This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer File: UzahBs7N66kuC4Dl6aXHibp0xis.cer (raw, json) Hash identifier: 4J+9xas/E1cRAVEvo0jnxpEPQcOCYLAVstArjJAB7iU= Subject key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC8A2EC810FE2CDCB45F66479C9ECE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29244 AS: 50020 IP: 46.16.192.0/21 IP: 85.118.192.0/21 IP: 87.120.72.0/21 IP: 91.92.8.0/21 IP: 93.123.88.0/21 IP: 94.156.136.0/21 IP: 149.62.192.0/18 IP: 185.201.36.0/22 IP: 193.104.79.0/24 IP: 193.193.171.0/24 IP: 193.193.182.0/24 IP: 193.194.147.0/24 IP: 193.194.155.0/24 IP: 194.147.223.0/24 IP: 2a02:4ba0::/32 IP: 2a12:4700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8a:2e:c8:10:fe:2c:dc:b4:5f:66:47:9c:9e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:95:db:5c:db:4f:95:07:a4:20:63:16:b9:f2: 0e:48:6e:16:68:76:75:5a:3c:af:04:70:6d:57:53: 86:1d:67:f0:f6:76:b1:d7:69:31:33:84:fa:c1:8f: 86:f4:41:a8:30:44:af:d9:5b:ed:e4:7f:14:1c:6e: 53:fd:2e:6f:c7:15:92:b3:dc:1a:3d:c0:14:77:5b: 70:5c:e4:80:cb:de:53:aa:3a:61:4d:55:3b:a0:51: f2:00:8d:aa:d1:50:d9:73:99:a7:c9:63:41:8f:e2: 8f:f9:2f:e2:a2:48:fa:a0:28:cb:8b:81:5b:fd:6b: 89:0a:21:70:4d:36:04:49:a9:34:62:dd:69:07:f1: bb:29:2a:e1:9e:ae:ed:bc:85:38:96:a1:9f:29:23: fa:a7:54:4a:9e:ce:1d:9a:bd:5e:7a:81:4b:b3:f5: b2:f7:c2:42:bc:6b:31:72:86:e0:dc:97:78:79:df: e6:cc:f6:68:0c:fb:e6:5a:33:dc:db:e8:1e:29:e8: 4c:d3:5f:03:75:78:d9:84:3a:95:ef:d8:3a:69:68: 3a:4a:69:0e:5a:21:d5:62:f8:5e:f6:43:88:1d:1b: f0:3c:12:42:36:22:e6:09:0f:4b:44:8b:12:d4:c8: 64:ea:d8:f9:65:43:40:a4:5d:61:ab:ba:f4:2b:5b: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.192.0/21 85.118.192.0/21 87.120.72.0/21 91.92.8.0/21 93.123.88.0/21 94.156.136.0/21 149.62.192.0/18 185.201.36.0/22 193.104.79.0/24 193.193.171.0/24 193.193.182.0/24 193.194.147.0/24 193.194.155.0/24 194.147.223.0/24 IPv6: 2a02:4ba0::/32 2a12:4700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29244 50020 Signature Algorithm: sha256WithRSAEncryption 2c:12:80:6d:d7:44:e8:a2:e1:20:02:30:e0:68:43:f9:c9:77: 90:b9:9b:71:27:25:75:a2:73:fa:e5:0d:53:22:4b:27:a7:1f: 3d:df:7f:8c:03:86:4f:2c:b1:6c:ef:94:ed:f9:9a:cb:d5:63: e3:a1:9b:81:62:6b:7b:c9:27:62:ce:98:e4:5b:f1:4d:8b:a9: d7:04:77:13:f2:77:3c:91:06:ed:2f:c7:1a:3b:17:21:a7:51: 25:7a:89:72:8f:5e:d2:f1:fd:86:ec:81:b0:52:c9:dd:be:37: e3:87:ba:6a:12:c0:17:c7:b3:1f:f9:af:1a:cf:57:57:76:a1: e3:c2:d0:28:50:56:e0:f9:12:27:09:38:61:5a:e2:bf:04:45: d8:b3:b0:f5:d7:4b:99:3d:b1:06:94:4f:b9:b6:5b:81:3e:06: 9e:20:61:12:b1:8c:34:37:1e:a5:03:65:38:d5:51:ea:33:20: b2:5d:b9:2e:1d:bb:1b:16:12:a2:02:12:12:f5:12:81:3b:f8: 97:db:6e:08:3a:5e:6b:18:d5:70:80:9b:c6:af:53:fa:99:4f: 0a:9e:e0:aa:7f:b2:da:06:76:53:1c:a6:62:17:f4:6b:f5:29: 47:40:b9:bc:6b:8d:6e:3f:11:8b:76:f3:7a:f6:63:ca:3b:15: 83:b8:4c:98 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgISAZt57IouyBD+LNy0X2ZHnJ7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzM2YTEwNmNlY2RlYmE5MmUwYjgwZTVlOWE1Yzc4OWJhNzRjNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JXbXNtPlQekIGMWufIOSG4WaHZ1 WjyvBHBtV1OGHWfw9nax12kxM4T6wY+G9EGoMESv2Vvt5H8UHG5T/S5vxxWSs9wa PcAUd1twXOSAy95TqjphTVU7oFHyAI2q0VDZc5mnyWNBj+KP+S/iokj6oCjLi4Fb /WuJCiFwTTYESak0Yt1pB/G7KSrhnq7tvIU4lqGfKSP6p1RKns4dmr1eeoFLs/Wy 98JCvGsxcobg3Jd4ed/mzPZoDPvmWjPc2+geKehM018DdXjZhDqV79g6aWg6SmkO WiHVYvhe9kOIHRvwPBJCNiLmCQ9LRIsS1Mhk6tj5ZUNApF1hq7r0K1s1FQIDAQAB o4IDCTCCAwUwHQYDVR0OBBYEFFM2oQbOzeupLguA5emlx4m6dMYrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzI2Njll ZS00YmE3LTQxMTAtODM3MC1kZDgwM2M1Yjg1ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMjY2OWVl LTRiYTctNDExMC04MzcwLWRkODAzYzViODVkYi8xL1V6YWhCczdONjZrdUM0RGw2 YVhIaWJwMHhpcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF BQcBBwEB/wR0MHIwWgQCAAEwVAMEAy4QwAMEA1V2wAMEA1d4SAMEA1tcCAMEA117 WAMEA16ciAMEBpU+wAMEArnJJAMEAMFoTwMEAMHBqwMEAMHBtgMEAMHCkwMEAMHC mwMEAMKT3zAUBAIAAjAOAwUAKgJLoAMFAyoSRwAwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICcjwCAwDDZDANBgkqhkiG9w0BAQsFAAOCAQEALBKAbddE6KLhIAIw4GhD +cl3kLmbcScldaJz+uUNUyJLJ6cfPd9/jAOGTyyxbO+U7fmay9Vj46GbgWJre8kn Ys6Y5FvxTYup1wR3E/J3PJEG7S/HGjsXIadRJXqJco9e0vH9huyBsFLJ3b4344e6 ahLAF8ezH/mvGs9XV3ah48LQKFBW4PkSJwk4YVrivwRF2LOw9ddLmT2xBpRPubZb gT4GniBhErGMNDcepQNlONVR6jMgsl25Lh27GxYSogISEvUSgTv4l9tuCDpeaxjV cICbxq9T+plPCp7gqn+y2gZ2UxymYhf0a/UpR0C5vGuNbj8Ri3bzevZjyjsVg7hM mA== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:01 2026 by rpki-client