This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer File: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer (raw, json) Hash identifier: vN/VOLHDhPPuJIAJYf/mR+KIu/SGlovnf8eJfjusq10= Subject key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C689A3E83D98DE065729092FDF5003 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49879 IP: 185.21.204.0/22 IP: 217.116.192.0/20 IP: 2a00:5fe0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:89:a3:e8:3d:98:de:06:57:29:09:2f:df:50:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbfbee4a968df0fac4751b4f49027fa095c65277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:22:61:45:80:27:bf:e5:b9:a2:4c:e5:a3: 83:ce:81:fa:58:23:45:8d:84:be:fa:a9:68:34:19: d7:ed:48:a4:70:ba:12:22:cc:2c:1b:ec:8e:ee:c4: 05:95:c4:11:20:61:56:36:57:8a:b3:ee:81:30:e0: b4:7c:cd:ab:62:e3:f1:b1:2f:cd:9e:77:c7:6d:96: 32:82:9e:e5:55:4f:a2:5d:c1:df:ab:32:aa:76:1f: 15:e7:ae:30:8e:08:0b:10:a5:d8:7a:56:b0:90:9c: 42:3c:1d:cb:16:ab:f1:4c:0c:37:16:04:a5:54:c4: f9:29:df:2b:51:00:d5:34:c8:31:9f:29:ab:11:83: ac:51:1f:49:a6:94:f1:50:2b:93:a0:42:3e:4f:8e: 7e:b5:91:49:e2:aa:21:01:cd:98:3f:5f:0e:83:13: 06:28:e2:40:17:29:5d:b8:dd:73:ce:cb:a6:10:0e: 56:22:c8:29:97:12:c9:27:59:3d:36:4c:91:76:d8: e7:be:71:0a:33:9c:65:78:17:33:38:9d:37:52:43: 68:11:46:b0:b0:20:f2:a6:bd:82:15:b3:51:44:bd: 07:f0:a1:d3:aa:94:74:76:66:32:ed:1f:6c:15:7e: 7a:93:f2:9d:18:2f:f1:29:e8:b1:a6:f4:62:f6:c3: 2a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.204.0/22 217.116.192.0/20 IPv6: 2a00:5fe0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49879 Signature Algorithm: sha256WithRSAEncryption 5f:05:7d:ab:46:2f:18:9a:73:31:5c:9e:b7:0b:1a:c2:e3:77: 76:98:da:f7:dc:d2:d0:7f:d4:30:f2:89:1e:4c:db:36:40:86: 4b:70:a7:06:17:68:68:71:52:46:87:c0:80:f0:65:04:72:cd: ef:ec:5b:a1:15:9d:07:f7:91:bf:02:99:89:da:3f:99:62:3d: 2f:a3:1d:ee:a5:a7:6c:9a:35:66:35:69:d5:df:3d:d2:96:36: 2d:f5:dd:3b:35:20:e9:97:10:5c:d2:09:1d:9f:32:eb:87:71: a4:f7:6d:28:4d:0e:24:c2:ea:fb:9d:9f:2b:3e:32:08:62:e2: 28:59:64:d7:3d:65:af:11:df:83:dc:d5:d2:14:dd:9d:31:68: bf:bd:a3:09:8b:c1:ed:5a:1a:28:32:e4:a9:14:6c:6d:f2:3c: cc:a9:77:7a:e2:d3:18:81:70:e8:f1:ae:97:96:8a:ca:b9:03: 3e:52:53:80:80:82:b8:94:57:de:d3:ea:9a:e1:bd:a5:c7:a2: 13:26:84:1d:11:36:a5:27:30:84:9a:7f:a8:3f:87:00:a4:11: a3:51:f7:a7:2c:a1:63:14:49:28:07:b4:d9:bc:c6:94:5f:58: 65:e2:92:1a:9c:b4:16:7d:1d:4a:39:cb:d2:64:31:db:4d:c5: 60:a6:3a:dc -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xomj6D2Y3gZXKQkv31ADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmZiZWU0YTk2OGRmMGZhYzQ3NTFiNGY0OTAyN2ZhMDk1YzY1Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO8iYUWAJ7/luaJM5aODzoH6WCNF jYS++qloNBnX7UikcLoSIswsG+yO7sQFlcQRIGFWNleKs+6BMOC0fM2rYuPxsS/N nnfHbZYygp7lVU+iXcHfqzKqdh8V564wjggLEKXYelawkJxCPB3LFqvxTAw3FgSl VMT5Kd8rUQDVNMgxnymrEYOsUR9JppTxUCuToEI+T45+tZFJ4qohAc2YP18OgxMG KOJAFylduN1zzsumEA5WIsgplxLJJ1k9NkyRdtjnvnEKM5xleBczOJ03UkNoEUaw sCDypr2CFbNRRL0H8KHTqpR0dmYy7R9sFX56k/KdGC/xKeixpvRi9sMqcwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLv77kqWjfD6xHUbT0kCf6CVxlJ3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2L2NkMDgx ZS04OWMyLTQzMDktOTQ5MC0wYTg5YzY5OTZmZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvY2QwODFl LTg5YzItNDMwOS05NDkwLTBhODljNjk5NmZlZi8xL3VfdnVTcGFOOFByRWRSdFBT UUpfb0pYR1VuYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuRXMAwQE2XTAMA0EAgACMAcDBQAqAF/gMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDC1zANBgkqhkiG9w0BAQsFAAOCAQEAXwV9 q0YvGJpzMVyetwsawuN3dpja99zS0H/UMPKJHkzbNkCGS3CnBhdoaHFSRofAgPBl BHLN7+xboRWdB/eRvwKZido/mWI9L6Md7qWnbJo1ZjVp1d890pY2LfXdOzUg6ZcQ XNIJHZ8y64dxpPdtKE0OJMLq+52fKz4yCGLiKFlk1z1lrxHfg9zV0hTdnTFov72j CYvB7VoaKDLkqRRsbfI8zKl3euLTGIFw6PGul5aKyrkDPlJTgICCuJRX3tPqmuG9 pceiEyaEHRE2pScwhJp/qD+HAKQRo1H3pyyhYxRJKAe02bzGlF9YZeKSGpy0Fn0d SjnL0mQx203FYKY63A== -----END CERTIFICATE-----Generated at Mon Jan 26 13:15:40 2026 by rpki-client