This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer File: uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer (raw, json) Hash identifier: 2RZiPLd5pfLLAVBHXQjbrUWysB6hNEeFoJ4bd9cVnRU= Subject key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA36C0FBC65210F623AFB773C40BFE9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199599 AS: 211530 IP: 77.238.96.0/21 IP: 86.110.202.0/23 IP: 86.110.216.0/22 IP: 89.20.60.0/22 IP: 91.194.212.0/23 IP: 185.9.228.0/22 IP: 185.35.7.0/24 IP: 185.79.116.0/22 IP: 185.79.236.0/22 IP: 185.123.76.0/22 IP: 193.32.190.0/24 IP: 194.35.114.0/23 IP: 212.46.47.0/24 IP: 217.77.104.0/21 IP: 2a03:5240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6c:0f:bc:65:21:0f:62:3a:fb:77:3c:40:bf:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:0b:68:89:12:a2:a0:ac:1e:8f:96:19:b1: 7a:53:0f:5c:5a:41:52:63:5d:5c:49:e8:c0:88:db: da:86:f4:e5:2a:78:c7:b9:af:e6:14:c9:24:b8:ac: 55:8a:54:d4:bb:57:c5:d9:3a:47:4c:11:16:be:cc: 2f:13:86:1b:64:20:8e:14:1c:6f:67:ce:40:5d:57: 44:97:06:02:c4:0b:c2:ca:10:63:bd:3a:7d:a2:7a: 9e:df:80:34:8c:66:b6:b9:3b:fe:46:86:1c:50:83: da:5a:b4:73:c6:55:c1:b8:97:0a:f3:63:20:a6:d5: 3d:cb:b9:26:23:9d:72:90:dc:fd:07:e3:9f:12:58: e0:42:45:f9:61:25:4e:cc:ae:16:95:dd:87:70:36: 30:d8:5b:81:95:13:6b:28:04:8a:97:8a:10:e9:3e: 9e:83:8c:9e:38:4f:24:7e:b7:91:a1:d8:20:93:e3: d6:64:12:d9:4f:76:36:ac:1b:f5:b0:47:58:4e:d4: fa:4f:04:f0:b6:1d:f2:4d:9a:c7:33:04:44:1f:b2: f5:5f:d7:78:65:a9:d4:f4:bc:de:3c:2b:a7:75:70: d8:75:60:67:7a:53:3c:a0:96:aa:d7:92:45:0c:c1: b6:97:e7:c1:00:84:07:6f:93:4f:f0:39:cc:f1:32: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.238.96.0/21 86.110.202.0/23 86.110.216.0/22 89.20.60.0/22 91.194.212.0/23 185.9.228.0/22 185.35.7.0/24 185.79.116.0/22 185.79.236.0/22 185.123.76.0/22 193.32.190.0/24 194.35.114.0/23 212.46.47.0/24 217.77.104.0/21 IPv6: 2a03:5240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199599 211530 Signature Algorithm: sha256WithRSAEncryption 09:6d:d5:5b:f6:7f:d6:0d:47:99:e1:16:30:32:72:77:96:77: 4f:51:98:30:59:c5:e0:74:3c:2a:25:23:1e:bf:26:3f:09:b4: 8b:88:ec:b2:7d:ca:a0:08:16:de:cf:b9:ec:4f:27:e8:49:5e: 49:73:03:ba:9a:68:6e:c2:f1:76:6f:88:6b:52:5b:c8:f4:55: d8:f2:9c:4b:9b:67:64:53:35:09:0b:3a:d5:53:73:c9:62:0b: 83:05:b3:a1:17:d1:80:55:e1:bb:05:a8:0c:7f:3e:2e:3f:3b: ae:7e:03:e2:de:dc:6d:d1:74:42:e7:1f:4e:3b:bf:fe:9d:5c: 51:27:fb:b5:26:80:ef:57:b8:89:b1:c0:58:ed:81:4a:3f:2d: f0:2a:45:e6:02:31:0f:a2:d0:77:93:2e:e6:2f:b3:d4:02:5e: 49:29:b3:f1:2d:21:28:c3:a4:66:e0:dd:31:59:90:3b:1d:bf: 1f:bd:43:2c:a2:7b:a0:2f:35:ba:d2:84:aa:9e:da:50:95:ee: d7:99:1e:8f:a2:49:50:89:a7:b3:ca:25:59:34:98:08:34:a9: 4d:a5:00:d0:bb:2c:40:28:25:08:79:e4:19:f4:e1:10:88:13: df:3d:81:1b:24:40:26:61:b5:61:48:1a:2a:50:97:b1:06:50: eb:10:a3:c2 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgISAZt7o2wPvGUhD2I6+3c8QL/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODA2MzNmZTc5YTYyOTYxMDlmZGJmNjQ3NWQ0YzJhNjVlMmQ0ZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGgLaIkSoqCsHo+WGbF6Uw9cWkFS Y11cSejAiNvahvTlKnjHua/mFMkkuKxVilTUu1fF2TpHTBEWvswvE4YbZCCOFBxv Z85AXVdElwYCxAvCyhBjvTp9onqe34A0jGa2uTv+RoYcUIPaWrRzxlXBuJcK82Mg ptU9y7kmI51ykNz9B+OfEljgQkX5YSVOzK4Wld2HcDYw2FuBlRNrKASKl4oQ6T6e g4yeOE8kfreRodggk+PWZBLZT3Y2rBv1sEdYTtT6TwTwth3yTZrHMwREH7L1X9d4 ZanU9LzePCundXDYdWBnelM8oJaq15JFDMG2l+fBAIQHb5NP8DnM8TK1OwIDAQAB o4IDAjCCAv4wHQYDVR0OBBYEFLgGM/55pilhCf2/ZHXUwqZeLU8cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2QxNmY1 OS03NzU0LTQ2YTctYWE1OS0yYTA2ZWQxMDQ1NTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZDE2ZjU5 LTc3NTQtNDZhNy1hYTU5LTJhMDZlZDEwNDU1My8xL3VBWXpfbm1tS1dFSl9iOWtk ZFRDcGw0dFR4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHwGCCsGAQUF BwEHAQH/BG0wazBaBAIAATBUAwQDTe5gAwQBVm7KAwQCVm7YAwQCWRQ8AwQBW8LU AwQCuQnkAwQAuSMHAwQCuU90AwQCuU/sAwQCuXtMAwQAwSC+AwQBwiNyAwQA1C4v AwQD2U1oMA0EAgACMAcDBQAqA1JAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwML rwIDAzpKMA0GCSqGSIb3DQEBCwUAA4IBAQAJbdVb9n/WDUeZ4RYwMnJ3lndPUZgw WcXgdDwqJSMevyY/CbSLiOyyfcqgCBbez7nsTyfoSV5JcwO6mmhuwvF2b4hrUlvI 9FXY8pxLm2dkUzUJCzrVU3PJYguDBbOhF9GAVeG7BagMfz4uPzuufgPi3txt0XRC 5x9OO7/+nVxRJ/u1JoDvV7iJscBY7YFKPy3wKkXmAjEPotB3ky7mL7PUAl5JKbPx LSEow6Rm4N0xWZA7Hb8fvUMsonugLzW60oSqntpQle7XmR6PoklQiaezyiVZNJgI NKlNpQDQuyxAKCUIeeQZ9OEQiBPfPYEbJEAmYbVhSBoqUJexBlDrEKPC -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:08 2026 by rpki-client