This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer File: UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer (raw, json) Hash identifier: 5IW7QUZS49dMuFtyd12E0f81yHQBlIgFNI3n/9VSGnQ= Subject key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A32F9F403D393C4A0CDD852DDD3A5A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208989 IP: 45.12.8.0/22 IP: 2a10:7140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2f:9f:40:3d:39:3c:4a:0c:dd:85:2d:dd:3a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:cf:16:0b:45:c9:a7:ec:67:22:1d:1c:eb: 33:8f:1f:53:8f:bd:31:7d:c8:6b:92:53:99:92:28: 25:65:de:e7:f4:e1:a4:06:c8:95:83:db:c5:d3:9e: 58:e4:29:e6:d2:f6:83:3a:7e:b5:16:d4:aa:83:04: 0f:2c:e8:e7:0f:c0:a0:0f:3d:ca:b9:43:0d:ec:0b: 8c:ad:51:23:37:6e:c6:c0:ec:07:8d:31:1f:37:35: 7e:a0:ed:09:76:72:f4:22:4c:87:94:5d:07:cd:f4: 80:19:ac:e9:31:af:fe:e8:b5:0d:84:1b:c5:f6:85: be:e0:23:63:c2:41:d9:69:14:9c:7c:4c:d8:a8:8d: 15:2a:12:a2:db:05:d3:14:dd:67:8b:9c:cd:b7:99: fb:71:d8:fd:ac:69:24:78:79:bd:70:4f:ed:5f:54: f7:6b:9d:1e:d0:36:df:a7:51:02:aa:fc:7a:52:30: 06:69:ea:e2:3a:46:35:bb:4c:ce:9a:6a:b3:63:86: 78:08:ac:07:09:f2:e3:43:33:62:2b:d8:f4:f8:e8: 66:15:50:e6:39:37:3b:9a:a4:b1:78:17:ca:f1:32: ec:de:39:51:6c:ec:a2:9e:df:79:27:c9:12:3d:0a: ea:7a:37:f5:23:39:60:87:83:d2:77:6a:9d:5f:f4: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.8.0/22 IPv6: 2a10:7140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208989 Signature Algorithm: sha256WithRSAEncryption 35:24:0c:42:a9:54:02:1b:9d:ad:37:21:15:1f:04:02:b9:62: 01:a7:b6:a8:3f:3c:e2:cb:dc:11:77:40:ee:1a:56:3a:85:71: 35:2a:1c:8e:ad:d1:a6:c8:8b:96:95:6f:22:83:83:46:4f:ad: 4f:fc:3d:3b:29:2d:d9:bf:97:3d:b5:7d:18:7d:68:ce:5a:ce: 49:d2:f5:a5:13:94:e5:1e:0c:f8:fa:68:6c:30:ba:b2:9b:7c: 67:ea:98:e6:ec:a0:a3:ba:9a:86:6f:99:cf:20:31:6d:e2:c8: 2f:92:83:41:9b:7a:c4:94:e5:f0:64:e1:a8:6a:3f:5d:91:b3: cb:fc:9c:77:94:05:e1:da:87:ef:bd:aa:3a:67:50:38:d1:b8: 92:13:75:92:8d:a0:37:54:cd:16:e7:25:de:6c:44:4a:bc:de: ee:80:0e:d8:34:69:e1:79:8d:19:ff:55:d2:21:d7:73:c0:13: 67:f8:d4:b4:59:4b:21:8f:31:cb:72:ab:c8:90:e8:e6:05:50: 28:fd:09:6d:ae:77:47:1a:d5:d2:08:54:2c:c2:d6:f6:45:1c: d3:b5:4e:ae:16:f6:fc:f3:a4:f9:02:19:2b:00:97:96:ab:55: a8:dd:dc:be:f5:d6:3e:fd:d0:d6:b0:d0:fb:b4:8d:48:dd:aa: 78:71:73:cc -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4oy+fQD05PEoM3YUt3TpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjMyZDQ0ZDllMDhjODczZGIzNWMwMjE1MWNhNDRhZTU0YjRiOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9PPFgtFyafsZyIdHOszjx9Tj70x fchrklOZkiglZd7n9OGkBsiVg9vF055Y5Cnm0vaDOn61FtSqgwQPLOjnD8CgDz3K uUMN7AuMrVEjN27GwOwHjTEfNzV+oO0JdnL0IkyHlF0HzfSAGazpMa/+6LUNhBvF 9oW+4CNjwkHZaRScfEzYqI0VKhKi2wXTFN1ni5zNt5n7cdj9rGkkeHm9cE/tX1T3 a50e0Dbfp1ECqvx6UjAGaeriOkY1u0zOmmqzY4Z4CKwHCfLjQzNiK9j0+OhmFVDm OTc7mqSxeBfK8TLs3jlRbOyint95J8kSPQrqejf1Izlgh4PSd2qdX/RmZwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFIy1E2eCMhz2zXAIVHKRK5UtLivMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzhiNDAw ZC0xZThlLTQwZGEtYjFkNi1hNjU0MWNlYjFlNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvOGI0MDBk LTFlOGUtNDBkYS1iMWQ2LWE2NTQxY2ViMWU0My8xL1VqTFVUWjRJeUhQYk5jQWhV Y3BFcmxTMHVLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQwIMA0EAgACMAcDBQMqEHFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwXTANBgkqhkiG9w0BAQsFAAOCAQEANSQMQqlUAhud rTchFR8EArliAae2qD884svcEXdA7hpWOoVxNSocjq3RpsiLlpVvIoODRk+tT/w9 Oykt2b+XPbV9GH1ozlrOSdL1pROU5R4M+PpobDC6spt8Z+qY5uygo7qahm+ZzyAx beLIL5KDQZt6xJTl8GThqGo/XZGzy/ycd5QF4dqH772qOmdQONG4khN1ko2gN1TN Fucl3mxESrze7oAO2DRp4XmNGf9V0iHXc8ATZ/jUtFlLIY8xy3KryJDo5gVQKP0J ba53RxrV0ghULMLW9kUc07VOrhb2/POk+QIZKwCXlqtVqN3cvvXWPv3Q1rDQ+7SN SN2qeHFzzA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:15 2026 by rpki-client