This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer File: u4N41EQt9p9H3A6lgqErKrUUvg8.cer (raw, json) Hash identifier: SK3r3i459NCvCZUYzj+dgzs5lI2HZa1OclHaCOH7G50= Subject key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A273E1027DC032E73B5CF7A15ED76A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39019 IP: 185.204.100.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:73:e1:02:7d:c0:32:e7:3b:5c:f7:a1:5e:d7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:1a:bb:fb:c2:a8:01:2b:45:12:7b:28:22: 6c:8b:24:ec:26:98:57:fd:4a:7d:c6:a1:13:57:c3: cf:63:24:c3:da:4e:2f:96:96:1d:ae:81:0f:55:83: 08:6a:d2:f6:a1:40:b3:0e:c2:f2:0c:70:55:08:e9: 59:8f:81:dc:f7:38:a4:f6:f0:04:5d:da:d2:4f:53: 9d:e8:67:3a:fa:3b:87:55:a3:3b:e7:f4:9c:ef:28: ef:da:84:ca:e4:cb:d0:7c:99:1d:19:d9:93:60:d7: 34:70:0e:b7:b7:9b:d6:bd:73:d5:10:c2:c6:41:4e: 1f:c9:c0:61:13:06:44:53:4b:da:70:3a:2d:88:74: 84:3f:e9:2d:9b:79:3f:14:86:7d:41:50:be:69:d9: 19:bc:74:56:48:09:87:d9:67:fa:a3:ff:b0:c1:34: 31:3a:16:6f:36:2d:4a:23:dc:b9:64:7b:33:85:ed: 2b:37:fa:4e:b8:4e:ab:23:97:b5:ad:e5:e2:17:99: 38:fa:0b:7b:2a:50:d6:68:cf:39:d1:43:57:02:6f: 79:ed:e8:86:63:6c:79:ce:11:02:7f:55:a0:eb:93: 23:ab:c4:9b:26:cd:55:b4:d7:bf:f3:ca:a7:fe:7d: 54:9d:55:32:b7:bf:6e:66:63:c5:50:55:3c:73:a3: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.100.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39019 Signature Algorithm: sha256WithRSAEncryption 1b:ef:21:12:37:95:24:fe:f6:2d:19:d2:c4:c2:73:d8:6b:ab: f9:cf:7f:5e:42:f6:af:30:ce:51:6b:bf:33:45:32:aa:d2:4a: 9a:f7:16:38:d0:e1:5f:ed:22:62:5e:5e:43:93:3e:46:b2:18: e6:f4:f4:d8:84:cf:29:bf:b5:63:d1:0e:50:6b:ae:b8:aa:7b: 69:0a:27:e3:aa:c2:88:1f:a3:63:b6:83:4f:6e:33:fb:90:73: 46:48:0f:a8:7e:fa:94:02:f6:5f:79:c4:ee:1d:c4:fb:e3:ef: 55:7f:0f:c5:8a:95:35:6a:ae:09:48:d9:ab:d2:28:90:cb:82: 13:8e:a1:85:84:b3:39:47:8d:ba:0d:40:79:61:8f:62:5f:7e: 68:c4:47:73:74:77:59:37:1b:8a:80:5d:49:40:83:7e:e3:71: 16:9c:79:4f:1e:dc:f9:ab:1c:c4:2c:31:84:ec:9f:85:17:7e: e2:45:9c:e6:81:6d:d6:1d:f6:d7:0a:52:cf:82:3b:3d:64:1a: 4a:f2:bc:1c:e8:26:a0:a0:35:82:54:83:bb:9c:bb:50:9b:ab: 7f:7c:22:16:b0:a9:46:8a:ca:50:15:2c:79:2d:43:d2:1f:7d: 88:07:e8:bc:8e:83:ec:98:68:d3:f3:1b:4c:aa:45:ea:81:81: 09:b5:4f:8f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4onPhAn3AMuc7XPehXtdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjgzNzhkNDQ0MmRmNjlmNDdkYzBlYTU4MmExMmIyYWI1MTRiZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvwau/vCqAErRRJ7KCJsiyTsJphX /Up9xqETV8PPYyTD2k4vlpYdroEPVYMIatL2oUCzDsLyDHBVCOlZj4Hc9zik9vAE XdrST1Od6Gc6+juHVaM75/Sc7yjv2oTK5MvQfJkdGdmTYNc0cA63t5vWvXPVEMLG QU4fycBhEwZEU0vacDotiHSEP+ktm3k/FIZ9QVC+adkZvHRWSAmH2Wf6o/+wwTQx OhZvNi1KI9y5ZHszhe0rN/pOuE6rI5e1reXiF5k4+gt7KlDWaM850UNXAm957eiG Y2x5zhECf1Wg65Mjq8SbJs1VtNe/88qn/n1UnVUyt79uZmPFUFU8c6NJ1QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLuDeNRELfafR9wOpYKhKyq1FL4PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzFkYjBk MS1hYTkzLTQ1YzAtOTg4OS1kOGE1NTVjNjQyMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvMWRiMGQx LWFhOTMtNDVjMC05ODg5LWQ4YTU1NWM2NDIxNC8xL3U0TjQxRVF0OXA5SDNBNmxn cUVyS3JVVXZnOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAucxkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCYazANBgkqhkiG9w0BAQsFAAOCAQEAG+8hEjeVJP72LRnSxMJz2Gur+c9/XkL2 rzDOUWu/M0UyqtJKmvcWONDhX+0iYl5eQ5M+RrIY5vT02ITPKb+1Y9EOUGuuuKp7 aQon46rCiB+jY7aDT24z+5BzRkgPqH76lAL2X3nE7h3E++PvVX8PxYqVNWquCUjZ q9IokMuCE46hhYSzOUeNug1AeWGPYl9+aMRHc3R3WTcbioBdSUCDfuNxFpx5Tx7c +ascxCwxhOyfhRd+4kWc5oFt1h321wpSz4I7PWQaSvK8HOgmoKA1glSDu5y7UJur f3wiFrCpRorKUBUseS1D0h99iAfovI6D7Jho0/MbTKpF6oGBCbVPjw== -----END CERTIFICATE-----Generated at Mon Jan 12 07:56:55 2026 by rpki-client