This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer File: UqWb8EMIAwY1n1opSR9UWwcFHAU.cer (raw, json) Hash identifier: bMxQkTpwEPan43lDZFRdsq1hxx1oeXCb50LRo3mHROg= Subject key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA1BB72B25F4D3699DF78BE388508 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.183.232.0/21 IP: 185.133.216.0/22 IP: 2a03:9c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a1:bb:72:b2:5f:4d:36:99:df:78:be:38:85:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52a59bf043080306359f5a29491f545b07051c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:f3:a0:c6:9d:ce:7e:2e:b3:b3:94:51:69: 1e:72:27:d3:e5:b8:cf:34:70:39:36:5a:c3:37:5c: d2:1b:c9:fe:9d:d8:dc:3f:dd:8d:8e:f1:14:cb:18: 26:cd:8c:8e:fd:60:6f:60:d6:de:78:a2:ab:2a:3e: ac:30:38:a1:61:e6:53:44:90:f4:50:cc:d3:04:b7: 9d:f6:0c:aa:e4:f2:d9:18:9b:08:d3:52:97:91:3b: 85:f0:1a:c3:fb:fd:b7:60:76:97:34:11:90:3f:ac: 53:fd:dd:26:1a:45:e9:8b:fe:54:d6:49:75:82:bd: 1b:d2:dc:d5:13:ef:f2:c2:76:62:3f:b7:08:8e:75: 4d:e1:5a:1d:c6:d5:21:8b:b4:85:fd:a1:e2:eb:e0: 98:f9:42:4e:98:c4:76:5e:0b:b5:c6:6b:42:df:a2: 29:bb:f7:83:0d:f7:c5:e1:87:d8:e0:68:bd:48:dd: ba:f4:55:c3:66:3a:c7:9e:1e:16:3e:69:37:8e:92: 80:08:84:66:94:ac:fd:54:df:8e:53:7b:0c:82:86: 69:b1:1d:6d:81:b9:01:f2:2f:ed:c5:85:a4:40:d3: 73:39:b6:61:4f:79:c0:3d:ad:b3:ac:c3:86:d5:b0: a3:68:35:bc:80:23:f6:fc:a9:8b:46:1e:b0:b6:51: ec:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.232.0/21 185.133.216.0/22 IPv6: 2a03:9c0::/32 Signature Algorithm: sha256WithRSAEncryption 99:94:cf:74:e0:da:91:ee:e2:85:c7:46:47:db:43:db:01:e4: 4c:74:09:ce:b9:86:b1:9a:3b:45:57:c2:9e:c9:0d:85:40:0e: 01:56:c7:5b:83:9f:dc:c5:3c:a9:51:5f:56:fb:a8:4d:15:2a: 91:ee:6e:59:e6:7d:fb:a2:7f:00:98:f7:5a:1b:9d:53:a4:69: fa:8f:b0:67:ca:1b:ee:fe:fe:20:e9:f1:a3:c9:1f:fb:02:50: 50:d0:70:d3:08:86:72:f5:14:2f:7a:4a:bd:b8:78:b5:92:3a: 68:c1:74:cb:73:fd:b9:f6:e6:d5:b4:23:1f:93:0b:7d:04:6a: 11:49:56:36:cc:82:ec:6b:e0:5d:5d:3c:ee:5b:0d:5a:25:7e: bd:87:e1:77:19:6a:14:16:8a:74:30:4c:6d:37:aa:61:d7:a6: e6:50:f0:40:1a:0b:47:2c:1c:ba:6a:da:5d:b1:60:15:28:fd: 3c:41:20:84:4a:ad:7e:1e:3f:5c:0e:7f:fe:cc:9a:38:57:ae: 8a:85:b6:c0:d6:02:c7:41:59:ed:9c:8c:4a:e4:93:b3:8a:77: 17:34:14:2f:41:17:6a:13:bf:04:a2:fb:7f:91:4b:a2:81:4e: 51:da:c3:d6:30:e3:12:35:65:bb:7e:1d:55:b7:e0:05:be:be: 02:90:5d:ee -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt9yqG7crJfTTaZ33i+OIUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmE1OWJmMDQzMDgwMzA2MzU5ZjVhMjk0OTFmNTQ1YjA3MDUxYzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr7zoMadzn4us7OUUWkecifT5bjP NHA5NlrDN1zSG8n+ndjcP92NjvEUyxgmzYyO/WBvYNbeeKKrKj6sMDihYeZTRJD0 UMzTBLed9gyq5PLZGJsI01KXkTuF8BrD+/23YHaXNBGQP6xT/d0mGkXpi/5U1kl1 gr0b0tzVE+/ywnZiP7cIjnVN4VodxtUhi7SF/aHi6+CY+UJOmMR2Xgu1xmtC36Ip u/eDDffF4YfY4Gi9SN269FXDZjrHnh4WPmk3jpKACIRmlKz9VN+OU3sMgoZpsR1t gbkB8i/txYWkQNNzObZhT3nAPa2zrMOG1bCjaDW8gCP2/KmLRh6wtlHstQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFFKlm/BDCAMGNZ9aKUkfVFsHBRwFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzZkNzI5 ZS1lMTZiLTQxYTktOTAxMi0wMTRjNzA5NzdkNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvNmQ3Mjll LWUxNmItNDFhOS05MDEyLTAxNGM3MDk3N2Q0OS8xL1VxV2I4RU1JQXdZMW4xb3BT UjlVV3djRkhBVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLrfoAwQCuYXYMA0EAgACMAcDBQAqAwnAMA0G CSqGSIb3DQEBCwUAA4IBAQCZlM904NqR7uKFx0ZH20PbAeRMdAnOuYaxmjtFV8Ke yQ2FQA4BVsdbg5/cxTypUV9W+6hNFSqR7m5Z5n37on8AmPdaG51TpGn6j7Bnyhvu /v4g6fGjyR/7AlBQ0HDTCIZy9RQvekq9uHi1kjpowXTLc/259ubVtCMfkwt9BGoR SVY2zILsa+BdXTzuWw1aJX69h+F3GWoUFop0MExtN6ph16bmUPBAGgtHLBy6atpd sWAVKP08QSCESq1+Hj9cDn/+zJo4V66KhbbA1gLHQVntnIxK5JOzincXNBQvQRdq E78Eovt/kUuigU5R2sPWMOMSNWW7fh1Vt+AFvr4CkF3u -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:01 2026 by rpki-client