This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uDtc22Xsxb10bYt0mCgxptjcEFM.cer File: uDtc22Xsxb10bYt0mCgxptjcEFM.cer (raw, json) Hash identifier: TQkiPABh1IMyn3W/7pA1QGQtBwj3tGaouOEr44B+xGI= Subject key identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835464F856E14E759473E9FAC671121 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.193.236.0/22 IP: 2a0a:4140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:46:4f:85:6e:14:e7:59:47:3e:9f:ac:67:11:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b83b5cdb65ecc5bd746d8b74982831a6d8dc1053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:33:6b:3c:8e:22:98:db:5a:a9:27:bd:9e: 69:4e:24:d2:5d:68:07:73:3f:9e:d8:67:2d:d4:be: e6:84:85:41:5f:59:52:84:b6:eb:86:e3:3a:70:fc: 32:d0:4f:b0:4c:34:9c:06:4f:3c:63:0a:93:fd:3d: c9:48:a3:cc:cc:32:6c:de:c5:5e:74:1f:df:e7:de: df:94:58:6a:6f:8e:bb:d4:74:4f:19:52:18:5f:f1: 50:b2:68:97:17:dc:d5:8b:4d:9d:b8:0e:e5:d2:68: 17:0a:e6:73:fd:e5:77:bf:73:c9:11:2e:23:43:bd: a6:05:e7:56:e4:d5:56:bc:23:16:a6:b0:ae:43:24: 54:0c:ce:51:93:44:1e:c3:a5:1d:22:29:1e:d7:bb: 81:86:96:32:b7:de:30:d0:61:b6:4a:cc:96:25:7f: 7b:8d:e1:f1:86:cb:e3:36:5e:2d:8c:0b:a3:44:3b: 64:2e:a7:6f:62:16:51:21:85:c0:fb:56:f9:59:21: 66:c4:03:7d:55:af:43:c7:41:8d:e3:78:56:3c:29: 44:ee:6b:74:45:33:27:ed:e3:57:fb:85:8d:4b:95: b5:c3:6d:35:a6:95:10:9e:0f:99:1e:a7:ff:b1:a6: 57:f5:3a:ab:c4:5c:aa:5c:8b:43:75:35:cc:dd:2e: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3B:5C:DB:65:EC:C5:BD:74:6D:8B:74:98:28:31:A6:D8:DC:10:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4b8f5a-24e0-4ede-a4ab-50c78916f8e3/1/uDtc22Xsxb10bYt0mCgxptjcEFM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.236.0/22 IPv6: 2a0a:4140::/29 Signature Algorithm: sha256WithRSAEncryption 84:25:5a:f5:d1:10:34:ca:51:82:0a:ef:fd:a8:2a:a3:67:4b: a9:3d:c0:d9:b6:b0:53:b4:0f:d5:7d:5d:44:e5:76:36:04:cf: 8b:4b:ae:ed:66:04:c7:d6:28:de:17:0c:a4:2b:17:7e:b3:2e: 42:37:1d:2e:14:2d:9f:9a:f8:cc:92:1c:2a:c8:99:91:60:35: fa:8a:37:a4:22:57:aa:90:01:a7:80:c4:0c:ec:21:c5:1c:82: b9:49:ec:26:0c:94:cf:34:25:a4:02:66:de:a9:42:ba:ea:c7: 08:14:0e:f5:df:d2:32:2f:38:25:36:1e:93:0a:28:73:b2:ed: 33:b8:0c:ce:3c:24:88:eb:78:5f:a3:f4:7b:2f:ef:41:31:c0: 61:90:a2:3a:5e:2f:5b:c1:b7:7e:8e:6e:5d:c2:76:a0:bf:05: 20:51:bc:c3:cb:2b:a3:31:ed:b3:d4:52:e7:ee:49:f8:c7:67: 81:30:7f:64:af:35:ba:a4:11:12:e2:b8:5b:63:dd:e6:19:fc: d9:8c:6c:5d:60:6b:14:e2:92:7c:9f:63:4a:61:52:37:00:4f: 65:16:3f:c8:0f:9c:0d:ec:90:99:da:d1:50:4b:74:a3:9f:fa: ad:40:37:fd:dd:d1:fe:ab:53:f0:7d:a2:b3:1d:2e:d3:e6:06: d9:96:e2:59 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt4NUZPhW4U51lHPp+sZxEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODNiNWNkYjY1ZWNjNWJkNzQ2ZDhiNzQ5ODI4MzFhNmQ4ZGMxMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tszazyOIpjbWqknvZ5pTiTSXWgH cz+e2Gct1L7mhIVBX1lShLbrhuM6cPwy0E+wTDScBk88YwqT/T3JSKPMzDJs3sVe dB/f597flFhqb4671HRPGVIYX/FQsmiXF9zVi02duA7l0mgXCuZz/eV3v3PJES4j Q72mBedW5NVWvCMWprCuQyRUDM5Rk0Qew6UdIike17uBhpYyt94w0GG2SsyWJX97 jeHxhsvjNl4tjAujRDtkLqdvYhZRIYXA+1b5WSFmxAN9Va9Dx0GN43hWPClE7mt0 RTMn7eNX+4WNS5W1w201ppUQng+ZHqf/saZX9TqrxFyqXItDdTXM3S6uIQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLg7XNtl7MW9dG2LdJgoMabY3BBTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzRiOGY1 YS0yNGUwLTRlZGUtYTRhYi01MGM3ODkxNmY4ZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNGI4ZjVh LTI0ZTAtNGVkZS1hNGFiLTUwYzc4OTE2ZjhlMy8xL3VEdGMyMlhzeGIxMGJZdDBt Q2d4cHRqY0VGTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucHsMA0EAgACMAcDBQMqCkFAMA0GCSqGSIb3 DQEBCwUAA4IBAQCEJVr10RA0ylGCCu/9qCqjZ0upPcDZtrBTtA/VfV1E5XY2BM+L S67tZgTH1ijeFwykKxd+sy5CNx0uFC2fmvjMkhwqyJmRYDX6ijekIleqkAGngMQM 7CHFHIK5SewmDJTPNCWkAmbeqUK66scIFA7139IyLzglNh6TCihzsu0zuAzOPCSI 63hfo/R7L+9BMcBhkKI6Xi9bwbd+jm5dwnagvwUgUbzDyyujMe2z1FLn7kn4x2eB MH9krzW6pBES4rhbY93mGfzZjGxdYGsU4pJ8n2NKYVI3AE9lFj/ID5wN7JCZ2tFQ S3Sjn/qtQDf93dH+q1PwfaKzHS7T5gbZluJZ -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:20 2026 by rpki-client