This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer File: udCVzONbOja-8QjvdipiGvRmJiE.cer (raw, json) Hash identifier: nNqbfLSLrKqm0qsZdUmJTzb5FaiGRT53saoxT915dMA= Subject key identifier: B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F152B11A3F8DC43EF626F9C3A8B15E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51151 IP: 31.223.191.0/24 IP: 103.24.236.0/22 IP: 178.236.112.0 -- 178.236.124.255 IP: 178.236.126.0/23 IP: 185.70.136.0 -- 185.70.138.255 IP: 185.151.108.0/22 IP: 2a03:3660::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2b:11:a3:f8:dc:43:ef:62:6f:9c:3a:8b:15:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9d095cce35b3a36bef108ef762a621af4662621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:fa:e6:dd:bb:e7:6d:18:2b:e4:a1:71:99: 5e:17:fc:ca:75:4f:a5:40:ec:ff:84:c0:2a:f5:37: db:83:3f:7e:13:b3:07:0b:e3:b2:59:1e:2e:41:09: 1b:8e:ad:e3:65:d6:70:ee:aa:02:1e:bd:9f:35:05: 64:10:a1:9d:83:62:5d:e2:cf:ec:c7:1a:d7:b0:09: 65:dd:2d:03:b3:ae:ae:b1:b1:46:d3:1a:9f:f1:6a: 32:24:6a:c5:4c:81:8d:5b:e0:40:a4:23:03:4a:41: d9:32:81:2d:74:5d:14:64:32:68:d5:4e:d9:11:6e: d7:4b:08:ba:e3:ec:8a:93:dd:ac:02:ea:36:e0:d4: a9:04:e7:25:1f:95:f1:79:f6:39:f4:b7:88:27:13: a8:fd:eb:f1:00:f2:1b:fb:20:af:eb:af:fb:d1:04: 4d:d3:f8:c4:04:2a:ff:19:2b:1f:f8:b1:73:73:b5: 59:34:5c:8e:7b:b6:2e:98:f0:53:b1:bc:82:b4:b0: 6d:f6:7d:11:d1:c5:6c:4e:31:f8:ba:4d:cd:4e:6b: 73:cb:f9:f1:a9:ea:d4:b6:8c:28:21:03:62:cd:de: 2c:52:24:2c:cc:51:0a:c3:a6:ba:7a:14:80:f1:a7: 06:aa:2d:24:ce:1f:f7:d3:ac:42:b1:9d:45:cf:5b: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.223.191.0/24 103.24.236.0/22 178.236.112.0-178.236.124.255 178.236.126.0/23 185.70.136.0-185.70.138.255 185.151.108.0/22 IPv6: 2a03:3660::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51151 Signature Algorithm: sha256WithRSAEncryption 73:ad:1a:c6:b4:62:16:ac:12:c9:43:4c:1c:7b:cd:53:34:3f: 4d:09:14:85:41:86:cd:50:c7:37:34:46:6c:d6:12:1b:d3:a6: b6:e8:12:6f:07:14:ba:1b:6b:48:c6:1c:d1:0a:9e:55:62:9b: d3:5b:ea:a3:e5:05:47:23:2d:2c:d3:e4:8c:7b:00:ea:c6:c6: 5e:6a:a1:7a:b8:c0:a6:dc:49:fc:ad:03:de:44:8a:d0:e1:b2: 2f:06:57:50:d2:0c:d8:6c:b7:da:52:21:65:18:dc:1b:44:45: 7c:9c:3e:a2:40:b0:cc:15:ed:9b:87:35:47:a2:2c:22:bb:a9: d4:a6:35:3e:bd:2a:34:02:ba:13:dc:a9:e2:59:97:f2:5d:2b: 10:6c:ca:a8:03:62:90:ee:77:4c:5c:41:1c:0c:82:4c:35:6d: 09:60:2f:6d:0e:02:e7:c4:a1:2b:e0:8a:f1:7b:17:d1:08:3a: cc:79:e9:48:4e:2e:25:e4:02:23:5d:e8:ff:0d:f5:62:43:88: 8f:83:7d:d0:73:7f:91:79:0e:34:c4:67:0f:7c:c8:67:c4:9e: 66:80:ac:76:fe:6e:9f:cb:46:39:49:9e:ca:ba:f8:9e:ef:de: 9d:6a:41:94:04:e8:f6:21:b6:f8:f1:68:ee:42:b6:3d:c2:18: 7b:65:b4:a0 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZt/FSsRo/jcQ+9ib5w6ixXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWQwOTVjY2UzNWIzYTM2YmVmMTA4ZWY3NjJhNjIxYWY0NjYyNjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtD65t27520YK+ShcZleF/zKdU+l QOz/hMAq9Tfbgz9+E7MHC+OyWR4uQQkbjq3jZdZw7qoCHr2fNQVkEKGdg2Jd4s/s xxrXsAll3S0Ds66usbFG0xqf8WoyJGrFTIGNW+BApCMDSkHZMoEtdF0UZDJo1U7Z EW7XSwi64+yKk92sAuo24NSpBOclH5XxefY59LeIJxOo/evxAPIb+yCv66/70QRN 0/jEBCr/GSsf+LFzc7VZNFyOe7YumPBTsbyCtLBt9n0R0cVsTjH4uk3NTmtzy/nx qerUtowoIQNizd4sUiQszFEKw6a6ehSA8acGqi0kzh/306xCsZ1Fz1s8JQIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFLnQlczjWzo2vvEI73YqYhr0ZiYhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzI4MWNj Mi05NTllLTQxOTItYmRkZS04YzcwYmM4NDdiYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvMjgxY2My LTk1OWUtNDE5Mi1iZGRlLThjNzBiYzg0N2JjNS8xL3VkQ1Z6T05iT2phLThRanZk aXBpR3ZSbUppRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGCCsGAQUF BwEHAQH/BE0wSzA6BAIAATA0AwQAH9+/AwQCZxjsMAwDBASy7HADBACy7HwDBAGy 7H4wDAMEA7lGiAMEALlGigMEArmXbDANBAIAAjAHAwUAKgM2YDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMAx88wDQYJKoZIhvcNAQELBQADggEBAHOtGsa0YhasEslD TBx7zVM0P00JFIVBhs1Qxzc0RmzWEhvTprboEm8HFLoba0jGHNEKnlVim9Nb6qPl BUcjLSzT5Ix7AOrGxl5qoXq4wKbcSfytA95EitDhsi8GV1DSDNhst9pSIWUY3BtE RXycPqJAsMwV7ZuHNUeiLCK7qdSmNT69KjQCuhPcqeJZl/JdKxBsyqgDYpDud0xc QRwMgkw1bQlgL20OAufEoSvgivF7F9EIOsx56UhOLiXkAiNd6P8N9WJDiI+DfdBz f5F5DjTEZw98yGfEnmaArHb+bp/LRjlJnsq6+J7v3p1qQZQE6PYhtvjxaO5Ctj3C GHtltKA= -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:30 2026 by rpki-client