This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer (raw, json) Hash identifier: NEVndG2IPufYQd3PQhld3fp55dnt1vo8UARbgClTpJw= Subject key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA7EE49D74EE668F13C0468BF8D1BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.143.156.0/23 IP: 2a00:9740::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7e:e4:9d:74:ee:66:8f:13:c0:46:8b:f8:d1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=507e582adc9369da8ae85dd935740123081c7eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2f:84:37:a7:ad:21:dd:f0:a9:c6:4d:6e:57: 73:d7:10:96:9a:93:8d:b1:53:dc:63:82:43:31:5e: 39:1f:f6:a1:6a:6f:f5:45:d4:d9:73:6d:90:d1:c9: 21:89:a2:54:4e:b4:ed:5c:b8:02:97:f6:6f:1b:ac: 39:c6:8f:1a:9d:af:c5:35:a6:a6:c0:6e:9c:c9:8f: 55:55:da:4b:1f:01:2c:d9:5b:f8:89:29:ee:3d:a7: 50:df:9d:37:bf:c1:17:b4:9f:ac:78:22:34:b0:28: ef:67:92:b4:4c:43:32:11:53:48:a0:41:d4:dd:40: 36:4d:b4:33:95:68:0d:fd:e6:42:ca:53:0b:1d:48: 9b:69:98:ef:01:a5:39:73:ff:ef:c3:70:22:0f:ba: 0b:8f:31:2d:ab:dd:66:cb:91:33:b7:b0:da:ac:43: 2c:45:3b:73:ed:d5:2a:ae:43:4f:59:26:c7:fc:4c: fa:c6:bc:3a:78:db:4b:d2:94:24:56:60:68:8f:c2: a1:1f:ea:49:f4:40:6b:37:c6:cf:42:6c:59:79:15: fa:d4:6f:7c:5d:6f:7c:cb:2f:3b:f4:52:a9:d9:a4: 42:e7:ed:7b:ce:aa:29:63:40:86:47:67:18:b5:9b: 44:e7:21:b8:1a:06:5b:62:93:1b:f8:72:3f:c5:ab: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.156.0/23 IPv6: 2a00:9740::/32 Signature Algorithm: sha256WithRSAEncryption a2:ee:8d:2a:0c:6c:6d:00:48:5a:a2:03:7f:37:3b:1c:2a:22: 75:d9:8f:e9:53:27:60:09:0d:61:d4:5a:e1:49:1c:d3:7c:51: 2b:e8:dc:96:c3:2f:73:26:99:52:b9:7f:f4:d3:93:9e:ab:d8: 15:da:21:ab:20:c4:35:09:35:ee:ed:e9:d1:2a:68:3a:c9:52: a9:22:fd:fe:79:7e:24:b4:c0:00:2e:d9:dc:f1:48:01:ba:b2: 72:15:9e:2f:24:c7:c0:90:59:e0:a0:44:78:76:72:d3:15:7a: d4:ff:a9:e2:8d:42:30:dd:6b:5f:78:55:5a:72:68:67:73:a9: dd:2e:04:86:ae:5a:ab:b1:e1:f8:c0:e4:86:75:22:58:df:da: 05:9d:0e:cb:43:55:2d:14:bf:3d:fb:fb:9e:14:68:87:25:49: 0f:a8:95:43:ae:e6:60:72:f8:bd:94:0e:bb:5a:cf:01:48:e2: 60:8f:de:b0:26:f0:3c:c7:ea:f9:ee:e9:0a:4c:4b:c1:08:a3: 26:cb:b3:ca:5b:dd:c7:3a:d4:ec:84:6b:a9:08:bd:ab:01:7b: b7:66:ed:5c:4c:9e:f5:f2:47:4b:75:c9:36:af:87:71:c9:ec: b9:70:12:49:53:b2:6c:50:06:7c:30:02:f5:80:09:17:6f:34: b3:64:b5:9d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9yn7knXTuZo8TwEaL+NG8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDdlNTgyYWRjOTM2OWRhOGFlODVkZDkzNTc0MDEyMzA4MWM3ZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y+EN6etId3wqcZNbldz1xCWmpON sVPcY4JDMV45H/aham/1RdTZc22Q0ckhiaJUTrTtXLgCl/ZvG6w5xo8ana/FNaam wG6cyY9VVdpLHwEs2Vv4iSnuPadQ3503v8EXtJ+seCI0sCjvZ5K0TEMyEVNIoEHU 3UA2TbQzlWgN/eZCylMLHUibaZjvAaU5c//vw3AiD7oLjzEtq91my5Ezt7DarEMs RTtz7dUqrkNPWSbH/Ez6xrw6eNtL0pQkVmBoj8KhH+pJ9EBrN8bPQmxZeRX61G98 XW98yy879FKp2aRC5+17zqopY0CGR2cYtZtE5yG4GgZbYpMb+HI/xauKmQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFB+WCrck2naiuhd2TV0ASMIHH7tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzZlZDQz NC1jZDUxLTQxNTItYWE0My0wNTZiYWUyNzI4OGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNmVkNDM0 LWNkNTEtNDE1Mi1hYTQzLTA1NmJhZTI3Mjg4ZS8xL1VINVlLdHlUYWRxSzZGM1pO WFFCSXdnY2Z1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBLY+cMA0EAgACMAcDBQAqAJdAMA0GCSqGSIb3 DQEBCwUAA4IBAQCi7o0qDGxtAEhaogN/NzscKiJ12Y/pUydgCQ1h1FrhSRzTfFEr 6NyWwy9zJplSuX/005Oeq9gV2iGrIMQ1CTXu7enRKmg6yVKpIv3+eX4ktMAALtnc 8UgBurJyFZ4vJMfAkFngoER4dnLTFXrU/6nijUIw3WtfeFVacmhnc6ndLgSGrlqr seH4wOSGdSJY39oFnQ7LQ1UtFL89+/ueFGiHJUkPqJVDruZgcvi9lA67Ws8BSOJg j96wJvA8x+r57ukKTEvBCKMmy7PKW93HOtTshGupCL2rAXu3Zu1cTJ718kdLdck2 r4dxyey5cBJJU7JsUAZ8MAL1gAkXbzSzZLWd -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:10 2026 by rpki-client