This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer File: uCLebF2ewIbZ0gGrbaVr08_v8kM.cer (raw, json) Hash identifier: 6TUeK69QTLN8NzDZr3HO/wRr1gV9eW0bLduOcbM+r/c= Subject key identifier: B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFA42A486C6E97937A074BCF1EB7BC534 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 12:23:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.105.147.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:42:a4:86:c6:e9:79:37:a0:74:bc:f1:eb:7b:c5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 12:23:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:b7:38:bb:0e:45:28:9d:35:9c:84:a9:53: 5a:1d:4e:42:35:b2:22:03:f0:15:ab:6c:e5:d4:09: 60:15:21:19:10:8d:11:4b:12:4d:99:83:88:14:e4: d8:e5:d6:db:c9:40:2d:20:00:41:8d:32:28:6e:64: 35:93:bc:6d:fc:94:a3:a0:db:b2:2b:f1:e1:78:c8: 5e:d5:45:d4:50:dd:5d:9f:83:ca:9e:cd:f7:45:e8: a4:83:d3:1c:73:92:53:8b:1d:4e:a3:9d:39:99:32: 21:d6:af:1b:51:1d:c4:57:5b:80:8d:c8:2f:71:9f: 60:7c:2d:ad:18:0e:2e:b5:f3:e9:19:02:00:9b:0b: cf:47:9e:2e:31:18:74:22:45:9b:6f:c7:a0:51:d2: 9c:64:79:5a:92:e5:f3:fe:3c:30:00:84:d3:91:0c: 86:ea:dc:20:d1:4b:0c:63:b9:55:ca:fd:c4:69:65: 6f:ae:3f:b3:a6:cf:36:c0:12:c5:c6:ec:57:dd:71: 87:1b:0e:ee:48:b4:95:21:bc:06:af:0c:12:0f:7a: a8:af:a5:a5:b3:1e:39:79:01:c6:62:96:52:39:2d: cf:a1:37:19:59:20:cf:29:76:1f:3d:e5:16:ff:b1: 55:93:0f:72:05:a2:5f:53:f8:33:b3:e6:79:1e:00: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.147.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:fe:e7:93:0c:8c:ea:cf:9c:e9:66:e0:47:32:b9:09:29:a8: 2e:26:b2:83:66:71:ac:ab:af:22:2f:bb:1c:7b:97:90:dd:59: e1:15:c1:a8:cf:36:63:1d:be:bf:a0:29:ae:fe:e8:eb:46:86: 4e:b8:01:cb:ef:ca:75:35:0f:d4:77:88:54:5a:49:cd:4f:38: 7c:fd:80:88:da:71:19:d1:27:8c:f3:f7:93:c7:a7:bc:c6:da: c0:23:f5:d3:37:38:fd:d6:1e:00:b9:12:9d:bc:6a:cf:78:08: 78:ad:92:55:c1:29:5c:96:31:af:a6:75:c4:94:c5:9f:54:3e: 9f:ef:b2:f8:74:8f:99:ab:06:ac:a1:3e:bb:ed:2a:63:60:06: 58:0d:6c:13:64:32:a5:93:0d:e7:48:fc:55:f0:29:c4:7b:1d: e9:6c:a2:7c:75:bb:98:e6:33:87:74:3c:9a:e0:98:a2:f8:e0: 68:cb:f8:f4:22:66:75:53:2a:e2:b3:69:37:c7:96:4e:98:34: 4a:54:1f:3c:41:70:2a:cd:d3:f7:91:40:7f:ed:77:d9:b5:4e: b9:f7:7b:e3:86:6f:dc:f4:5c:a1:54:e5:d3:c8:49:c3:6a:4b: e6:0e:36:ad:c3:85:c9:26:c7:21:82:62:1a:46:1f:09:3d:22: f2:3d:3d:7f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZv6QqSGxul5N6B0vPHre8U0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTIyMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODIyZGU2YzVkOWVjMDg2ZDlkMjAxYWI2ZGE1NmJkM2NmZWZmMjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRi3OLsORSidNZyEqVNaHU5CNbIi A/AVq2zl1AlgFSEZEI0RSxJNmYOIFOTY5dbbyUAtIABBjTIobmQ1k7xt/JSjoNuy K/HheMhe1UXUUN1dn4PKns33Reikg9Mcc5JTix1Oo505mTIh1q8bUR3EV1uAjcgv cZ9gfC2tGA4utfPpGQIAmwvPR54uMRh0IkWbb8egUdKcZHlakuXz/jwwAITTkQyG 6twg0UsMY7lVyv3EaWVvrj+zps82wBLFxuxX3XGHGw7uSLSVIbwGrwwSD3qor6Wl sx45eQHGYpZSOS3PoTcZWSDPKXYfPeUW/7FVkw9yBaJfU/gzs+Z5HgDcHQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLgi3mxdnsCG2dIBq22la9PP7/JDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzNiMGY2 MC0zN2U0LTQ1YjktOGEyYy1hZjM4YmY3MDZmMzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvM2IwZjYw LTM3ZTQtNDViOS04YTJjLWFmMzhiZjcwNmYzNy8xL3VDTGViRjJld0liWjBnR3Ji YVZyMDhfdjhrTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWmTMA0GCSqGSIb3DQEBCwUAA4IBAQAf/ueT DIzqz5zpZuBHMrkJKaguJrKDZnGsq68iL7sce5eQ3VnhFcGozzZjHb6/oCmu/ujr RoZOuAHL78p1NQ/Ud4hUWknNTzh8/YCI2nEZ0SeM8/eTx6e8xtrAI/XTNzj91h4A uRKdvGrPeAh4rZJVwSlcljGvpnXElMWfVD6f77L4dI+ZqwasoT677SpjYAZYDWwT ZDKlkw3nSPxV8CnEex3pbKJ8dbuY5jOHdDya4Jii+OBoy/j0ImZ1Uyris2k3x5ZO mDRKVB88QXAqzdP3kUB/7XfZtU6593vjhm/c9FyhVOXTyEnDakvmDjatw4XJJsch gmIaRh8JPSLyPT1/ -----END CERTIFICATE-----Generated at Tue Jan 27 08:25:55 2026 by rpki-client