This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer File: u-Eo3LaBD_3FArowR81BkTLaInQ.cer (raw, json) Hash identifier: dmKTnNK8tSA5dGshr2xRFxGvEgZx38c4EFPo6RmNhUM= Subject key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B263A7F31CD86BC6745FE4C4C053960D8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 16 Dec 2025 08:15:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 25460 IP: 5.61.120.0/21 IP: 45.154.208.0/22 IP: 185.91.124.0/24 IP: 185.118.28.0/22 IP: 2a01:5ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:3a:7f:31:cd:86:bc:67:45:fe:4c:4c:05:39:60:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 16 08:15:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bbe128dcb6810ffdc502ba3047cd419132da2274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:58:03:fb:6a:6e:70:da:f8:6b:ab:8c:57:49: af:6e:b3:2b:7e:b0:df:37:49:69:6e:e7:ee:68:5e: d2:a5:e1:69:ca:f0:de:2e:9f:7a:b7:b8:65:fb:9a: f3:ad:7b:fd:ad:17:dd:c1:8d:1c:ec:35:c6:16:80: 23:c8:d5:67:9d:b2:6b:f6:39:7d:2c:57:5e:5f:e0: 33:9b:56:d6:da:1c:fb:51:e4:96:4f:36:be:2c:20: 0c:13:54:13:33:06:40:9a:27:39:c0:27:94:7a:6c: b0:2b:56:e4:4c:ca:e9:1a:09:2b:46:85:10:be:51: 89:59:64:6c:85:68:d2:df:2d:4c:17:02:e0:6a:cb: da:6b:b7:a6:55:5d:e8:6d:12:12:1c:b8:e0:d1:1e: 36:b8:84:a6:bd:ce:a3:33:5e:fb:84:b9:a7:ad:09: f1:8e:b6:f0:b2:c8:e3:6d:b4:9a:08:81:64:52:ce: 11:9d:f7:b1:5b:ce:da:3d:4d:2c:de:ea:3c:3d:c0: 2b:6a:6e:d4:4f:2d:5f:0c:b8:33:68:c0:ec:fb:9c: 8b:c0:77:9e:ae:b2:72:1c:3b:8f:4a:25:f4:73:b7: 68:1f:17:b5:9d:ca:29:be:5b:b8:5b:33:29:1a:df: 5b:e9:2b:46:65:57:67:e2:f9:4e:dd:6d:f6:18:30: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.120.0/21 45.154.208.0/22 185.91.124.0/24 185.118.28.0/22 IPv6: 2a01:5ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25460 Signature Algorithm: sha256WithRSAEncryption 9e:fc:cf:24:a7:23:97:f1:09:2a:59:38:2a:dc:0e:3b:d3:ad: 73:bf:a0:a0:52:d0:21:0e:44:68:1f:84:9c:2e:78:fd:43:62: 97:66:6a:34:b9:fb:38:33:5c:b3:c4:e2:5e:85:18:5c:aa:87: 1f:15:f2:99:86:b9:bb:b3:8f:e4:f0:a6:34:45:bf:2b:f4:7b: e4:ea:11:56:7a:c3:26:ba:11:f5:7f:1c:8d:8b:3c:a9:18:4c: d6:74:cf:99:93:e3:27:7b:2c:07:c7:99:3a:0b:c9:f3:1e:e3: 7d:bc:3d:3e:f6:cb:4b:26:4b:f8:0e:71:81:c5:0e:60:7d:71: 6d:b5:c0:cd:51:3b:51:20:ff:4f:37:4e:c0:41:51:ac:56:7c: a6:ba:2a:4d:74:16:cc:ab:75:fe:66:a0:88:74:e2:c5:1e:40: a1:00:66:88:a3:15:49:43:14:bc:cf:2e:da:11:19:13:08:98: b7:08:6e:57:7b:8a:d2:06:72:f8:ea:2a:4e:92:a7:10:8a:e0: a6:14:4d:bf:1e:54:6d:15:80:61:4a:ee:85:e1:ed:7e:12:4a: 62:ba:ad:79:6d:48:12:bc:a6:ed:16:64:94:ba:08:20:44:46: 03:1f:22:e8:ac:79:29:ae:7b:3d:43:eb:e4:60:5e:4d:b2:d8: b6:4a:ae:00 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZsmOn8xzYa8Z0X+TEwFOWDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE2MDgxNTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmUxMjhkY2I2ODEwZmZkYzUwMmJhMzA0N2NkNDE5MTMyZGEyMjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51gD+2pucNr4a6uMV0mvbrMrfrDf N0lpbufuaF7SpeFpyvDeLp96t7hl+5rzrXv9rRfdwY0c7DXGFoAjyNVnnbJr9jl9 LFdeX+Azm1bW2hz7UeSWTza+LCAME1QTMwZAmic5wCeUemywK1bkTMrpGgkrRoUQ vlGJWWRshWjS3y1MFwLgasvaa7emVV3obRISHLjg0R42uISmvc6jM177hLmnrQnx jrbwssjjbbSaCIFkUs4RnfexW87aPU0s3uo8PcAram7UTy1fDLgzaMDs+5yLwHee rrJyHDuPSiX0c7doHxe1ncopvlu4WzMpGt9b6StGZVdn4vlO3W32GDCEGwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFLvhKNy2gQ/9xQK6MEfNQZEy2iJ0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2MwNzFh OC01NGFhLTRhYmQtODEyNy1lZGY3YmI2NTNmMTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvYzA3MWE4 LTU0YWEtNGFiZC04MTI3LWVkZjdiYjY1M2YxMy8xL3UtRW8zTGFCRF8zRkFyb3dS ODFCa1RMYUluUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBT14AwQCLZrQAwQAuVt8AwQCuXYcMA0EAgAC MAcDBQAqAVrAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmN0MA0GCSqGSIb3DQEB CwUAA4IBAQCe/M8kpyOX8QkqWTgq3A47061zv6CgUtAhDkRoH4ScLnj9Q2KXZmo0 ufs4M1yzxOJehRhcqocfFfKZhrm7s4/k8KY0Rb8r9Hvk6hFWesMmuhH1fxyNizyp GEzWdM+Zk+MneywHx5k6C8nzHuN9vD0+9stLJkv4DnGBxQ5gfXFttcDNUTtRIP9P N07AQVGsVnymuipNdBbMq3X+ZqCIdOLFHkChAGaIoxVJQxS8zy7aERkTCJi3CG5X e4rSBnL46ipOkqcQiuCmFE2/HlRtFYBhSu6F4e1+Ekpiuq15bUgSvKbtFmSUuggg REYDHyLorHkprns9Q+vkYF5Nsti2Sq4A -----END CERTIFICATE-----Generated at Sun Dec 21 12:29:05 2025 by rpki-client