This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer File: UkEeUtq30L4mdDE7a10udL0RNg4.cer (raw, json) Hash identifier: +7Mahr+Jl9mqApVZ2QgJ9hkgKCSx65fwGRi1YdAewXc= Subject key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED5E74E399EB4BB1A2E05F362DA791 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 217.198.189.0/24 IP: 2a11:ffc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5e:74:e3:99:eb:4b:b1:a2:e0:5f:36:2d:a7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d9:c8:25:ad:05:5e:63:87:ae:ee:0c:cd:31: 6b:ed:db:50:c4:01:9b:17:9d:9e:1d:44:0e:13:6f: cb:98:a8:40:dd:8a:f3:f7:a0:4f:73:d3:32:8a:26: ca:ac:fb:17:83:b3:03:e4:9f:d6:6e:e1:b6:7e:6d: 45:46:ac:5c:d3:2e:90:c3:2d:b4:18:9d:7c:7b:eb: 4c:ff:9e:7f:e5:55:81:e7:94:05:f5:91:42:af:4f: 74:20:08:64:ed:98:16:08:35:a3:63:7f:8a:c6:7f: ce:3b:3a:1a:b9:10:c3:9f:c7:d2:f2:92:6b:76:a8: 9d:d9:0e:e4:8f:ca:0d:24:5c:d9:e4:07:e3:c9:0b: 6c:72:df:19:c9:4d:c2:7f:89:29:fb:80:a8:0c:e8: 3f:a2:5b:cb:7e:13:5e:91:4f:85:e9:49:29:7c:99: 91:8b:87:2b:fb:92:7f:9d:c9:18:cc:c4:42:53:19: ef:a9:62:08:69:8f:f7:7b:38:8b:c1:84:ed:19:ce: 46:e9:fa:5c:47:be:1c:05:fe:66:36:11:09:eb:6c: 6c:1c:03:87:29:ca:a4:f8:c4:33:c2:6e:3c:ae:70: 78:e4:eb:ac:ca:6b:9f:31:65:6d:52:80:1b:2b:28: 3a:8d:bb:7e:1a:38:ba:a9:e2:6e:00:12:a1:ab:dd: e4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.198.189.0/24 IPv6: 2a11:ffc0::/29 Signature Algorithm: sha256WithRSAEncryption 38:8d:45:45:b0:19:61:fa:7a:11:6c:87:49:80:fe:85:01:3c: 71:76:be:95:0b:d5:6d:d9:80:9c:ca:45:76:14:8b:14:1a:5e: 96:fd:c9:98:38:a1:35:d1:ae:b0:db:99:11:f2:0c:35:26:ff: 7f:a3:5b:b2:f7:00:55:92:24:ba:8c:ca:d9:64:44:ea:6c:19: 1d:4f:e7:cb:10:2a:06:91:67:30:a1:c6:ec:b9:56:7d:91:cd: 8b:6d:ae:6f:53:81:12:44:99:1d:d7:59:c8:ee:4b:1b:10:75: 3e:c1:24:54:f7:e8:9e:4f:e4:55:e2:6f:eb:57:bc:4c:9d:b9: 49:a0:0d:ea:82:b2:42:f1:a5:85:bb:7d:2d:76:72:75:2d:47: 49:c4:8f:15:57:88:09:a9:b1:e3:03:db:e8:ec:38:bb:43:9e: fd:48:2d:cd:ad:5b:d1:87:85:b2:53:38:5a:99:3f:a2:08:d9: 18:f3:97:d2:75:02:80:0d:15:23:d1:77:1c:cc:7c:17:38:62: fb:24:f1:9d:1a:02:47:bb:3f:b5:bc:6f:2c:aa:f8:0e:34:1f: 29:15:f4:55:31:19:c3:95:ef:bd:64:6b:72:95:4c:89:be:80: f5:5a:dc:7e:13:9d:c8:df:c2:02:61:b6:91:4d:63:61:a4:61: ba:19:9c:86 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87V5045nrS7Gi4F82LaeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjQxMWU1MmRhYjdkMGJlMjY3NDMxM2I2YjVkMmU3NGJkMTEzNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNnIJa0FXmOHru4MzTFr7dtQxAGb F52eHUQOE2/LmKhA3Yrz96BPc9MyiibKrPsXg7MD5J/WbuG2fm1FRqxc0y6Qwy20 GJ18e+tM/55/5VWB55QF9ZFCr090IAhk7ZgWCDWjY3+Kxn/OOzoauRDDn8fS8pJr dqid2Q7kj8oNJFzZ5AfjyQtsct8ZyU3Cf4kp+4CoDOg/olvLfhNekU+F6UkpfJmR i4cr+5J/nckYzMRCUxnvqWIIaY/3eziLwYTtGc5G6fpcR74cBf5mNhEJ62xsHAOH Kcqk+MQzwm48rnB45OusymufMWVtUoAbKyg6jbt+Gji6qeJuABKhq93kgQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFJBHlLat9C+JnQxO2tdLnS9ETYOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzliMWQ4 NS03MTk4LTRhZjYtYTYzMi1kMGNmZTQzMDE2ZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOWIxZDg1 LTcxOTgtNGFmNi1hNjMyLWQwY2ZlNDMwMTZkZS8xL1VrRWVVdHEzMEw0bWRERTdh MTB1ZEwwUk5nNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA2ca9MA0EAgACMAcDBQMqEf/AMA0GCSqGSIb3 DQEBCwUAA4IBAQA4jUVFsBlh+noRbIdJgP6FATxxdr6VC9Vt2YCcykV2FIsUGl6W /cmYOKE10a6w25kR8gw1Jv9/o1uy9wBVkiS6jMrZZETqbBkdT+fLECoGkWcwocbs uVZ9kc2Lba5vU4ESRJkd11nI7ksbEHU+wSRU9+ieT+RV4m/rV7xMnblJoA3qgrJC 8aWFu30tdnJ1LUdJxI8VV4gJqbHjA9vo7Di7Q579SC3NrVvRh4WyUzhamT+iCNkY 85fSdQKADRUj0XcczHwXOGL7JPGdGgJHuz+1vG8sqvgONB8pFfRVMRnDle+9ZGty lUyJvoD1Wtx+E53I38ICYbaRTWNhpGG6GZyG -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:43 2026 by rpki-client