This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer (raw, json) Hash identifier: +zVzDFOnEJIJlLhS7zp4wNB5wvWFHKmutGGg8RUO0bI= Subject key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECBC6C09CAA28FD9D33C305A63C1BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204515 IP: 185.230.76.0/22 IP: 2a0c:700::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:bc:6c:09:ca:a2:8f:d9:d3:3c:30:5a:63:c1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:e1:f8:87:84:06:5a:1b:84:42:d4:f9:19: fd:a0:6d:e5:57:12:b4:40:26:5f:ff:a6:2f:1f:30: 71:1e:23:96:9e:84:22:3a:7b:3b:a9:a3:d7:0d:9f: 22:61:78:fa:19:58:23:2f:7d:f6:33:c0:6f:42:b5: a3:e4:0a:32:0d:e1:50:46:98:f9:57:3b:38:3e:1f: 3f:a1:4c:bb:f9:3d:f9:76:6e:7c:70:84:fc:63:ce: 3a:13:e9:66:6f:ef:8f:23:8a:57:11:e4:98:31:d0: 45:0d:31:62:cf:29:9e:db:e2:47:a1:d5:cf:71:aa: 39:18:76:77:80:53:5f:19:ea:ce:a4:c8:4d:41:70: e0:af:d6:e6:20:a8:01:58:cf:a6:c2:8a:88:4b:7e: 90:8e:fd:7e:1e:10:1d:99:92:0e:d7:ef:b5:73:1c: a4:ce:d7:91:1d:70:0d:17:b4:e9:c0:3b:22:18:09: 0b:f2:d5:1b:2a:7d:39:e5:4d:9e:70:b8:0c:7c:1a: 3e:fc:f1:55:c8:18:8b:12:64:b6:06:44:d4:a3:8a: 3a:c7:84:3b:a4:1e:ac:e5:31:37:83:1e:a6:9f:98: 42:41:c2:d6:ec:b2:25:3c:bd:c4:e1:54:ab:90:1b: 38:c2:c0:b3:dd:1e:a3:d7:f7:c4:e1:03:17:91:b9: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.76.0/22 IPv6: 2a0c:700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204515 Signature Algorithm: sha256WithRSAEncryption 93:66:dc:b2:ae:c8:96:3c:c0:35:a6:fc:b0:33:7c:15:b3:8b: 40:ca:35:3a:6f:af:5f:41:30:76:09:54:99:a6:75:95:f2:aa: a9:9a:bd:75:3b:53:6a:70:21:bd:ec:cc:a5:45:74:bd:c3:a0: 44:77:2d:a2:09:38:ca:5c:76:1f:80:28:4e:03:5c:02:e6:b1: eb:aa:f1:3d:c6:48:2b:c0:0f:52:95:58:93:79:71:55:7c:54: 11:ef:25:56:d2:8d:7a:50:49:8a:d9:30:06:7d:74:1e:e8:70: e3:2d:7c:3e:28:4c:3d:12:b6:cb:81:33:1b:6e:58:41:2b:0a: b4:32:78:bf:bd:ca:5b:bd:56:55:80:ab:66:fd:2b:5b:9f:2f: ea:d8:81:aa:94:93:5e:28:07:a0:f4:63:6f:ba:82:00:e2:3d: e1:f1:b0:8b:1b:51:f0:43:83:36:7f:cc:71:56:a8:16:35:32: 51:a2:d4:54:26:8e:ca:57:31:ce:85:4d:75:ca:37:f5:f8:c7: 01:59:bf:46:f7:33:58:64:4c:86:71:95:d2:f6:e8:ad:f8:d1: 2e:72:1d:61:02:c4:25:64:d2:7a:d3:41:34:72:e8:c6:6b:3e: 70:ac:2a:a5:00:92:29:8d:b8:91:1b:10:30:8d:b8:fe:36:85: 66:83:7c:a9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57LxsCcqij9nTPDBaY8G6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjRlNWY3OTYxMjI1ZmJmZTM0MWY2YmZkNmJlOGUxYTIxZWY4YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Ph+IeEBlobhELU+Rn9oG3lVxK0 QCZf/6YvHzBxHiOWnoQiOns7qaPXDZ8iYXj6GVgjL332M8BvQrWj5AoyDeFQRpj5 Vzs4Ph8/oUy7+T35dm58cIT8Y846E+lmb++PI4pXEeSYMdBFDTFizyme2+JHodXP cao5GHZ3gFNfGerOpMhNQXDgr9bmIKgBWM+mwoqIS36Qjv1+HhAdmZIO1++1cxyk zteRHXANF7TpwDsiGAkL8tUbKn055U2ecLgMfBo+/PFVyBiLEmS2BkTUo4o6x4Q7 pB6s5TE3gx6mn5hCQcLW7LIlPL3E4VSrkBs4wsCz3R6j1/fE4QMXkbnnTQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFJOX3lhIl+/40H2v9a+jhoh74wPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzljNjU0 Ni01ODExLTQxOTQtYmZlYi0yYWI5MDQ2ZWJjMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvOWM2NTQ2 LTU4MTEtNDE5NC1iZmViLTJhYjkwNDZlYmMxMS8xL1VrNWZlV0VpWDdfalFmYV8x cjZPR2lIdmpBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCueZMMA0EAgACMAcDBQAqDAcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMe4zANBgkqhkiG9w0BAQsFAAOCAQEAk2bcsq7IljzA Nab8sDN8FbOLQMo1Om+vX0EwdglUmaZ1lfKqqZq9dTtTanAhvezMpUV0vcOgRHct ogk4ylx2H4AoTgNcAuax66rxPcZIK8APUpVYk3lxVXxUEe8lVtKNelBJitkwBn10 Huhw4y18PihMPRK2y4EzG25YQSsKtDJ4v73KW71WVYCrZv0rW58v6tiBqpSTXigH oPRjb7qCAOI94fGwixtR8EODNn/McVaoFjUyUaLUVCaOylcxzoVNdco39fjHAVm/ RvczWGRMhnGV0vborfjRLnIdYQLEJWTSetNBNHLoxms+cKwqpQCSKY24kRsQMI24 /jaFZoN8qQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:26 2026 by rpki-client