This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer File: ulS25fzKMIs23I8Wdgay1lmDnPE.cer (raw, json) Hash identifier: jQlqRzjkDlSXUS2e2ySf+WiYZ0Z/GpU7pn9UNdYMStw= Subject key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA424F4AF53611AF0F2BEF9C53B751B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204007 AS: 211594 IP: 185.185.216.0/22 IP: 185.190.89.0/24 IP: 185.194.12.0/24 IP: 185.254.123.0/24 IP: 2a0b:6580::/29 IP: 2a0c:1880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:24:f4:af:53:61:1a:f0:f2:be:f9:c5:3b:75:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:00:69:ca:1a:0c:f2:11:ee:d9:bc:fc:83: a4:35:5f:a1:c1:27:c8:dd:92:2a:65:03:3c:f4:38: f6:89:f6:3d:ef:11:a5:f8:36:c5:4a:58:c2:ee:0c: a8:2b:c5:c4:32:21:ab:88:6c:64:bc:64:5a:9d:36: d7:9c:aa:80:95:c2:05:9a:c4:a6:b9:7a:1a:88:31: 2e:28:dd:29:ed:9c:7e:9a:23:fc:a2:01:b5:76:f5: 05:ab:34:fa:63:b7:72:07:b4:7d:1e:2e:97:4b:53: ae:9c:e1:ac:f5:a8:e5:cf:4b:e1:95:5f:c0:3a:e1: b6:f6:a2:43:f4:d2:3f:5b:03:79:91:84:b5:a4:02: 23:ca:82:43:e3:0d:eb:5f:6a:db:a9:0a:1f:4d:a1: b9:a2:de:e6:37:e6:b7:fd:24:b6:cb:47:72:93:3b: 64:3c:42:39:f4:e9:02:05:5d:db:34:63:bb:5f:df: 50:dd:90:a9:80:60:0e:0f:a7:1c:d9:f6:ae:07:8a: 76:03:08:c8:3e:e7:39:83:84:40:83:07:7f:7d:dd: fe:b8:8b:38:cd:86:90:0a:f4:21:a6:e8:d2:62:94: ae:c0:62:16:53:05:e9:01:64:7c:9c:aa:da:dc:2d: 4c:55:82:43:ad:0d:c5:48:67:41:e1:f0:dd:02:ec: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.216.0/22 185.190.89.0/24 185.194.12.0/24 185.254.123.0/24 IPv6: 2a0b:6580::/29 2a0c:1880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204007 211594 Signature Algorithm: sha256WithRSAEncryption 23:8d:cc:32:d0:95:da:83:cc:e2:3d:46:be:bb:0e:7d:d0:4b: a7:63:29:ad:c9:87:17:3e:9e:8e:01:c7:54:2e:b4:bd:ee:9d: e7:6e:ca:b6:3b:dd:8e:fe:d5:fd:11:09:63:ee:39:19:58:fe: 22:96:52:37:57:b0:b0:4d:5b:11:93:e6:df:b2:7e:fd:16:7e: 11:08:53:96:b9:36:fb:40:dd:aa:a0:5d:bf:a8:85:88:e0:aa: b0:e3:76:d8:9c:05:65:a7:9f:41:83:8a:1c:f0:9b:5c:b2:62: fe:0a:f8:61:85:a4:55:0c:28:ec:51:0c:06:9a:d5:d9:6d:ca: 8d:bb:f0:4e:f6:2c:74:39:ba:37:f1:35:da:56:74:a1:59:3e: 10:e2:34:48:17:72:93:c8:8a:97:43:71:0c:aa:73:cf:20:fe: e9:37:fe:51:d6:f5:34:f0:24:1d:96:c8:e5:9f:7d:42:3a:17: 24:88:99:4d:4a:29:b4:9a:53:75:c4:04:3c:0c:29:d3:4f:b8: 06:bf:21:85:69:ae:63:45:79:12:86:98:f9:a2:c8:a4:38:8e: 79:ac:c4:04:76:ce:49:e6:42:b7:dd:7a:10:69:f5:00:a3:39: 2a:02:ee:7d:41:0b:15:58:a2:38:a4:00:e2:42:21:03:b7:73: 98:a2:c3:e9 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt7pCT0r1NhGvDyvvnFO3UbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTU0YjZlNWZjY2EzMDhiMzZkYzhmMTY3NjA2YjJkNjU5ODM5Y2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzusAacoaDPIR7tm8/IOkNV+hwSfI 3ZIqZQM89Dj2ifY97xGl+DbFSljC7gyoK8XEMiGriGxkvGRanTbXnKqAlcIFmsSm uXoaiDEuKN0p7Zx+miP8ogG1dvUFqzT6Y7dyB7R9Hi6XS1OunOGs9ajlz0vhlV/A OuG29qJD9NI/WwN5kYS1pAIjyoJD4w3rX2rbqQofTaG5ot7mN+a3/SS2y0dykztk PEI59OkCBV3bNGO7X99Q3ZCpgGAOD6cc2fauB4p2AwjIPuc5g4RAgwd/fd3+uIs4 zYaQCvQhpujSYpSuwGIWUwXpAWR8nKra3C1MVYJDrQ3FSGdB4fDdAuzaxwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFLpUtuX8yjCLNtyPFnYGstZZg5zxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzc4YjE5 MC04YTAyLTRjYjgtYjQ4NC01MjZmN2NjNTI5YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvNzhiMTkw LThhMDItNGNiOC1iNDg0LTUyNmY3Y2M1MjliNy8xL3VsUzI1ZnpLTUlzMjNJOFdk Z2F5MWxtRG5QRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCubnYAwQAub5ZAwQAucIMAwQAuf57MBQEAgAC MA4DBQMqC2WAAwUDKgwYgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMDHOcCAwM6 ijANBgkqhkiG9w0BAQsFAAOCAQEAI43MMtCV2oPM4j1GvrsOfdBLp2MprcmHFz6e jgHHVC60ve6d527Ktjvdjv7V/REJY+45GVj+IpZSN1ewsE1bEZPm37J+/RZ+EQhT lrk2+0DdqqBdv6iFiOCqsON22JwFZaefQYOKHPCbXLJi/gr4YYWkVQwo7FEMBprV 2W3KjbvwTvYsdDm6N/E12lZ0oVk+EOI0SBdyk8iKl0NxDKpzzyD+6Tf+Udb1NPAk HZbI5Z99QjoXJIiZTUoptJpTdcQEPAwp00+4Br8hhWmuY0V5EoaY+aLIpDiOeazE BHbOSeZCt916EGn1AKM5KgLufUELFViiOKQA4kIhA7dzmKLD6Q== -----END CERTIFICATE-----Generated at Mon Jan 12 14:57:27 2026 by rpki-client