwD4mAdc4Ige2z2pJFNLx uaO78ranVOnXkXWMuv6K1fEqgDynHPxyzmtn2sPvyOxJcioFLIbqp+Xk9N+wL4Rm 42XwQPODiQEZIDvRwadOHJRZPBHcsNJNq6c9uORTejMc4MG3BmcUiaAwZIjr/tlH WtZL3N/7G9yDunrUdY6E9851PCKyeAI63NOnKgpb+Sc6KRfxDtTS0ZqK/X6yJDXD qWrQ48JJHkLxTmYzbeZEBleRqDZLCwb7SHWS56RAP2fTkCPFFIXGsqrhg8DZDphp lVRqEQ1zxp++55lUtvtbZtkNcMHtYNOBQdgEtjQOQWP4TTZmenwiZwNTUwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFHaAGYSLmuilNK3R5ONRsdOmfiAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiL2Y2NGVi NC0yNmNjLTQwNTYtODUzYi1iZTQ4Yjc5MjU0NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjY0ZWI0 LTI2Y2MtNDA1Ni04NTNiLWJlNDhiNzkyNTQ3OC8xL1Vkb0FaaEl1YTZLVTByZEhr NDFHeDA2Wi1JQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAufzAMA0EAgACMAcDBQAqELDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6vDANBgkqhkiG9w0BAQsFAAOCAQEAioHZMrC9jRnY f1kWekDsrutnXmCnbGRicC3qarKbdUxVtoSig1pFLMc7SUT0Ki5HifuQDww2j4rR /DYwa+T2Ca6WAN4ocMUpqHN6sRmF4ubSDI/ZnTEYa9NcKHu0qQ5kYvy+1ppz8VB2 NcgrZ7zOgJH8x/umSHAcemGB8wSHnb/UtOzBMYKlFcL54VDVxB50QGiO5Su1JuIW iSZcqieZw67+SBtHitZWQVHowx+dLLj2rh6TGcN6+7jXaA/Gi0YviM4mSnWQaTUS A+Jd0RJMqRSd5XAc7Y1+YAZv3DypBs0pDvDW4ZJNFRKaxVkkw+VgP6GcLardcaom qVMH5uhb3Q== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:56 2026 by rpki-client