This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer File: UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer (raw, json) Hash identifier: MrvG1oUNvijLpnJIFgl2LTnX49QyvbrW55YKvJvmA7w= Subject key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35C541CB1317B688074A5716F4D2C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204718 AS: 211059 IP: 185.143.220.0/22 IP: 185.190.24.0/24 IP: 2a0c:de80::/29 IP: 2a11:4c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c5:41:cb:13:17:b6:88:07:4a:57:16:f4:d2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:ec:ab:15:dd:82:e0:f4:6e:8d:be:3d:da: ab:2e:08:02:6b:94:f6:6b:64:8b:38:44:bc:62:a3: fb:22:84:ce:d3:1a:ca:e6:b5:ec:78:cf:c5:5d:f1: ef:fa:3a:15:50:6b:98:df:da:45:46:1c:81:6c:88: 83:15:5e:2a:a0:96:ba:c6:fd:8f:0e:33:84:c2:62: b4:d8:2a:85:7e:fb:90:6e:18:fd:14:d6:6d:c7:81: fe:fc:fe:69:e5:af:ca:a6:a4:6f:4e:6e:89:d1:7b: bf:19:33:34:e1:1f:be:75:3c:e2:aa:ec:70:4f:67: a4:c3:62:f3:f5:75:1d:06:c1:fe:fa:b2:44:89:94: 44:ff:fd:71:5e:47:e5:8f:c1:8d:cd:ec:85:ed:30: d0:d9:f5:5c:4f:65:dc:8f:1b:38:d1:f1:6d:36:41: 5a:1f:4b:1d:8e:79:8b:f4:cb:08:9a:74:66:cb:ad: 7b:47:87:0a:0a:f7:0c:b0:51:93:f4:da:84:5b:38: 33:df:69:f1:26:3c:b9:48:9b:d8:4a:2e:ff:1d:ef: a0:78:ce:0a:e4:8f:96:5e:cc:05:5c:de:89:68:34: b6:ad:6c:44:f7:b9:ff:a6:2c:c3:ce:af:69:2f:7d: 2f:1b:04:f9:0e:ed:a0:ed:ca:1d:88:98:fa:29:70: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.220.0/22 185.190.24.0/24 IPv6: 2a0c:de80::/29 2a11:4c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204718 211059 Signature Algorithm: sha256WithRSAEncryption 9f:42:b1:18:88:b0:32:9d:a5:43:7f:db:67:2b:39:be:24:e1: ed:80:9a:c8:d6:13:21:47:a1:8c:0a:61:63:27:40:6d:0d:9a: d0:28:9e:c7:19:de:d1:53:7a:8b:45:5e:b9:23:9a:1f:d0:52: 9a:1e:8a:49:25:1e:21:04:37:92:8d:f0:22:52:56:ff:30:c9: 2d:f3:b2:26:7a:6c:af:cb:34:7d:ea:5c:20:ca:42:ff:57:46: 88:50:8a:db:e1:b8:73:64:0d:23:8c:3f:dd:df:46:4b:a8:b2: 26:d8:c6:87:0f:2f:fe:d0:b5:c3:ae:12:a1:4d:c1:07:ce:ca: e5:74:f6:4a:cd:24:0b:1e:ba:5e:92:38:37:81:72:2d:69:2e: 09:51:80:35:fe:3f:4d:81:44:f1:88:9b:79:58:76:d3:d2:8c: 0f:2c:82:2d:2a:7c:30:d6:2b:d4:8c:1e:3c:78:3c:48:66:b1: 46:4f:45:1d:e7:e1:68:7c:b7:52:91:cd:dc:1b:cb:c6:c4:a0: 71:04:f9:f0:d5:48:ac:90:e8:73:10:e2:6b:a2:72:49:42:ca: a9:7b:4c:5e:eb:72:51:92:e4:2c:ad:e6:d6:5e:84:9a:51:65: 32:f7:ab:1a:f5:6a:36:e9:15:10:f9:42:26:7f:90:a4:81:ad: 23:0c:42:2d -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7NcVByxMXtogHSlcW9NLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmExNjVkYzNhYWZiZTJjNjJlMjY1ZmYxMDQzMjdhM2U2NzVmODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DbsqxXdguD0bo2+PdqrLggCa5T2 a2SLOES8YqP7IoTO0xrK5rXseM/FXfHv+joVUGuY39pFRhyBbIiDFV4qoJa6xv2P DjOEwmK02CqFfvuQbhj9FNZtx4H+/P5p5a/KpqRvTm6J0Xu/GTM04R++dTziquxw T2ekw2Lz9XUdBsH++rJEiZRE//1xXkflj8GNzeyF7TDQ2fVcT2Xcjxs40fFtNkFa H0sdjnmL9MsImnRmy617R4cKCvcMsFGT9NqEWzgz32nxJjy5SJvYSi7/He+geM4K 5I+WXswFXN6JaDS2rWxE97n/pizDzq9pL30vGwT5Du2g7codiJj6KXBIvQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFFKhZdw6r74sYuJl/xBDJ6PmdfifMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzgwYWNl Yi01MGUyLTQwYzAtYTg1Mi1lMjk4YjQxYjZjODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvODBhY2Vi LTUwZTItNDBjMC1hODUyLWUyOThiNDFiNmM4MS8xL1VxRmwzRHF2dml4aTRtWF9F RU1uby1aMS1KOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuY/cAwQAub4YMBQEAgACMA4DBQMqDN6AAwUD KhEEwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDH64CAwM4czANBgkqhkiG9w0B AQsFAAOCAQEAn0KxGIiwMp2lQ3/bZys5viTh7YCayNYTIUehjAphYydAbQ2a0Cie xxne0VN6i0VeuSOaH9BSmh6KSSUeIQQ3ko3wIlJW/zDJLfOyJnpsr8s0fepcIMpC /1dGiFCK2+G4c2QNI4w/3d9GS6iyJtjGhw8v/tC1w64SoU3BB87K5XT2Ss0kCx66 XpI4N4FyLWkuCVGANf4/TYFE8YibeVh209KMDyyCLSp8MNYr1IwePHg8SGaxRk9F HefhaHy3UpHN3BvLxsSgcQT58NVIrJDocxDia6JySULKqXtMXutyUZLkLK3m1l6E mlFlMverGvVqNukVEPlCJn+QpIGtIwxCLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:28 2026 by rpki-client