This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer File: uRFN_za5SLVsIR0l85h1HTW5PMI.cer (raw, json) Hash identifier: KEcp3iuCST8EnwYeM2wXkk0O5FKWHylR7wswB4RaHdY= Subject key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B503B5F568EEC9A6E39D6B1D7998347DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 24 Dec 2025 12:00:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 213567 IP: 46.175.131.0/24 IP: 91.199.40.0/24 IP: 185.46.173.0/24 IP: 185.218.207.0/24 IP: 2a12:4180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:5f:56:8e:ec:9a:6e:39:d6:b1:d7:99:83:47:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 24 12:00:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9114dff36b948b56c211d25f398751d35b93cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3f:2a:a2:7c:45:32:88:01:73:33:1e:8b:3e: cb:2e:bf:d3:24:f2:e1:3b:ee:01:ab:ad:b9:65:76: 97:eb:f1:c1:de:65:f4:26:0c:ad:5f:96:7a:90:92: 2c:66:8f:8f:e4:1e:96:d5:37:93:6d:ac:b1:23:2e: 87:fe:32:35:0d:33:14:fc:ff:c3:66:92:6c:11:b1: 1f:0b:cc:dd:b8:d9:ee:c4:6f:b1:16:66:73:9a:5e: e4:5f:e8:60:05:bd:20:79:6d:df:03:64:c6:15:1e: 9b:93:ec:8c:cc:1a:7a:0a:f8:59:67:b7:6b:b4:22: d6:fc:be:a2:aa:e3:c1:84:28:1e:3b:96:41:e3:97: 83:fa:03:65:83:6a:18:b5:e6:95:f4:4d:97:27:20: 0f:f8:bd:52:0f:fa:65:45:46:4d:fe:a5:05:45:fc: 62:a4:58:24:dd:7e:c8:b1:be:1e:d3:b4:6e:69:df: eb:fc:2b:4e:04:12:f1:1b:2e:da:f7:e3:4a:29:fe: 3a:5f:90:0d:10:37:d1:4d:46:ea:45:44:72:84:bd: 51:8a:04:1b:8c:52:ab:3c:07:2a:ab:b9:ca:ae:e2: 8f:a8:33:a8:93:92:25:0f:13:f5:9f:1e:36:aa:0f: 0d:ed:db:2a:a1:c6:08:0d:0f:3f:9c:15:a9:d1:b6: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.131.0/24 91.199.40.0/24 185.46.173.0/24 185.218.207.0/24 IPv6: 2a12:4180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213567 Signature Algorithm: sha256WithRSAEncryption 27:f3:e2:1a:be:4c:40:4b:5b:c9:95:e9:4a:78:b9:f7:f1:17: 82:73:87:2b:04:80:e6:b4:57:7b:24:af:34:f4:7f:14:d8:95: 2f:f5:14:b3:35:ef:b5:1e:73:63:66:42:0b:10:e8:c8:90:3e: 70:14:83:8e:b8:5e:19:da:cf:96:ea:7d:b5:82:28:7f:9e:97: b8:74:2c:96:c2:4b:a3:99:9e:78:05:d0:14:b6:aa:71:04:64: ef:78:41:db:ee:72:e1:96:07:ce:b4:a5:c6:68:3f:67:0b:b8: 8e:55:7b:13:32:a7:d3:be:18:d5:0a:29:aa:2c:1b:7e:a4:75: 37:54:ab:8b:e8:a7:58:2f:ae:d4:f6:86:26:ca:1f:16:99:49: 28:64:61:0a:87:39:93:48:fd:13:36:21:ed:6a:67:85:d6:d6: 02:a0:8d:0e:5a:d7:9a:bf:e9:2c:9d:78:0a:34:73:af:83:ab: 38:22:50:45:02:27:d8:6c:61:13:c6:b7:68:7a:30:22:28:c4: b3:67:1c:9c:15:27:28:ca:ca:fc:c6:90:1d:96:87:99:c2:99: c1:74:55:b6:35:54:aa:49:76:48:cf:91:d0:3c:3f:89:ff:af: d5:7a:33:00:f1:32:69:1a:f9:85:9c:8f:ea:63:77:02:86:7f: 27:e5:99:8b -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZtQO19WjuyabjnWsdeZg0feMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjI0MTIwMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTExNGRmZjM2Yjk0OGI1NmMyMTFkMjVmMzk4NzUxZDM1YjkzY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T8qonxFMogBczMeiz7LLr/TJPLh O+4Bq625ZXaX6/HB3mX0JgytX5Z6kJIsZo+P5B6W1TeTbayxIy6H/jI1DTMU/P/D ZpJsEbEfC8zduNnuxG+xFmZzml7kX+hgBb0geW3fA2TGFR6bk+yMzBp6CvhZZ7dr tCLW/L6iquPBhCgeO5ZB45eD+gNlg2oYteaV9E2XJyAP+L1SD/plRUZN/qUFRfxi pFgk3X7Isb4e07Ruad/r/CtOBBLxGy7a9+NKKf46X5ANEDfRTUbqRURyhL1RigQb jFKrPAcqq7nKruKPqDOok5IlDxP1nx42qg8N7dsqocYIDQ8/nBWp0bbaXwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFLkRTf82uUi1bCEdJfOYdR01uTzCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzNjNjg3 Ni05NmFlLTQ4YWYtYWU3YS1mZjA1ZDQ0NmU3ZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvM2M2ODc2 LTk2YWUtNDhhZi1hZTdhLWZmMDVkNDQ2ZTdmZC8xL3VSRk5femE1U0xWc0lSMGw4 NWgxSFRXNVBNSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQALq+DAwQAW8coAwQAuS6tAwQAudrPMA0EAgAC MAcDBQMqEkGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNCPzANBgkqhkiG9w0B AQsFAAOCAQEAJ/PiGr5MQEtbyZXpSni59/EXgnOHKwSA5rRXeySvNPR/FNiVL/UU szXvtR5zY2ZCCxDoyJA+cBSDjrheGdrPlup9tYIof56XuHQslsJLo5meeAXQFLaq cQRk73hB2+5y4ZYHzrSlxmg/Zwu4jlV7EzKn074Y1QopqiwbfqR1N1Sri+inWC+u 1PaGJsofFplJKGRhCoc5k0j9EzYh7WpnhdbWAqCNDlrXmr/pLJ14CjRzr4OrOCJQ RQIn2GxhE8a3aHowIijEs2ccnBUnKMrK/MaQHZaHmcKZwXRVtjVUqkl2SM+R0Dw/ if+v1XozAPEyaRr5hZyP6mN3AoZ/J+WZiw== -----END CERTIFICATE-----Generated at Wed Dec 24 20:21:06 2025 by rpki-client