This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer File: uEzZvD0ajxtGa7ZyowvG2WfnxSc.cer (raw, json) Hash identifier: SY6GhGUAkGnlQMz493fwK/v7nWHYAJT6DNDwxrW9gCs= Subject key identifier: B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8434D8EE9682A46D610228D6A6F2E8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199451 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:34:d8:ee:96:82:a4:6d:61:02:28:d6:a6:f2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b84cd9bc3d1a8f1b466bb672a30bc6d967e7c527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3c:8f:b4:c3:30:4d:7f:ea:30:01:41:91:22: 80:9b:76:73:0d:e1:49:7a:1f:64:6c:cc:4d:2b:c0: 56:f3:30:9d:e8:2e:c5:85:01:3e:0e:8f:5c:15:c2: 8f:03:04:79:cc:0c:01:8d:b9:96:4a:63:28:20:23: 42:60:20:85:e5:4d:f3:f3:13:83:99:b6:f0:f6:46: a0:55:56:48:57:3f:f5:9c:09:76:a3:f0:e5:6b:83: 51:ec:4d:bb:c1:d2:17:4f:1a:c4:40:e5:7d:1d:81: c9:f4:b8:e6:7a:bf:b2:73:fb:56:77:4e:68:f4:be: 5a:12:e9:e7:0d:87:2a:9d:70:f0:b2:6d:d0:d9:cb: d5:31:e1:46:61:56:d3:00:68:cb:5b:81:3f:3f:52: 99:c6:40:33:80:63:b3:5a:c0:e8:73:c5:f4:f2:3a: 3d:21:23:c5:7d:75:42:c5:af:1e:db:57:fb:74:3d: 9b:76:43:60:a7:dc:1c:31:61:a2:36:3f:5b:c7:87: bb:61:2a:a2:83:2b:ba:84:92:4f:56:d9:b6:b5:7b: cd:31:a2:d8:9a:b4:69:f8:1f:8e:27:86:d4:c7:d6: 4d:a4:03:a7:94:3e:75:7e:be:72:da:14:64:42:f4: 1a:28:e7:f6:25:bd:7a:38:7a:4b:94:b7:47:2a:16: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4C:D9:BC:3D:1A:8F:1B:46:6B:B6:72:A3:0B:C6:D9:67:E7:C5:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c00e3d-58d0-4ad7-afcb-227e0ac0ec2d/1/uEzZvD0ajxtGa7ZyowvG2WfnxSc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199451 Signature Algorithm: sha256WithRSAEncryption 2e:99:06:79:6f:da:f3:64:04:09:b2:8c:b8:4e:48:6b:8c:ed: 08:9c:98:2d:8c:cb:d2:1b:a5:d4:43:74:7f:f7:ec:84:0a:d3: 35:5b:c8:97:45:20:6a:83:0d:4e:f8:86:41:04:46:27:f2:6e: ea:99:f1:17:7b:d5:6a:68:ef:02:5b:b9:a1:49:cb:b8:fd:bd: 0f:9e:72:57:e1:ef:43:25:6c:c4:da:b5:1e:3c:52:1e:73:4c: c8:26:19:6c:06:31:eb:1b:62:d6:bb:06:01:43:ef:e2:8d:71: 3f:08:f9:97:7c:b3:40:c5:8b:75:b0:56:eb:3d:40:ed:7a:d3: f2:ca:ca:4e:23:12:2f:e5:4a:24:de:75:86:4c:37:60:c9:56: 3b:d6:f6:f8:33:9b:5c:43:39:e3:99:74:08:52:b6:17:01:29: 29:59:b6:a0:c4:be:de:50:a9:68:d7:fe:cc:66:6c:df:68:fa: bb:bf:1f:e3:b3:21:7e:c2:c9:f8:b1:c7:a3:66:29:4c:2b:0b: 1f:9d:d8:6d:7f:c5:bc:5a:43:e5:74:28:6b:e7:76:e9:4c:d1: 5f:fd:43:95:05:89:fc:12:74:49:ee:7d:5b:05:f9:ab:89:33: b6:bf:af:d1:dd:6c:1e:62:63:96:14:cf:ec:31:be:6f:58:6a: c8:2f:7a:c4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/hDTY7paCpG1hAijWpvLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODRjZDliYzNkMWE4ZjFiNDY2YmI2NzJhMzBiYzZkOTY3ZTdjNTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjyPtMMwTX/qMAFBkSKAm3ZzDeFJ eh9kbMxNK8BW8zCd6C7FhQE+Do9cFcKPAwR5zAwBjbmWSmMoICNCYCCF5U3z8xOD mbbw9kagVVZIVz/1nAl2o/Dla4NR7E27wdIXTxrEQOV9HYHJ9Ljmer+yc/tWd05o 9L5aEunnDYcqnXDwsm3Q2cvVMeFGYVbTAGjLW4E/P1KZxkAzgGOzWsDoc8X08jo9 ISPFfXVCxa8e21f7dD2bdkNgp9wcMWGiNj9bx4e7YSqigyu6hJJPVtm2tXvNMaLY mrRp+B+OJ4bUx9ZNpAOnlD51fr5y2hRkQvQaKOf2Jb16OHpLlLdHKhbOGQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLhM2bw9Go8bRmu2cqMLxtln58UnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiL2MwMGUz ZC01OGQwLTRhZDctYWZjYi0yMjdlMGFjMGVjMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYzAwZTNk LTU4ZDAtNGFkNy1hZmNiLTIyN2UwYWMwZWMyZC8xL3VFelp2RDBhanh0R2E3Wnlv d3ZHMldmbnhTYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMLGzANBgkqhkiG9w0BAQsFAAOCAQEALpkGeW/a82QE CbKMuE5Ia4ztCJyYLYzL0hul1EN0f/fshArTNVvIl0UgaoMNTviGQQRGJ/Ju6pnx F3vVamjvAlu5oUnLuP29D55yV+HvQyVsxNq1HjxSHnNMyCYZbAYx6xti1rsGAUPv 4o1xPwj5l3yzQMWLdbBW6z1A7XrT8srKTiMSL+VKJN51hkw3YMlWO9b2+DObXEM5 45l0CFK2FwEpKVm2oMS+3lCpaNf+zGZs32j6u78f47MhfsLJ+LHHo2YpTCsLH53Y bX/FvFpD5XQoa+d26UzRX/1DlQWJ/BJ0Se59WwX5q4kztr+v0d1sHmJjlhTP7DG+ b1hqyC96xA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:30 2026 by rpki-client