This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer File: UeFASVvQbC6O-st-0KMVFtsfQF8.cer (raw, json) Hash identifier: DeOdo7c1TopdNSX2+IzCMHVGpnObJtPHJqSnsVaOEiw= Subject key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79105BB599DDDE9FA0B54198E2BA4F65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.234.136.0/22 IP: 2a0d:3300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5b:b5:99:dd:de:9f:a0:b5:41:98:e2:ba:4f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:ef:dc:ff:19:9c:2d:8f:74:1b:51:43:dc: c1:65:66:85:c2:1a:4c:84:eb:c6:3f:ca:51:38:15: a2:ae:56:fe:50:3b:6d:14:1c:da:40:a8:f4:0d:87: 5f:56:40:63:a9:08:56:b6:6f:a4:8c:0c:95:42:31: 7f:91:af:81:d7:57:6e:68:a7:87:2c:f8:57:4e:42: 2a:13:95:fd:ad:8a:e1:e8:b0:41:66:4f:0a:63:66: aa:3e:5a:80:5e:e1:e6:f5:c4:62:91:fe:0a:98:59: b9:0c:ac:bf:19:54:6f:f0:fa:3a:4b:b8:bf:74:ad: 80:ad:1d:58:a0:8d:86:7b:00:be:e2:85:71:99:74: 39:bb:ec:57:16:ff:7f:10:6d:e9:60:e9:e5:f8:cd: f5:7d:09:37:20:ba:35:96:d4:31:cd:c5:41:00:28: 45:88:09:85:64:3e:b6:3a:6b:63:ba:05:30:a2:1f: bf:4e:b4:e7:4d:7b:75:7a:ce:fe:f1:59:86:44:ee: 57:7e:f1:41:b4:af:8c:35:a7:0b:f1:6a:9f:19:db: 9a:d1:c6:f5:12:f2:7d:a0:70:bb:43:a9:38:9b:69: 5d:ee:10:10:b6:d9:da:d1:57:a8:f9:7f:b0:b2:5e: b3:14:9a:42:5f:52:78:47:35:7b:26:c6:dc:ff:1b: 4c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.136.0/22 IPv6: 2a0d:3300::/29 Signature Algorithm: sha256WithRSAEncryption 5c:54:d2:7e:c2:f0:af:92:de:a7:f7:87:b9:d2:77:cd:86:6d: 0d:0b:cc:e4:ff:26:3e:30:0d:56:3a:b2:40:1c:d2:b1:5c:cf: a4:87:20:6b:9b:17:a1:0a:a9:9f:5f:54:cb:99:0a:c1:95:62: 6a:35:cd:a4:55:e5:7b:30:c7:30:e9:10:5b:93:18:f5:21:29: 7b:0d:52:a0:f9:bf:72:73:15:15:77:81:23:ac:8d:22:68:7f: de:1d:e6:d5:78:7c:ff:ec:3a:e5:ae:f0:22:14:7d:0c:94:a9: 08:91:03:79:fb:28:fe:b0:9a:fe:fc:ec:5e:76:e7:d0:cb:96: 15:3b:40:d8:44:b1:ed:60:1b:47:d2:d7:7c:d8:63:b1:c8:6e: b9:1d:f5:dd:45:b5:76:d3:79:d4:99:24:32:7c:c4:77:2a:3e: ad:7e:e5:42:78:12:71:fa:0b:82:ef:be:a0:f8:fc:ea:5d:63: 36:81:dd:04:0f:9a:14:36:b2:4c:95:9c:59:56:80:df:8a:a4: 52:e0:4c:15:99:3f:87:c8:ed:56:42:75:3a:57:1f:b6:bd:ea: 9b:38:45:9d:45:ca:57:ee:80:87:5a:30:0b:aa:78:98:3e:bf: ac:e9:31:fa:a2:3c:86:29:96:df:d0:cf:8c:86:20:ac:bf:35: 8b:3e:fd:91 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EFu1md3en6C1QZjiuk9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWUxNDA0OTViZDA2YzJlOGVmYWNiN2VkMGEzMTUxNmRiMWY0MDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9nv3P8ZnC2PdBtRQ9zBZWaFwhpM hOvGP8pROBWirlb+UDttFBzaQKj0DYdfVkBjqQhWtm+kjAyVQjF/ka+B11duaKeH LPhXTkIqE5X9rYrh6LBBZk8KY2aqPlqAXuHm9cRikf4KmFm5DKy/GVRv8Po6S7i/ dK2ArR1YoI2GewC+4oVxmXQ5u+xXFv9/EG3pYOnl+M31fQk3ILo1ltQxzcVBAChF iAmFZD62OmtjugUwoh+/TrTnTXt1es7+8VmGRO5XfvFBtK+MNacL8WqfGdua0cb1 EvJ9oHC7Q6k4m2ld7hAQttna0Veo+X+wsl6zFJpCX1J4RzV7Jsbc/xtMOwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFHhQElb0GwujvrLftCjFRbbH0BfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2ZkNWYw NC0xZDI2LTQ0NTEtYTZhZS05ODY3NjQyYzJmMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvZmQ1ZjA0 LTFkMjYtNDQ1MS1hNmFlLTk4Njc2NDJjMmYxMC8xL1VlRkFTVnZRYkM2Ty1zdC0w S01WRnRzZlFGOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCueqIMA0EAgACMAcDBQMqDTMAMA0GCSqGSIb3 DQEBCwUAA4IBAQBcVNJ+wvCvkt6n94e50nfNhm0NC8zk/yY+MA1WOrJAHNKxXM+k hyBrmxehCqmfX1TLmQrBlWJqNc2kVeV7MMcw6RBbkxj1ISl7DVKg+b9ycxUVd4Ej rI0iaH/eHebVeHz/7DrlrvAiFH0MlKkIkQN5+yj+sJr+/OxedufQy5YVO0DYRLHt YBtH0td82GOxyG65HfXdRbV203nUmSQyfMR3Kj6tfuVCeBJx+guC776g+PzqXWM2 gd0ED5oUNrJMlZxZVoDfiqRS4EwVmT+HyO1WQnU6Vx+2veqbOEWdRcpX7oCHWjAL qniYPr+s6TH6ojyGKZbf0M+MhiCsvzWLPv2R -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:25 2026 by rpki-client