This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer File: UJw4zD6qNVb6OaIvMNwbpINv6J8.cer (raw, json) Hash identifier: 3r62rq2iwh3irQoxl1gs9J57h71NCnvl/dPQvmWwpc4= Subject key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2A55435285D5E3D710B6EB4A7A802 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.139.36.0/22 IP: 2a07:1300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a5:54:35:28:5d:5e:3d:71:0b:6e:b4:a7:a8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:3d:1f:fa:ff:2c:c1:fe:1c:e7:28:9c:01: 21:60:19:dd:81:95:48:57:8f:41:ac:8d:c1:5c:0b: 1f:c6:b7:a8:3c:cf:a2:8c:f9:8d:e5:6a:61:93:91: ac:50:d9:32:86:06:17:38:84:20:97:53:b3:27:61: a1:fe:5c:ad:b2:5d:0b:c9:39:cf:9b:57:5c:61:cf: 93:16:d0:12:a7:1d:eb:69:ef:f8:14:ae:ca:03:40: a4:02:cb:76:c2:fa:73:19:a3:a0:0f:e2:a6:df:6a: 21:26:1f:7a:10:8b:d6:42:16:58:06:06:72:2b:30: 73:68:b1:ee:74:59:30:bb:72:3b:11:34:87:43:8e: d1:06:98:ea:45:5d:38:1c:f0:14:dd:03:cf:da:60: e6:5c:05:db:ac:b6:25:ee:50:d7:1e:44:3d:9f:6c: 9c:71:5f:25:ed:6c:ab:37:f8:81:82:b3:05:ea:13: c5:6b:2c:90:4e:90:ff:1d:97:4e:cf:a3:a4:c6:9f: 2b:a8:89:cb:2b:bb:b8:bf:0b:07:10:50:5d:e3:00: b5:2f:97:61:bc:77:a1:27:57:31:5e:dc:0e:7a:73: 4b:5f:77:de:07:65:f4:9c:09:be:90:8b:24:d6:5e: d8:fd:0a:23:99:b5:7f:bd:34:7a:58:b4:db:7a:72: 3f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.36.0/22 IPv6: 2a07:1300::/29 Signature Algorithm: sha256WithRSAEncryption ab:a8:a8:8c:d1:7b:9f:cd:df:cf:82:4f:7a:9b:75:eb:ea:3a: b9:a8:f6:ea:6f:1f:60:7f:ea:2d:83:87:f8:30:74:04:95:83: 20:04:f1:e0:8f:c5:c7:47:14:04:7b:e2:da:2e:c2:60:63:93: de:d1:64:b6:84:db:94:86:d8:62:9b:60:fd:40:86:15:ea:ff: c1:5a:34:2e:14:51:d8:f1:d7:d5:49:f4:61:38:e6:85:82:c6: db:e5:d8:57:27:92:3b:61:45:c8:d8:a4:a0:3f:07:74:a0:89: d2:ad:6d:22:68:46:66:67:28:f5:8c:ae:06:85:ea:f2:86:2b: 4c:13:4f:fe:9b:44:58:e3:d3:de:a1:a0:1a:fa:9b:8d:8d:e8: b9:68:2a:f1:3d:03:33:e2:68:cb:73:d7:fe:b0:85:6f:df:ad: ae:5a:15:d5:1c:b1:d2:ca:bb:1d:c6:d2:18:8f:ca:92:58:3d: 54:13:21:8e:86:85:d7:19:60:da:14:80:20:38:98:4e:33:36: 3b:44:e1:37:ca:a4:13:e9:67:0c:7e:63:8e:32:30:77:7e:f6: b2:2b:ec:45:84:00:95:88:c7:30:7a:df:5a:e1:f7:39:4b:40: 97:b7:2a:7b:66:ba:98:e9:f8:93:31:bd:61:ac:90:06:6c:5d: e0:45:13:2b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/8qVUNShdXj1xC260p6gCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDljMzhjYzNlYWEzNTU2ZmEzOWEyMmYzMGRjMWJhNDgzNmZlODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvY9H/r/LMH+HOconAEhYBndgZVI V49BrI3BXAsfxreoPM+ijPmN5Wphk5GsUNkyhgYXOIQgl1OzJ2Gh/lytsl0LyTnP m1dcYc+TFtASpx3rae/4FK7KA0CkAst2wvpzGaOgD+Km32ohJh96EIvWQhZYBgZy KzBzaLHudFkwu3I7ETSHQ47RBpjqRV04HPAU3QPP2mDmXAXbrLYl7lDXHkQ9n2yc cV8l7WyrN/iBgrMF6hPFayyQTpD/HZdOz6Okxp8rqInLK7u4vwsHEFBd4wC1L5dh vHehJ1cxXtwOenNLX3feB2X0nAm+kIsk1l7Y/QojmbV/vTR6WLTbenI/RwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFCcOMw+qjVW+jmiLzDcG6SDb+ifMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxL2ZiMDBl Yy1iYWJkLTQxNzItOGQ0ZC0yYTY0Zjk5YmFmNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZmIwMGVj LWJhYmQtNDE3Mi04ZDRkLTJhNjRmOTliYWY1Zi8xL1VKdzR6RDZxTlZiNk9hSXZN TndicElOdjZKOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYskMA0EAgACMAcDBQMqBxMAMA0GCSqGSIb3 DQEBCwUAA4IBAQCrqKiM0Xufzd/Pgk96m3Xr6jq5qPbqbx9gf+otg4f4MHQElYMg BPHgj8XHRxQEe+LaLsJgY5Pe0WS2hNuUhthim2D9QIYV6v/BWjQuFFHY8dfVSfRh OOaFgsbb5dhXJ5I7YUXI2KSgPwd0oInSrW0iaEZmZyj1jK4GheryhitME0/+m0RY 49PeoaAa+puNjei5aCrxPQMz4mjLc9f+sIVv362uWhXVHLHSyrsdxtIYj8qSWD1U EyGOhoXXGWDaFIAgOJhOMzY7ROE3yqQT6WcMfmOOMjB3fvayK+xFhACViMcwet9a 4fc5S0CXtyp7ZrqY6fiTMb1hrJAGbF3gRRMr -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:48 2026 by rpki-client