This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer (raw, json) Hash identifier: of222orNk6OwWALITCqwhLDTqY2BNX23uW3mDbedDhc= Subject key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE3A2A260F6124EAC2087E43007BAA208 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 09:54:37 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 31.97.0.0/16 IP: 69.62.64.0/18 IP: 72.60.0.0 -- 72.62.255.255 IP: 76.13.0.0/16 IP: 103.199.184.0/22 IP: 148.222.52.0/22 IP: 148.230.64.0/18 IP: 168.231.64.0/18 IP: 194.164.148.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a2:a2:60:f6:12:4e:ac:20:87:e4:30:07:ba:a2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 09:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:70:1b:37:4d:72:d9:14:c5:d8:56:3e:71: e7:27:8c:5e:cd:71:a8:20:7b:e0:9a:2b:3d:b1:f9: 40:a7:b2:fc:a9:d7:e1:fa:e0:2f:84:f0:da:ac:7d: a0:c3:7d:50:0b:54:96:d4:94:f6:7a:7c:42:a3:ef: 1f:a2:7d:b1:4a:0b:f3:fb:22:15:00:19:9d:0f:52: 69:bb:2c:66:be:d5:89:8b:a1:6d:3f:ff:f7:ef:98: 2d:56:45:c0:c1:33:17:91:8f:f0:e2:91:e3:33:e3: a3:30:ac:5c:b3:e3:c9:90:78:f0:cf:82:75:bb:a7: af:2a:ce:57:f8:d1:81:0e:aa:df:a5:e8:19:0d:64: 4a:0a:2d:e6:d4:58:ed:41:32:21:5e:b0:59:8a:4b: 4a:4f:d4:ec:47:3a:31:c2:34:02:79:6e:fd:69:f6: cf:03:6e:1a:db:29:83:92:5f:14:57:40:41:fb:13: 3c:1b:81:0e:45:53:19:24:22:07:f7:eb:b3:bc:78: 22:83:cf:70:ec:7e:5f:5f:0b:0a:06:14:1a:d8:ea: 9f:01:06:ee:71:19:06:bd:05:03:67:ba:5f:6d:1d: c0:68:7d:1a:e5:da:ea:98:d8:11:fe:bf:08:89:a9: 5e:33:89:6c:2f:fc:5d:a6:79:c9:a1:67:64:50:01: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.97.0.0/16 69.62.64.0/18 72.60.0.0-72.62.255.255 76.13.0.0/16 103.199.184.0/22 148.222.52.0/22 148.230.64.0/18 168.231.64.0/18 194.164.148.0/22 Signature Algorithm: sha256WithRSAEncryption aa:ae:47:d6:ce:c8:2b:7d:03:1d:7c:ff:f8:e4:4e:af:6c:bf: 45:28:b0:6a:77:89:f6:f2:8c:2a:1a:97:4f:4c:f5:5f:27:92: e8:10:bc:50:93:40:bb:12:09:57:96:f7:7c:11:95:e7:3a:c6: 10:58:29:ec:96:fd:17:d8:3a:74:38:27:c1:b8:d5:7e:aa:84: 4e:1e:93:76:4b:6a:6e:4f:b8:71:1f:c5:f2:9e:e8:79:ff:1c: 12:a0:14:14:3b:1c:f4:e7:76:ff:10:d8:67:6a:13:aa:26:34: 50:e4:f3:b2:e5:ff:5a:0f:84:4e:9d:c8:6f:ef:99:92:99:3d: 31:83:f1:f2:ce:61:e2:93:e9:4a:79:e8:67:32:e1:ad:9d:a0: fc:e1:fa:9a:48:3d:74:5e:97:0d:2c:65:f7:69:23:c1:bf:4a: 6e:99:e0:cc:21:d7:75:4a:87:5e:87:b5:05:c8:9c:a3:d7:60: 92:6d:78:40:31:67:73:40:70:6a:8e:48:26:e3:32:9a:fe:9a: 43:e9:41:cd:d5:b1:df:af:b3:80:f1:4d:76:e1:10:21:b0:03: 21:6a:85:c5:d9:b3:9f:08:59:11:5c:e4:e1:84:d5:f8:3f:5f: 70:72:5d:bb:2b:f8:bd:0a:f5:d2:81:11:34:83:e1:d2:08:68: 91:a8:76:32 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZrjoqJg9hJOrCCH5DAHuqIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMDk1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTE0MTY2YjY4NWFjMDE1Yjk0MTI2Y2RiOGIxOGM4M2ExMmVkODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTFwGzdNctkUxdhWPnHnJ4xezXGo IHvgmis9sflAp7L8qdfh+uAvhPDarH2gw31QC1SW1JT2enxCo+8fon2xSgvz+yIV ABmdD1JpuyxmvtWJi6FtP//375gtVkXAwTMXkY/w4pHjM+OjMKxcs+PJkHjwz4J1 u6evKs5X+NGBDqrfpegZDWRKCi3m1FjtQTIhXrBZiktKT9TsRzoxwjQCeW79afbP A24a2ymDkl8UV0BB+xM8G4EORVMZJCIH9+uzvHgig89w7H5fXwsKBhQa2OqfAQbu cRkGvQUDZ7pfbR3AaH0a5drqmNgR/r8IialeM4lsL/xdpnnJoWdkUAGNGwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFLkUFmtoWsAVuUEmzbixjIOhLthiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2QzYmU3 MC1kZGYxLTQ4ZjUtODY2Zi1lYTY3YTk4NjI1ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvZDNiZTcw LWRkZjEtNDhmNS04NjZmLWVhNjdhOTg2MjVmZS8xL3VSUVdhMmhhd0JXNVFTYk51 TEdNZzZFdTJHSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjBABAIAATA6AwMAH2EDBAZFPkAwCgMDAkg8AwMASD4DAwBMDQME AmfHuAMEApTeNAMEBpTmQAMEBqjnQAMEAsKklDANBgkqhkiG9w0BAQsFAAOCAQEA qq5H1s7IK30DHXz/+OROr2y/RSiwaneJ9vKMKhqXT0z1XyeS6BC8UJNAuxIJV5b3 fBGV5zrGEFgp7Jb9F9g6dDgnwbjVfqqETh6Tdktqbk+4cR/F8p7oef8cEqAUFDsc 9Od2/xDYZ2oTqiY0UOTzsuX/Wg+ETp3Ib++Zkpk9MYPx8s5h4pPpSnnoZzLhrZ2g /OH6mkg9dF6XDSxl92kjwb9KbpngzCHXdUqHXoe1Bcico9dgkm14QDFnc0Bwao5I JuMymv6aQ+lBzdWx36+zgPFNduEQIbADIWqFxdmznwhZEVzk4YTV+D9fcHJduyv4 vQr10oERNIPh0ghokah2Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:09 2025 by rpki-client