This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer File: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer (raw, json) Hash identifier: g5er8kW6eanryamd/iWkvJq958E/1/2WLY9zrBgzcno= Subject key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC6E57A0D64CA661A2BFF7DDE1E4B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62137 IP: 185.44.36.0/22 IP: 2a01:7320::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:6e:57:a0:d6:4c:a6:61:a2:bf:f7:dd:e1:e4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b84785791e07646f5cc58b15e86434cb9c24149d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f8:a8:68:dd:31:96:86:d6:c0:c5:00:f7:d6: da:a9:3e:3f:9b:c4:5a:5b:01:6b:5a:e9:44:f7:04: 19:de:ca:ca:df:a9:a9:ba:f6:e4:84:f1:bc:90:92: 5d:ba:b8:a2:99:bb:1a:dd:5a:b3:65:ea:31:0b:fc: 4d:93:d7:0c:96:0b:20:5c:76:ad:e1:26:0e:82:c4: a0:a0:56:7d:ed:56:91:50:24:dd:b1:bf:dc:e7:a4: ed:a2:af:82:89:3b:85:89:a9:88:ae:10:74:49:7a: e4:3d:84:1b:54:ab:05:0e:1c:64:8a:18:61:71:96: 25:05:3a:db:b1:18:73:b7:cd:1c:95:01:5d:a7:02: d2:4d:33:4b:39:90:53:6d:06:45:c3:87:dd:f8:72: 89:1b:cc:5d:d7:87:96:52:9b:43:ac:3c:24:23:fa: bd:36:8e:68:f2:80:b9:03:5f:66:e1:20:bb:20:3d: 8f:62:20:10:9f:fb:90:48:eb:66:b8:69:ec:31:3c: 9e:9a:cf:56:e6:ae:17:ef:aa:60:58:ce:53:3d:fd: d4:7c:ab:2c:c7:b3:12:50:23:e9:4b:a4:7a:78:0b: 54:0c:93:e8:d9:bb:a5:7a:1d:eb:7f:9d:5f:61:ab: b3:d3:5a:55:69:a2:09:18:f9:ac:1f:49:86:90:1b: e2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.36.0/22 IPv6: 2a01:7320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62137 Signature Algorithm: sha256WithRSAEncryption 5b:28:c2:ff:22:f2:08:62:49:76:8b:fb:c8:96:49:a5:b7:e5: 5d:a4:7c:d9:f9:f4:9c:73:e2:77:4a:1b:92:4a:09:7e:b0:aa: 05:54:20:49:75:f2:72:a8:f2:21:71:34:96:9c:7d:b0:3b:56: db:02:6f:25:92:56:70:c7:7a:78:d5:64:93:4e:83:66:97:78: 67:89:20:ee:61:b7:5f:1c:10:1b:d3:3c:8a:49:54:94:17:54: ab:b6:17:7a:68:ce:c7:13:41:33:77:2d:8c:fe:29:6b:69:6e: 5e:52:f5:5a:e7:16:61:03:41:93:35:87:df:0c:15:0d:0f:ef: b6:83:4d:c3:91:86:ea:35:7d:9a:ad:69:5c:32:c3:30:a6:0e: 1c:0a:e4:96:5e:99:64:71:ff:77:15:d0:82:3d:65:52:96:70: 28:60:12:2e:34:43:78:b9:90:cb:39:a9:9e:e8:11:a1:fd:29: fd:5e:9e:ea:fe:49:c3:81:1a:58:f5:96:f7:8f:74:99:c9:bf: ee:04:b8:da:71:d0:73:9d:eb:6a:da:f6:5d:b4:96:07:e6:3d: 17:62:f9:01:b4:38:9d:a9:c9:4b:84:78:a4:d9:2a:70:ad:97: ad:5a:62:65:1c:ad:5c:b4:b0:eb:36:5c:c4:a6:51:cb:5e:2e: 41:82:71:1e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57G5XoNZMpmGiv/fd4eSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODQ3ODU3OTFlMDc2NDZmNWNjNThiMTVlODY0MzRjYjljMjQxNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PioaN0xlobWwMUA99baqT4/m8Ra WwFrWulE9wQZ3srK36mpuvbkhPG8kJJduriimbsa3VqzZeoxC/xNk9cMlgsgXHat 4SYOgsSgoFZ97VaRUCTdsb/c56Ttoq+CiTuFiamIrhB0SXrkPYQbVKsFDhxkihhh cZYlBTrbsRhzt80clQFdpwLSTTNLOZBTbQZFw4fd+HKJG8xd14eWUptDrDwkI/q9 No5o8oC5A19m4SC7ID2PYiAQn/uQSOtmuGnsMTyems9W5q4X76pgWM5TPf3UfKss x7MSUCPpS6R6eAtUDJPo2buleh3rf51fYauz01pVaaIJGPmsH0mGkBviWwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLhHhXkeB2RvXMWLFehkNMucJBSdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2RmODEw NS0xOGVlLTQxNzItYjZiYi0wZGMzM2FjYzFkYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvZGY4MTA1 LTE4ZWUtNDE3Mi1iNmJiLTBkYzMzYWNjMWRiYS8xL3VFZUZlUjRIWkc5Y3hZc1Y2 R1EweTV3a0ZKMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSwkMA0EAgACMAcDBQAqAXMgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDyuTANBgkqhkiG9w0BAQsFAAOCAQEAWyjC/yLyCGJJ dov7yJZJpbflXaR82fn0nHPid0obkkoJfrCqBVQgSXXycqjyIXE0lpx9sDtW2wJv JZJWcMd6eNVkk06DZpd4Z4kg7mG3XxwQG9M8iklUlBdUq7YXemjOxxNBM3ctjP4p a2luXlL1WucWYQNBkzWH3wwVDQ/vtoNNw5GG6jV9mq1pXDLDMKYOHArkll6ZZHH/ dxXQgj1lUpZwKGASLjRDeLmQyzmpnugRof0p/V6e6v5Jw4EaWPWW9490mcm/7gS4 2nHQc53ratr2XbSWB+Y9F2L5AbQ4nanJS4R4pNkqcK2XrVpiZRytXLSw6zZcxKZR y14uQYJxHg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:08 2026 by rpki-client