This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer File: UdoAZhIua6KU0rdHk41Gx06Z-IA.cer (raw, json) Hash identifier: 4Cza5jBVTQPhHgxr7SXygEBigiEdJ83/RULRmzlJdE0= Subject key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AD91B1608FF98F69039629DFC642437E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 01 Dec 2025 08:50:22 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 211644 IP: 185.252.192.0/24 IP: 2a10:b0c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:1b:16:08:ff:98:f6:90:39:62:9d:fc:64:24:37:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 1 08:50:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=51da0066122e6ba294d2b747938d46c74e99f880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:80:8a:4e:5b:c0:3e:26:01:d7:38:22:07: b6:cf:6a:49:14:d2:f1:b9:a3:bb:f2:b6:a7:54:e9: d7:91:75:8c:ba:fe:8a:d5:f1:2a:80:3c:a7:1c:fc: 72:ce:6b:67:da:c3:ef:c8:ec:49:72:2a:05:2c:86: ea:a7:e5:e4:f4:df:b0:2f:84:66:e3:65:f0:40:f3: 83:89:01:19:20:3b:d1:c1:a7:4e:1c:94:59:3c:11: dc:b0:d2:4d:ab:a7:3d:b8:e4:53:7a:33:1c:e0:c1: b7:06:67:14:89:a0:30:64:88:eb:fe:d9:47:5a:d6: 4b:dc:df:fb:1b:dc:83:ba:7a:d4:75:8e:84:f7:ce: 75:3c:22:b2:78:02:3a:dc:d3:a7:2a:0a:5b:f9:27: 3a:29:17:f1:0e:d4:d2:d1:9a:8a:fd:7e:b2:24:35: c3:a9:6a:d0:e3:c2:49:1e:42:f1:4e:66:33:6d:e6: 44:06:57:91:a8:36:4b:0b:06:fb:48:75:92:e7:a4: 40:3f:67:d3:90:23:c5:14:85:c6:b2:aa:e1:83:c0: d9:0e:98:69:95:54:6a:11:0d:73:c6:9f:be:e7:99: 54:b6:fb:5b:66:d9:0d:70:c1:ed:60:d3:81:41:d8: 04:b6:34:0e:41:63:f8:4d:36:66:7a:7c:22:67:03: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.192.0/24 IPv6: 2a10:b0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211644 Signature Algorithm: sha256WithRSAEncryption 28:0e:db:a3:6b:e3:95:a3:f2:e4:9f:fc:ab:2a:c4:07:36:14: e4:d7:58:8a:64:21:dc:ac:7c:88:db:a3:0d:1f:7b:f7:76:a6: 19:c6:c8:fb:22:f3:20:83:7a:14:c2:0a:3c:93:4f:18:ee:26: 2a:c8:d9:4d:a5:65:d9:02:6f:43:23:ab:2b:fc:e8:ea:ce:9b: a7:b2:99:80:eb:36:b2:73:87:cb:c4:da:3b:a1:c8:ee:eb:52: b2:3d:b7:fc:fc:4b:3c:40:34:61:62:7f:d9:56:f6:57:f9:f1: 19:7c:77:d0:84:e0:31:58:c7:4b:27:56:90:1e:80:25:07:b6: f7:0b:fd:c7:02:cb:a9:52:e2:22:21:cb:5b:09:6e:80:e0:d9: f2:c8:b3:ae:6b:ef:d9:b3:09:3d:54:a7:51:ae:03:ba:b7:24: 64:18:1a:17:54:87:bf:ef:46:34:af:73:5c:3a:7e:3c:9f:f9: 71:66:17:b1:ce:bc:e5:78:d0:6f:1b:18:44:5f:11:2d:da:c1: fa:d1:19:d2:f5:e3:75:1d:10:03:74:a5:78:60:95:7d:01:55: 7b:d9:5a:e5:e3:70:8e:0b:9e:4b:1b:76:df:42:d5:73:1e:0d: 05:fa:95:6f:e8:17:b1:0c:3c:0f:ee:3f:8b:c2:fb:4d:62:4b: b7:ac:c5:1c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZrZGxYI/5j2kDlinfxkJDfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAxMDg1MDIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWRhMDA2NjEyMmU2YmEyOTRkMmI3NDc5MzhkNDZjNzRlOTlmODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhSAik5bwD4mAdc4Ige2z2pJFNLx uaO78ranVOnXkXWMuv6K1fEqgDynHPxyzmtn2sPvyOxJcioFLIbqp+Xk9N+wL4Rm 42XwQPODiQEZIDvRwadOHJRZPBHcsNJNq6c9uORTejMc4MG3BmcUiaAwZIjr/tlH WtZL3N/7G9yDunrUdY6E9851PCKyeAI63NOnKgpb+Sc6KRfxDtTS0ZqK/X6yJDXD qWrQ48JJHkLxTmYzbeZEBleRqDZLCwb7SHWS56RAP2fTkCPFFIXGsqrhg8DZDphp lVRqEQ1zxp++55lUtvtbZtkNcMHtYNOBQdgEtjQOQWP4TTZmenwiZwNTUwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFHaAGYSLmuilNK3R5ONRsdOmfiAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiL2Y2NGVi NC0yNmNjLTQwNTYtODUzYi1iZTQ4Yjc5MjU0NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjY0ZWI0 LTI2Y2MtNDA1Ni04NTNiLWJlNDhiNzkyNTQ3OC8xL1Vkb0FaaEl1YTZLVTByZEhr NDFHeDA2Wi1JQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAufzAMA0EAgACMAcDBQAqELDAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6vDANBgkqhkiG9w0BAQsFAAOCAQEAKA7bo2vjlaPy 5J/8qyrEBzYU5NdYimQh3Kx8iNujDR9793amGcbI+yLzIIN6FMIKPJNPGO4mKsjZ TaVl2QJvQyOrK/zo6s6bp7KZgOs2snOHy8TaO6HI7utSsj23/PxLPEA0YWJ/2Vb2 V/nxGXx30ITgMVjHSydWkB6AJQe29wv9xwLLqVLiIiHLWwlugODZ8sizrmvv2bMJ PVSnUa4DurckZBgaF1SHv+9GNK9zXDp+PJ/5cWYXsc685XjQbxsYRF8RLdrB+tEZ 0vXjdR0QA3SleGCVfQFVe9la5eNwjgueSxt230LVcx4NBfqVb+gXsQw8D+4/i8L7 TWJLt6zFHA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:36 2025 by rpki-client