This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer (raw, json) Hash identifier: pEHlCKl2E9iNIiYezUFscQWTmHoyXrkjlQzezWA2bKI= Subject key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F838D19A234B64645E49EBD76109664 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203568 IP: 92.243.76.0/22 IP: 185.130.156.0/22 IP: 185.214.220.0/22 IP: 2a07:6a80::/29 IP: 2a0d:d5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8d:19:a2:34:b6:46:45:e4:9e:bd:76:10:96:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ab:ac:28:b7:7d:2a:67:9f:08:55:a7:13:5a: 3c:82:9b:60:f3:e7:c2:de:1f:e5:a3:25:91:ca:43: 3d:0f:be:91:b5:0a:05:e3:09:9f:f2:aa:24:ea:96: c1:dd:30:59:fc:79:8d:9a:79:68:91:b9:5b:11:5a: be:c6:e4:f8:f8:fe:26:36:4f:4a:7b:93:04:ef:1a: 62:3d:f6:fc:05:f5:6c:69:04:a1:c0:3d:77:9d:c2: 12:38:05:e5:28:bf:2f:4c:4f:08:22:6f:60:26:48: 14:85:9e:b3:b0:8c:6a:09:30:b2:fa:66:1d:0f:25: f6:ff:60:4a:b0:09:94:5f:7e:3d:1b:10:32:ac:fa: 4f:a0:16:9f:1f:f0:75:2e:f8:c1:f5:e0:ad:e5:bb: e5:01:f4:35:83:d1:75:c3:70:9f:6d:c1:06:a2:ed: b0:eb:98:37:0e:3c:84:bd:95:12:76:3f:01:c2:73: 51:25:3d:11:8c:db:ab:11:8b:e6:27:f5:f5:28:10: 54:9d:05:d5:4d:61:de:10:93:48:b5:4c:2b:d0:77: d6:c6:e0:8d:da:a8:1a:d2:e7:c2:ce:2d:f1:78:4e: 0f:36:76:53:ee:aa:a1:3b:f1:6d:ab:ef:48:b0:b3: 13:47:db:03:b6:0d:3a:fa:80:63:32:bb:07:c1:e3: 2d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.243.76.0/22 185.130.156.0/22 185.214.220.0/22 IPv6: 2a07:6a80::/29 2a0d:d5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203568 Signature Algorithm: sha256WithRSAEncryption 8b:44:4b:18:ba:85:f4:12:58:68:ab:2d:e7:bb:68:56:ab:e0: 5e:9c:0d:f6:46:29:3e:b5:ae:b5:bc:c0:9e:c6:ce:24:17:39: c2:86:f1:6c:bd:e9:e9:74:5d:a9:a4:c4:11:ac:01:be:95:05: ad:c3:56:00:58:2c:7f:73:3a:78:a8:0e:26:a5:47:57:8e:b3: b3:3c:63:fe:fb:4a:99:2d:b1:e1:b0:fe:9d:1d:97:ab:59:f0: 61:ba:8a:6a:db:c9:1c:75:e3:95:e6:05:1a:c7:5f:42:a4:40: 01:b5:78:77:b7:af:ab:48:b4:32:c5:5b:f8:c3:fb:c7:23:71: 05:d3:cc:6e:bf:49:f6:39:41:88:0a:ae:cd:14:44:0c:74:ab: fa:7c:26:83:fb:d0:eb:6a:c1:cb:cd:52:17:10:34:af:dd:35: c0:01:15:53:29:dd:c3:73:6c:b6:a9:c7:4a:11:81:9d:9e:4c: da:cb:e4:2d:28:62:3b:79:ba:d8:13:1e:11:96:ee:b4:b4:d9: 2c:17:7d:5d:c2:b4:8e:4b:90:90:42:91:c3:f3:9f:99:0a:09: 35:89:03:d4:3a:6a:6f:d0:bd:21:f5:0f:b5:75:80:b5:ff:9f: 40:f3:62:c9:d8:bc:1f:ef:92:e0:ab:61:cf:24:02:78:9e:53: 8d:e1:3a:1e -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt/g40ZojS2RkXknr12EJZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDlmMzkxZjI5ZDkyMDc4YmE2ZTJjNzZmYWEyZjhhZTk0NzM0M2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36usKLd9KmefCFWnE1o8gptg8+fC 3h/loyWRykM9D76RtQoF4wmf8qok6pbB3TBZ/HmNmnlokblbEVq+xuT4+P4mNk9K e5ME7xpiPfb8BfVsaQShwD13ncISOAXlKL8vTE8IIm9gJkgUhZ6zsIxqCTCy+mYd DyX2/2BKsAmUX349GxAyrPpPoBafH/B1LvjB9eCt5bvlAfQ1g9F1w3CfbcEGou2w 65g3DjyEvZUSdj8BwnNRJT0RjNurEYvmJ/X1KBBUnQXVTWHeEJNItUwr0HfWxuCN 2qga0ufCzi3xeE4PNnZT7qqhO/Ftq+9IsLMTR9sDtg06+oBjMrsHweMt0wIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFFCfOR8p2SB4um4sdvqi+K6Uc0PmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2Q1ZGQx YS03YjU5LTQ0MzUtYWJkZi0yOGQwZjIwMmUzNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZDVkZDFh LTdiNTktNDQzNS1hYmRmLTI4ZDBmMjAyZTM2ZC8xL1VKODVIeW5aSUhpNmJpeDIt cUw0cnBSelEtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCXPNMAwQCuYKcAwQCudbcMBQEAgACMA4DBQMq B2qAAwUDKg3VwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDGzAwDQYJKoZIhvcN AQELBQADggEBAItESxi6hfQSWGirLee7aFar4F6cDfZGKT61rrW8wJ7GziQXOcKG 8Wy96el0XamkxBGsAb6VBa3DVgBYLH9zOnioDialR1eOs7M8Y/77SpktseGw/p0d l6tZ8GG6imrbyRx145XmBRrHX0KkQAG1eHe3r6tItDLFW/jD+8cjcQXTzG6/SfY5 QYgKrs0URAx0q/p8JoP70OtqwcvNUhcQNK/dNcABFVMp3cNzbLapx0oRgZ2eTNrL 5C0oYjt5utgTHhGW7rS02SwXfV3CtI5LkJBCkcPzn5kKCTWJA9Q6am/QvSH1D7V1 gLX/n0DzYsnYvB/vkuCrYc8kAnieU43hOh4= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:38 2026 by rpki-client