This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer File: UwUgCbp4mNI2HKLufRMBJPnSUSU.cer (raw, json) Hash identifier: 3rUPLq7fmpCs2/Oa2iCjZ6rTPV4bDpOBGJA8+xZV4K4= Subject key identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80954AE05DDB40B17642E192B4C291 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50881 IP: 91.228.164.0/22 IP: 185.94.156.0/22 IP: 2a05:e800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:95:4a:e0:5d:db:40:b1:76:42:e1:92:b4:c2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53052009ba7898d2361ca2ee7d130124f9d25125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:45:14:15:49:fc:59:88:a9:2a:16:6b:0e:20: 18:0e:f1:b7:f9:84:31:77:8a:3c:8c:60:5a:c7:da: 02:27:c4:ad:12:b2:70:af:55:c4:cf:ac:ea:ae:f7: 78:31:ef:8a:db:ca:51:19:38:1f:29:25:45:d7:de: 53:ae:da:5f:fa:09:f4:92:82:e9:97:ee:c2:19:bf: 65:9a:cf:5a:ce:85:05:50:f6:20:30:95:5e:6e:d5: 5d:03:2f:6d:7c:d9:af:ed:e9:a4:03:53:e4:9d:e9: 6e:66:b4:5e:7c:b0:fb:94:d7:f5:06:10:67:8d:7e: bc:69:34:5e:9e:2b:b5:ec:11:88:85:7f:95:26:fe: 90:b9:67:c0:11:a6:2c:ec:82:0d:0f:d0:b8:9a:fe: 84:01:67:9f:94:61:1c:e8:b2:9a:1b:7a:35:e9:25: 76:9c:73:ca:3e:cf:50:1b:c9:bc:84:38:b1:40:0b: e9:d7:56:f0:7f:1b:12:81:7a:ec:1d:86:a1:f1:54: 9c:63:a6:96:2e:7c:28:96:9c:0e:4d:0f:74:46:9f: 3a:94:f1:a8:08:80:47:2e:86:28:7c:37:ca:66:8c: 97:76:9a:a8:77:72:58:9a:0a:d4:47:4b:2d:fd:6e: 61:22:33:76:76:49:21:4c:6b:32:b3:16:fa:f6:f0: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.164.0/22 185.94.156.0/22 IPv6: 2a05:e800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50881 Signature Algorithm: sha256WithRSAEncryption 21:28:0d:e8:49:5e:55:a1:b6:15:38:e9:eb:69:5f:df:3f:3b: cf:2a:2d:26:2e:c4:f5:3c:54:b1:84:b5:d7:9b:66:5e:47:f3: 5b:a0:15:86:bc:58:95:32:8f:ce:f1:d6:06:42:d6:cb:47:8a: 99:c4:93:30:4c:ae:0c:49:e1:40:b9:53:d0:e8:22:a1:7d:37: 07:b7:5d:43:4a:ab:83:6e:03:13:e8:26:b1:eb:ea:2f:36:ff: cd:5f:e5:20:91:26:6a:88:c9:d9:37:a1:fd:ce:e8:b0:46:de: 12:3b:91:a5:41:c5:e2:42:c2:46:9d:05:7a:86:88:9f:0c:42: 6f:b5:e4:ce:0c:07:36:af:19:f9:d4:8e:02:56:5b:d8:dc:a1: e2:14:07:8e:22:8f:e2:6b:d9:71:cc:2f:77:df:36:81:ae:e4: 8b:c4:05:a6:9c:6d:51:bf:40:07:e6:c8:c7:e1:a7:82:b9:45: ac:e1:24:eb:64:2a:a7:f5:50:07:cf:d6:c9:c8:2c:cb:a2:49: 3b:f9:9e:e4:75:49:e8:58:9f:17:bf:34:8c:2f:14:da:40:b5: 11:1c:90:b7:51:c7:eb:c2:8a:8f:25:7d:15:71:4e:54:88:82: 01:7e:06:70:a1:b9:71:90:97:6e:84:14:2e:1f:6b:a6:04:2c: 39:44:76:8a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/gJVK4F3bQLF2QuGStMKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzA1MjAwOWJhNzg5OGQyMzYxY2EyZWU3ZDEzMDEyNGY5ZDI1MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UUUFUn8WYipKhZrDiAYDvG3+YQx d4o8jGBax9oCJ8StErJwr1XEz6zqrvd4Me+K28pRGTgfKSVF195Trtpf+gn0koLp l+7CGb9lms9azoUFUPYgMJVebtVdAy9tfNmv7emkA1PkneluZrRefLD7lNf1BhBn jX68aTReniu17BGIhX+VJv6QuWfAEaYs7IIND9C4mv6EAWeflGEc6LKaG3o16SV2 nHPKPs9QG8m8hDixQAvp11bwfxsSgXrsHYah8VScY6aWLnwolpwOTQ90Rp86lPGo CIBHLoYofDfKZoyXdpqod3JYmgrUR0st/W5hIjN2dkkhTGsysxb69vAsawIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFMFIAm6eJjSNhyi7n0TAST50lElMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzkzODcy Mi1kNDE1LTQwMjctYTBiMy1hMmFhMjg2ZGM0NDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvOTM4NzIy LWQ0MTUtNDAyNy1hMGIzLWEyYWEyODZkYzQ0OC8xL1V3VWdDYnA0bU5JMkhLTHVm Uk1CSlBuU1VTVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCW+SkAwQCuV6cMA0EAgACMAcDBQMqBegAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDGwTANBgkqhkiG9w0BAQsFAAOCAQEAISgN 6EleVaG2FTjp62lf3z87zyotJi7E9TxUsYS115tmXkfzW6AVhrxYlTKPzvHWBkLW y0eKmcSTMEyuDEnhQLlT0OgioX03B7ddQ0qrg24DE+gmsevqLzb/zV/lIJEmaojJ 2Teh/c7osEbeEjuRpUHF4kLCRp0FeoaInwxCb7XkzgwHNq8Z+dSOAlZb2Nyh4hQH jiKP4mvZccwvd982ga7ki8QFppxtUb9AB+bIx+GngrlFrOEk62Qqp/VQB8/Wycgs y6JJO/me5HVJ6FifF780jC8U2kC1ERyQt1HH68KKjyV9FXFOVIiCAX4GcKG5cZCX boQULh9rpgQsOUR2ig== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:03 2026 by rpki-client