This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer File: uAc3zhz75lM7WIC2bqniQTzZyCU.cer (raw, json) Hash identifier: /Gi2o3Gbm1gcSrn/094Pp8IWauwrboXJcMLm9bDF2r0= Subject key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAED09833C689CA37486F705819AEB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 33943 IP: 84.19.64.0/19 IP: 2a0a:8380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ed:09:83:3c:68:9c:a3:74:86:f7:05:81:9a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:66:b1:59:30:30:dd:b1:a5:7f:06:f7:fb:d4: e8:99:72:70:f3:27:07:a5:4a:d0:89:19:01:bf:23: 0c:1e:52:31:68:eb:18:f1:5f:00:83:18:ae:93:ef: 8a:3f:b4:c6:9a:2a:41:8f:79:e7:8c:73:f1:0e:80: 48:94:e0:4d:22:ad:c8:4b:7f:ba:61:33:d9:92:08: 03:31:fe:33:53:3d:da:99:ed:cd:4a:21:0c:bd:7e: e2:56:7b:af:9e:f7:40:14:4f:66:6b:27:5b:c9:97: 0e:0b:e3:2b:c6:ba:3a:d1:7e:80:79:9d:16:91:28: a3:44:fe:72:08:17:46:91:81:59:16:1d:f9:25:93: 39:54:ec:60:3b:ea:0d:1d:5f:5c:6a:fa:f1:5f:b0: da:78:f3:8f:18:9c:2a:d1:eb:65:64:81:2c:a4:53: a1:04:bc:8d:9d:1c:a1:ee:8c:5b:41:b5:97:9f:2c: c9:7c:49:23:28:28:5d:40:4e:29:0f:01:c2:63:01: 89:b0:b1:14:5a:57:3b:c2:76:a4:ba:20:6d:98:94: de:e8:7e:16:3c:4b:d4:f0:98:db:3f:ab:81:41:2e: ed:c8:57:29:a7:cd:97:ef:b4:48:93:9d:7a:8f:53: 0f:74:71:84:dd:01:f6:f8:d6:0a:71:0b:0a:5e:b4: bc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.19.64.0/19 IPv6: 2a0a:8380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33943 Signature Algorithm: sha256WithRSAEncryption a3:ca:f0:84:44:b6:79:5c:b0:64:88:7e:ae:e6:76:50:5e:f9: 55:91:0e:b5:0d:fd:e7:5e:db:5f:3e:23:77:f0:c5:1a:98:ed: de:c0:e5:e1:14:de:f7:18:c3:93:37:ca:3e:76:3b:35:2f:bd: 20:eb:75:40:bf:eb:57:6f:cc:32:e3:d9:12:2c:1d:fb:69:22: df:e6:9c:be:d0:59:47:03:a3:93:fb:90:a3:00:6c:0d:88:e6: 65:3f:1a:0d:d5:64:70:1b:ca:67:84:02:da:95:49:0a:78:06: ec:85:44:33:25:07:09:f7:1e:1c:0d:09:22:e3:92:7f:28:01: 50:bc:8b:c6:a3:8d:ad:bc:51:3c:f2:5b:d4:96:4c:9f:fb:55: 28:d1:5e:63:d9:72:89:4f:e5:b4:17:79:f6:4d:ee:2d:03:d4: a5:f4:3f:47:b8:6a:44:df:c8:4d:94:90:37:2b:94:4d:08:68: e4:ba:8f:85:25:23:84:6e:07:59:f5:01:64:1e:e0:be:99:cb: 28:1b:d1:d4:7f:af:cc:7e:4b:b3:0f:43:be:cf:b0:ce:8b:3f: 11:45:c8:9b:da:3b:d4:ba:0d:23:26:3c:cd:aa:a0:48:6d:c7: 99:f7:3f:3a:95:a5:5a:ed:57:3a:0c:e0:d9:f0:9f:28:e8:c8: 85:f4:fc:34 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26u0JgzxonKN0hvcFgZrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODA3MzdjZTFjZmJlNjUzM2I1ODgwYjY2ZWE5ZTI0MTNjZDljODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12axWTAw3bGlfwb3+9TomXJw8ycH pUrQiRkBvyMMHlIxaOsY8V8Agxiuk++KP7TGmipBj3nnjHPxDoBIlOBNIq3IS3+6 YTPZkggDMf4zUz3ame3NSiEMvX7iVnuvnvdAFE9maydbyZcOC+Mrxro60X6AeZ0W kSijRP5yCBdGkYFZFh35JZM5VOxgO+oNHV9cavrxX7DaePOPGJwq0etlZIEspFOh BLyNnRyh7oxbQbWXnyzJfEkjKChdQE4pDwHCYwGJsLEUWlc7wnakuiBtmJTe6H4W PEvU8JjbP6uBQS7tyFcpp82X77RIk516j1MPdHGE3QH2+NYKcQsKXrS8gQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLgHN84c++ZTO1iAtm6p4kE82cglMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzY5NmY5 OS1mNDExLTRlMmUtYjI2YS00Y2FlNTQxOTFjZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNjk2Zjk5 LWY0MTEtNGUyZS1iMjZhLTRjYWU1NDE5MWNkNS8xL3VBYzN6aHo3NWxNN1dJQzJi cW5pUVR6WnlDVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFVBNAMA0EAgACMAcDBQMqCoOAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCElzANBgkqhkiG9w0BAQsFAAOCAQEAo8rwhES2eVyw ZIh+ruZ2UF75VZEOtQ39517bXz4jd/DFGpjt3sDl4RTe9xjDkzfKPnY7NS+9IOt1 QL/rV2/MMuPZEiwd+2ki3+acvtBZRwOjk/uQowBsDYjmZT8aDdVkcBvKZ4QC2pVJ CngG7IVEMyUHCfceHA0JIuOSfygBULyLxqONrbxRPPJb1JZMn/tVKNFeY9lyiU/l tBd59k3uLQPUpfQ/R7hqRN/ITZSQNyuUTQho5LqPhSUjhG4HWfUBZB7gvpnLKBvR 1H+vzH5Lsw9Dvs+wzos/EUXIm9o71LoNIyY8zaqgSG3Hmfc/OpWlWu1XOgzg2fCf KOjIhfT8NA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:37 2026 by rpki-client