This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer File: 1-14u6ugu75tlf-J5UmcmECD5RMk.cer (raw, json) Hash identifier: zHngqLw2pirsLkKZ0qVaw1D+UGxUAMu1cT5PQk7b8pw= Subject key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A8F11EE17AD4BD0896997B122D58A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212582 IP: 31.14.183.0/24 IP: 195.138.55.0/24 IP: 2a14:9680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8f:11:ee:17:ad:4b:d0:89:69:97:b1:22:d5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb5e2eeae82eef9b657fe2795267261020f944c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:c1:f6:56:fd:a2:0b:b9:8d:3a:90:97:6a: 5a:45:be:63:60:dc:03:47:06:94:06:d0:ae:45:36: 16:da:fd:e2:c6:38:16:12:c9:a6:a5:85:9c:a1:0b: ca:9e:96:b0:79:33:23:87:44:02:ae:8d:5f:a9:b6: e2:14:1b:57:51:14:c8:4b:b6:6f:0d:c0:38:9d:30: e6:4b:21:f6:69:3b:2c:3b:72:57:10:a4:c5:4d:7a: 06:40:50:5f:fc:bf:4b:9c:94:11:09:bb:1c:86:2c: 54:5b:37:f1:ce:7c:ed:d3:ca:18:ca:6a:3a:3b:d5: c2:e5:31:29:06:b0:7d:59:74:9a:de:a6:3f:c0:5b: 3e:d9:51:b4:47:52:e5:d0:27:15:49:0c:95:7b:60: fd:2a:96:3e:a4:e6:ea:43:2b:49:79:63:e5:07:bb: ff:5a:41:44:b3:c8:00:1d:cc:ad:b1:b5:fe:eb:99: e1:68:eb:14:bd:6a:05:2d:21:f7:23:41:ab:92:3a: b0:f8:41:01:4d:9c:d4:cd:6a:df:03:91:06:5e:b3: ff:99:9b:2b:1c:a7:ff:d8:49:45:c7:b9:8f:d6:05: b6:32:92:51:fd:41:a2:18:fd:62:98:e1:92:8e:bd: c9:97:fa:ff:77:04:74:d3:c3:72:c7:16:72:fe:d2: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.183.0/24 195.138.55.0/24 IPv6: 2a14:9680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212582 Signature Algorithm: sha256WithRSAEncryption 16:4c:f1:cd:b4:5d:d6:fb:14:de:31:2f:8a:ec:e4:7d:3d:53: 15:43:b8:52:73:58:6e:42:5b:24:42:0f:91:10:ad:e1:57:7d: 82:9f:95:60:af:4f:5d:f5:53:51:c1:10:4a:fb:c7:25:f3:9b: 91:0e:a7:27:55:49:30:99:72:5f:92:db:36:32:79:7f:87:45: 28:b2:fa:d1:65:06:38:5d:67:2e:07:95:2a:16:f7:50:50:ab: 2c:8c:d0:38:a6:f9:5f:74:c8:0b:5e:f6:60:3c:d3:54:15:7c: f7:d8:09:92:86:b6:5d:ff:3b:05:f9:fa:17:24:2a:46:81:b8: 44:7e:bf:22:98:72:28:d2:6c:e1:a7:01:56:58:72:bb:e5:60: 01:c4:12:14:66:54:0d:94:82:92:f4:ea:4e:0d:d9:27:8a:7c: 42:32:cc:74:70:af:cc:96:45:ac:17:d3:37:79:48:c3:99:ea: 88:51:89:d0:6b:6d:3e:fe:97:54:4d:d4:ae:8a:56:3e:e7:f1: f5:5d:3c:54:d3:75:ee:c8:fd:8f:9b:96:ce:d1:51:f3:c8:19: 62:63:0f:6d:fc:e4:a8:cb:26:5e:42:b8:23:13:96:01:92:b6: 6c:e9:2b:01:24:0b:a4:16:01:cc:4b:14:a8:eb:47:eb:09:b9: 9d:3b:61:24 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt6Wo8R7hetS9CJaZexItWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjVlMmVlYWU4MmVlZjliNjU3ZmUyNzk1MjY3MjYxMDIwZjk0NGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx7B9lb9ogu5jTqQl2paRb5jYNwD RwaUBtCuRTYW2v3ixjgWEsmmpYWcoQvKnpaweTMjh0QCro1fqbbiFBtXURTIS7Zv DcA4nTDmSyH2aTssO3JXEKTFTXoGQFBf/L9LnJQRCbschixUWzfxznzt08oYymo6 O9XC5TEpBrB9WXSa3qY/wFs+2VG0R1Ll0CcVSQyVe2D9KpY+pObqQytJeWPlB7v/ WkFEs8gAHcytsbX+65nhaOsUvWoFLSH3I0Grkjqw+EEBTZzUzWrfA5EGXrP/mZsr HKf/2ElFx7mP1gW2MpJR/UGiGP1imOGSjr3Jl/r/dwR008NyxxZy/tKLCQIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFPteLuroLu+bZX/ieVJnJhAg+UTJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2NjMDY5 Mi1jYzk5LTQ1NDUtYmM1MC1lYWYzZGRiMGExYmIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvY2MwNjky LWNjOTktNDU0NS1iYzUwLWVhZjNkZGIwYTFiYi8xLzEtMTR1NnVndTc1dGxmLUo1 VW1jbUVDRDVSTWsubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEAB8OtwMEAMOKNzANBAIAAjAHAwUDKhSWgDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDPmYwDQYJKoZIhvcNAQELBQADggEBABZM 8c20Xdb7FN4xL4rs5H09UxVDuFJzWG5CWyRCD5EQreFXfYKflWCvT131U1HBEEr7 xyXzm5EOpydVSTCZcl+S2zYyeX+HRSiy+tFlBjhdZy4HlSoW91BQqyyM0Dim+V90 yAte9mA801QVfPfYCZKGtl3/OwX5+hckKkaBuER+vyKYcijSbOGnAVZYcrvlYAHE EhRmVA2UgpL06k4N2SeKfEIyzHRwr8yWRawX0zd5SMOZ6ohRidBrbT7+l1RN1K6K Vj7n8fVdPFTTde7I/Y+bls7RUfPIGWJjD2385KjLJl5CuCMTlgGStmzpKwEkC6QW AcxLFKjrR+sJuZ07YSQ= -----END CERTIFICATE-----Generated at Mon Jan 12 01:59:25 2026 by rpki-client