This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer File: UHDcUgTez3q-pQcNdfoFjIrAE9U.cer (raw, json) Hash identifier: FFTRPYa9oKKAH2uXKy/3Sc9FioQU1Sz036v43le+pb4= Subject key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F0E4DC34107DF34224EAF6B4AD6C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60289 IP: 94.142.131.0/24 IP: 2a10:ffc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f0:e4:dc:34:10:7d:f3:42:24:ea:f6:b4:ad:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5070dc5204decf7abea5070d75fa058c8ac013d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a6:a9:ce:4e:92:ff:72:37:3a:38:76:d3:96: 9a:8b:66:13:6e:80:cc:6f:1d:d3:13:a5:b5:f7:b3: e8:f8:68:e2:69:3c:5c:b7:1b:f9:d1:b2:01:7f:7a: 67:26:fb:b9:d6:1b:ce:36:10:d3:ea:21:b8:90:bf: 9a:b1:c0:27:3c:da:46:f5:7e:6f:41:65:8f:fa:dc: 43:52:7d:c7:67:ed:cf:94:5e:75:4b:dc:de:74:15: 13:f2:a8:42:46:74:49:73:95:6f:ec:38:e2:7f:fa: b2:e7:fd:60:55:a6:52:f9:ee:3c:25:89:66:fd:ba: 14:77:92:ed:12:bd:85:16:20:3d:9f:2f:a0:18:29: 1f:ab:c5:65:ba:12:bb:44:3e:c3:0f:fc:da:6b:70: a5:59:95:d1:49:f1:ce:d0:1c:20:49:0a:ff:72:4f: b7:01:dd:43:8f:5b:33:f4:23:37:d7:67:4e:ba:63: fc:54:7c:52:1d:55:77:52:e2:ba:c5:53:94:4a:db: 1d:76:1d:85:69:4e:a9:ea:cf:ed:88:dc:5d:10:fc: a0:d0:dc:70:a8:fe:fd:21:78:d7:a7:a0:45:e2:b8: 1a:eb:06:4b:00:08:90:71:06:79:3e:4d:32:c3:a5: 97:3c:65:0f:b1:bd:af:a9:17:b8:a2:b6:ad:3e:41: 86:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.131.0/24 IPv6: 2a10:ffc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60289 Signature Algorithm: sha256WithRSAEncryption 03:55:06:57:14:a7:19:8e:eb:de:5f:9f:7b:46:20:70:00:be: c0:9f:70:8e:74:9e:d1:cf:8c:ae:ad:fe:b8:fc:ed:a9:d4:60: bd:65:4f:c4:52:f7:8a:63:86:8d:4a:4d:07:b0:4c:63:9e:f6: b4:d1:f6:9a:1d:e5:fb:7e:47:e9:09:6a:31:db:bd:49:72:d8: 2c:13:b9:fb:d0:a1:35:9e:a9:4b:66:f7:a1:ca:bf:e5:02:55: ce:48:27:ea:47:9b:6e:01:3f:b5:98:a7:58:03:9d:27:05:2b: f8:42:63:57:6b:68:24:3a:87:b5:9a:b1:41:7b:c9:84:1c:aa: b7:31:7a:38:b9:2c:b3:c2:2d:e1:9a:50:2f:66:14:28:62:9a: d1:27:cd:cd:18:9d:41:2b:05:41:de:65:2d:0e:ac:aa:1f:b3: 47:af:76:b7:dc:0d:44:e0:2a:cb:a4:6b:89:17:1f:33:55:ce: 93:6d:bc:83:57:34:b9:e5:41:73:fe:95:bd:01:4a:1e:b2:ee: 82:80:ac:29:05:11:5f:db:91:ca:ff:7b:75:00:7d:7b:d3:e9: ef:61:c4:4c:87:dc:c8:46:76:51:03:e8:85:86:a3:21:6c:fa: 32:3f:65:6e:9c:f3:ea:d0:0d:5e:68:52:97:df:65:64:ac:6f: 8e:38:db:2c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4ovDk3DQQffNCJOr2tK1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDcwZGM1MjA0ZGVjZjdhYmVhNTA3MGQ3NWZhMDU4YzhhYzAxM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56apzk6S/3I3Ojh205aai2YTboDM bx3TE6W197Po+GjiaTxctxv50bIBf3pnJvu51hvONhDT6iG4kL+ascAnPNpG9X5v QWWP+txDUn3HZ+3PlF51S9zedBUT8qhCRnRJc5Vv7Djif/qy5/1gVaZS+e48JYlm /boUd5LtEr2FFiA9ny+gGCkfq8VluhK7RD7DD/zaa3ClWZXRSfHO0BwgSQr/ck+3 Ad1Dj1sz9CM312dOumP8VHxSHVV3UuK6xVOUStsddh2FaU6p6s/tiNxdEPyg0Nxw qP79IXjXp6BF4rga6wZLAAiQcQZ5Pk0yw6WXPGUPsb2vqRe4oratPkGG7wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFBw3FIE3s96vqUHDXX6BYyKwBPVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2EyOGI1 Yy04OGQ3LTRhZDQtOWUxZC04YWMxN2U5YzQwZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvYTI4YjVj LTg4ZDctNGFkNC05ZTFkLThhYzE3ZTljNDBkYi8xL1VIRGNVZ1RlejNxLXBRY05k Zm9GaklyQUU5VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXo6DMA0EAgACMAcDBQMqEP/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDrgTANBgkqhkiG9w0BAQsFAAOCAQEAA1UGVxSnGY7r 3l+fe0YgcAC+wJ9wjnSe0c+Mrq3+uPztqdRgvWVPxFL3imOGjUpNB7BMY572tNH2 mh3l+35H6QlqMdu9SXLYLBO5+9ChNZ6pS2b3ocq/5QJVzkgn6kebbgE/tZinWAOd JwUr+EJjV2toJDqHtZqxQXvJhByqtzF6OLkss8It4ZpQL2YUKGKa0SfNzRidQSsF Qd5lLQ6sqh+zR692t9wNROAqy6RriRcfM1XOk228g1c0ueVBc/6VvQFKHrLugoCs KQURX9uRyv97dQB9e9Pp72HETIfcyEZ2UQPohYajIWz6Mj9lbpzz6tANXmhSl99l ZKxvjjjbLA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:49 2026 by rpki-client