This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer File: uRFN_za5SLVsIR0l85h1HTW5PMI.cer (raw, json) Hash identifier: v1fjszECaQLmuFzzUcE16+YLFoNXKWwNv82wwZDHfQI= Subject key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B368955ADF2D39E757E9521007238F08B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 12:15:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 213567 IP: 91.199.40.0/24 IP: 185.46.173.0/24 IP: 185.218.207.0/24 IP: 2a12:4180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:89:55:ad:f2:d3:9e:75:7e:95:21:00:72:38:f0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 12:15:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9114dff36b948b56c211d25f398751d35b93cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3f:2a:a2:7c:45:32:88:01:73:33:1e:8b:3e: cb:2e:bf:d3:24:f2:e1:3b:ee:01:ab:ad:b9:65:76: 97:eb:f1:c1:de:65:f4:26:0c:ad:5f:96:7a:90:92: 2c:66:8f:8f:e4:1e:96:d5:37:93:6d:ac:b1:23:2e: 87:fe:32:35:0d:33:14:fc:ff:c3:66:92:6c:11:b1: 1f:0b:cc:dd:b8:d9:ee:c4:6f:b1:16:66:73:9a:5e: e4:5f:e8:60:05:bd:20:79:6d:df:03:64:c6:15:1e: 9b:93:ec:8c:cc:1a:7a:0a:f8:59:67:b7:6b:b4:22: d6:fc:be:a2:aa:e3:c1:84:28:1e:3b:96:41:e3:97: 83:fa:03:65:83:6a:18:b5:e6:95:f4:4d:97:27:20: 0f:f8:bd:52:0f:fa:65:45:46:4d:fe:a5:05:45:fc: 62:a4:58:24:dd:7e:c8:b1:be:1e:d3:b4:6e:69:df: eb:fc:2b:4e:04:12:f1:1b:2e:da:f7:e3:4a:29:fe: 3a:5f:90:0d:10:37:d1:4d:46:ea:45:44:72:84:bd: 51:8a:04:1b:8c:52:ab:3c:07:2a:ab:b9:ca:ae:e2: 8f:a8:33:a8:93:92:25:0f:13:f5:9f:1e:36:aa:0f: 0d:ed:db:2a:a1:c6:08:0d:0f:3f:9c:15:a9:d1:b6: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.40.0/24 185.46.173.0/24 185.218.207.0/24 IPv6: 2a12:4180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213567 Signature Algorithm: sha256WithRSAEncryption 68:1d:78:5a:51:2c:e7:c6:3a:bd:11:e9:b3:a5:27:49:82:73: 8e:7d:68:f8:ef:cb:34:b4:c7:89:f3:20:98:21:85:74:58:a5: 85:b2:36:fd:b0:42:84:f2:39:64:19:96:fd:a9:31:c6:63:67: 0e:ce:f3:65:26:8c:41:d6:25:85:48:26:ca:2a:b7:32:17:4b: bc:0d:5e:10:dd:1d:49:6a:e7:0b:a5:35:e4:7e:ea:83:e9:9e: f9:35:b9:45:a1:8b:f0:a1:0a:1f:dd:2e:7d:8d:25:35:26:fc: ef:8c:63:19:20:b9:01:f6:84:8d:3b:31:af:cb:6e:95:cc:00: bb:4f:c4:13:9a:ac:05:9c:62:24:bc:75:72:50:33:6f:94:01: 0d:ab:86:bf:23:38:3a:c1:8f:51:af:93:d4:b7:3f:93:80:2d: f0:62:bd:f3:2f:37:da:ff:1f:e9:d3:b4:fc:07:d4:57:ef:b2: f7:a9:e2:ae:2e:e7:30:05:38:66:02:c2:db:2f:b1:d8:91:6a: 2e:b9:80:1c:6c:51:26:dc:95:ce:cd:7f:18:09:e6:80:7e:c3: 18:10:43:ec:f3:2f:bb:40:d4:fb:c9:08:01:ae:01:06:18:e5: 84:85:ee:53:15:35:60:ca:a4:33:01:ba:5f:cf:94:d2:ca:67: a6:b6:cb:b1 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZs2iVWt8tOedX6VIQByOPCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MTIxNTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTExNGRmZjM2Yjk0OGI1NmMyMTFkMjVmMzk4NzUxZDM1YjkzY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T8qonxFMogBczMeiz7LLr/TJPLh O+4Bq625ZXaX6/HB3mX0JgytX5Z6kJIsZo+P5B6W1TeTbayxIy6H/jI1DTMU/P/D ZpJsEbEfC8zduNnuxG+xFmZzml7kX+hgBb0geW3fA2TGFR6bk+yMzBp6CvhZZ7dr tCLW/L6iquPBhCgeO5ZB45eD+gNlg2oYteaV9E2XJyAP+L1SD/plRUZN/qUFRfxi pFgk3X7Isb4e07Ruad/r/CtOBBLxGy7a9+NKKf46X5ANEDfRTUbqRURyhL1RigQb jFKrPAcqq7nKruKPqDOok5IlDxP1nx42qg8N7dsqocYIDQ8/nBWp0bbaXwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFLkRTf82uUi1bCEdJfOYdR01uTzCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzNjNjg3 Ni05NmFlLTQ4YWYtYWU3YS1mZjA1ZDQ0NmU3ZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvM2M2ODc2 LTk2YWUtNDhhZi1hZTdhLWZmMDVkNDQ2ZTdmZC8xL3VSRk5femE1U0xWc0lSMGw4 NWgxSFRXNVBNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW8coAwQAuS6tAwQAudrPMA0EAgACMAcDBQMq EkGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNCPzANBgkqhkiG9w0BAQsFAAOC AQEAaB14WlEs58Y6vRHps6UnSYJzjn1o+O/LNLTHifMgmCGFdFilhbI2/bBChPI5 ZBmW/akxxmNnDs7zZSaMQdYlhUgmyiq3MhdLvA1eEN0dSWrnC6U15H7qg+me+TW5 RaGL8KEKH90ufY0lNSb874xjGSC5AfaEjTsxr8tulcwAu0/EE5qsBZxiJLx1clAz b5QBDauGvyM4OsGPUa+T1Lc/k4At8GK98y832v8f6dO0/AfUV++y96niri7nMAU4 ZgLC2y+x2JFqLrmAHGxRJtyVzs1/GAnmgH7DGBBD7PMvu0DU+8kIAa4BBhjlhIXu UxU1YMqkMwG6X8+U0spnprbLsQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:53:28 2025 by rpki-client