This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer File: UioivM096CZa_VX5gw_8Acg69yY.cer (raw, json) Hash identifier: D+QXPfv75eYaHP9FlnJCukY6RHAsRrjUSBxp2c/Js14= Subject key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3851742628403F9E4881D27E693DF4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.136.44.0/22 IP: 153.55.176.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:51:74:26:28:40:3f:9e:48:81:d2:7e:69:3d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=522a22bccd3de8265afd55f9830ffc01c83af726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7e:b6:03:41:eb:d1:6a:dc:e0:72:9f:b8:30: 24:df:18:dd:d6:ca:d4:91:83:a0:00:48:12:1c:44: 7b:2a:d0:0a:6d:ef:5b:5c:2d:4b:ad:ae:b6:2d:dd: 4f:a0:f6:03:68:0b:9b:fb:57:c3:f8:f9:7c:e0:a0: 0b:0c:86:31:6e:f2:e4:7e:13:41:71:fb:54:0d:e5: 8c:41:21:cf:51:c9:79:af:2a:47:ff:15:d0:27:15: a5:15:2f:cd:c6:95:3c:37:24:fe:64:28:96:69:eb: ca:f0:6c:97:9c:a6:87:e5:84:c1:ae:f5:12:df:47: 33:8a:54:71:98:33:95:c6:3c:c0:85:c7:50:a4:c6: 83:c1:12:76:39:96:0f:c0:a0:e6:15:0f:8e:de:b4: 3e:0a:83:47:54:3e:f5:59:f5:75:c8:5e:1e:69:10: 2c:f6:7c:4e:c9:6e:ab:bd:24:0b:cc:90:a1:42:21: 66:e5:05:02:01:bc:ef:a5:d5:ee:84:7d:94:03:0e: 52:9f:6f:af:d2:6e:92:36:ac:cc:46:ee:d1:0d:b3: 7c:e3:8b:3e:0e:65:c0:e5:a7:cf:74:c1:97:27:d0: 20:c1:56:6f:15:ab:bd:4a:41:88:f6:44:b8:f4:72: 6e:fd:65:16:b4:f3:98:5e:ba:50:04:77:a5:c7:f1: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.44.0/22 153.55.176.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:7b:72:ef:b3:b2:53:39:4c:91:c5:93:9c:15:64:5d:62:88: 62:67:95:32:dc:30:68:78:d0:61:65:12:c8:fa:a0:d7:53:58: 89:58:58:05:f4:81:34:08:71:7d:2b:30:cb:8c:33:26:c5:e1: b2:66:12:87:6f:06:73:fa:f0:af:8e:a9:5f:28:72:45:45:e0: 35:e0:35:9b:48:5f:67:be:e1:4b:0f:de:d7:f9:ce:f1:38:ae: d5:2c:00:e4:c6:82:38:8d:4d:14:48:84:f2:4d:12:66:dc:7a: 1c:e9:d2:e2:86:bb:ed:23:1b:01:ec:c0:01:21:1b:e2:bf:2a: 12:a2:67:a1:35:4f:d1:7d:9d:61:3e:aa:27:4b:8e:a3:60:24: a3:b2:7c:e3:ee:1d:bf:28:6d:64:b9:9e:52:4b:3e:0e:80:bc: 42:5e:31:2b:5e:2e:9b:e7:f8:c7:2b:8e:14:fb:06:67:23:99: 1d:18:02:3f:64:ab:9e:f7:b2:2a:a8:cc:66:d6:95:7f:34:4c: 6a:b1:30:9d:80:ae:f6:07:fa:b8:7d:75:7f:ae:3f:cf:cd:55: cf:c5:1a:4e:e3:7f:af:9d:4d:2e:da:f6:b7:2e:d2:48:0b:49: c4:4c:a1:3a:33:e4:c1:85:49:b0:55:3c:b7:95:0a:62:e0:6c: c6:fe:c9:37 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt+OFF0JihAP55IgdJ+aT30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjJhMjJiY2NkM2RlODI2NWFmZDU1Zjk4MzBmZmMwMWM4M2FmNzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X62A0Hr0Wrc4HKfuDAk3xjd1srU kYOgAEgSHER7KtAKbe9bXC1Lra62Ld1PoPYDaAub+1fD+Pl84KALDIYxbvLkfhNB cftUDeWMQSHPUcl5rypH/xXQJxWlFS/NxpU8NyT+ZCiWaevK8GyXnKaH5YTBrvUS 30czilRxmDOVxjzAhcdQpMaDwRJ2OZYPwKDmFQ+O3rQ+CoNHVD71WfV1yF4eaRAs 9nxOyW6rvSQLzJChQiFm5QUCAbzvpdXuhH2UAw5Sn2+v0m6SNqzMRu7RDbN844s+ DmXA5afPdMGXJ9AgwVZvFau9SkGI9kS49HJu/WUWtPOYXrpQBHelx/EpawIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFFIqIrzNPegmWv1V+YMP/AHIOvcmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzFlNDc2 MC1jNTQ2LTRiZWMtYTYzNS1mZjM3MjNlNzhiZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvMWU0NzYw LWM1NDYtNGJlYy1hNjM1LWZmMzcyM2U3OGJkMy8xL1Vpb2l2TTA5NkNaYV9WWDVn d184QWNnNjl5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLYgsAwQEmTewMA0GCSqGSIb3DQEBCwUAA4IB AQBve3Lvs7JTOUyRxZOcFWRdYohiZ5Uy3DBoeNBhZRLI+qDXU1iJWFgF9IE0CHF9 KzDLjDMmxeGyZhKHbwZz+vCvjqlfKHJFReA14DWbSF9nvuFLD97X+c7xOK7VLADk xoI4jU0USITyTRJm3Hoc6dLihrvtIxsB7MABIRvivyoSomehNU/RfZ1hPqonS46j YCSjsnzj7h2/KG1kuZ5SSz4OgLxCXjErXi6b5/jHK44U+wZnI5kdGAI/ZKue97Iq qMxm1pV/NExqsTCdgK72B/q4fXV/rj/PzVXPxRpO43+vnU0u2va3LtJIC0nETKE6 M+TBhUmwVTy3lQpi4GzG/sk3 -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:44 2026 by rpki-client