This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer File: uF6twuxwsw-kIl7X_NVzDwx7xhY.cer (raw, json) Hash identifier: 7h0KIkMVWYTDn7mBeODR2Vq//O4EPFbVh94rcazQsaQ= Subject key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35917DA5CA4776D1F015D054AB3A7F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20714 IP: 31.42.48.0/20 IP: 31.128.224.0/19 IP: 195.177.124.0/22 IP: 195.214.196.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:91:7d:a5:ca:47:76:d1:f0:15:d0:54:ab:3a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:48:6d:3f:f6:c9:bd:16:d0:77:8a:e7:32:a1: 16:92:38:3e:c6:0c:84:52:e0:0a:7b:e6:10:81:81: 98:54:ad:dc:52:f6:c9:ad:b9:63:d1:7a:cd:c3:09: b8:4b:78:64:75:87:b1:2c:69:0b:2a:6b:ab:2b:f4: 53:74:55:c4:0a:33:da:4c:d5:1a:04:00:07:ac:cd: 1b:81:72:10:78:6c:ed:24:d7:0b:90:fc:9a:6f:1f: 36:55:08:95:d6:4d:64:9c:c4:fb:dc:32:53:09:d5: f5:75:4b:eb:3e:58:f1:02:d2:4b:c9:f5:b2:74:b7: 74:1c:9c:64:13:ce:1f:a6:04:b2:2a:00:90:7a:fb: 74:28:98:5e:e7:1d:18:04:4c:cb:38:8d:59:6f:c4: 22:87:0c:95:7b:9b:5f:15:9d:2a:6c:2c:99:93:aa: b3:c3:f5:ef:d2:3a:cb:54:8f:b3:79:d3:09:64:e2: a8:85:f0:1d:93:bb:a7:c9:32:9f:c7:09:af:67:bf: 12:17:e4:bc:d7:34:17:47:97:52:93:a2:12:c0:29: 8b:68:37:08:4d:ec:e5:30:b4:f8:b8:e7:ac:91:74: 60:b9:4a:e4:89:52:37:79:7e:87:b9:30:8c:58:78: d5:fc:7b:ab:68:7b:6a:cf:6e:e9:b4:f6:1b:41:c0: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.48.0/20 31.128.224.0/19 195.177.124.0/22 195.214.196.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20714 Signature Algorithm: sha256WithRSAEncryption 0f:e2:37:83:96:a7:05:b5:df:82:ae:83:6e:c1:8c:c8:a8:80: 7b:38:5e:8c:d4:36:c1:b1:ff:2d:19:bb:af:0d:d4:96:9b:e0: 3d:5a:dd:8a:96:b9:07:f9:f3:ae:b1:1c:e4:0c:5d:ce:3d:a0: bf:57:b7:f5:47:94:ff:08:86:3a:a9:1f:42:ab:e6:d7:bd:0f: 58:40:20:76:73:1b:1a:90:0d:66:52:54:49:3b:68:67:19:c4: 76:cb:24:d3:ed:93:25:ed:5a:9e:59:8e:4f:c7:10:84:af:8d: 22:27:28:af:4f:72:c6:2e:c7:b3:93:b2:23:9b:c7:07:81:cf: d2:6b:19:05:11:6d:ad:96:10:fa:37:cc:97:51:b3:a1:b3:63: 7c:fc:8f:ea:d1:78:12:a5:c4:ce:69:97:88:b2:cf:5f:af:12: 8f:70:ef:f2:64:a1:bd:29:b3:d2:ea:21:44:66:85:ac:72:7d: b9:b6:ef:cd:44:98:78:7b:c4:5a:01:9d:1d:ef:97:2e:ee:c4: 26:43:5f:42:05:7c:98:c6:f3:1e:2e:01:5c:27:7a:27:0c:ec: d8:fb:df:35:c4:35:ef:8c:c4:1b:64:d3:e9:4d:41:15:09:e9: 12:47:2b:9c:60:cb:2c:9a:de:e4:4b:8d:67:28:97:b3:c7:11: 41:a3:4a:f8 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt7NZF9pcpHdtHwFdBUqzp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODVlYWRjMmVjNzBiMzBmYTQyMjVlZDdmY2Q1NzMwZjBjN2JjNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0htP/bJvRbQd4rnMqEWkjg+xgyE UuAKe+YQgYGYVK3cUvbJrblj0XrNwwm4S3hkdYexLGkLKmurK/RTdFXECjPaTNUa BAAHrM0bgXIQeGztJNcLkPyabx82VQiV1k1knMT73DJTCdX1dUvrPljxAtJLyfWy dLd0HJxkE84fpgSyKgCQevt0KJhe5x0YBEzLOI1Zb8QihwyVe5tfFZ0qbCyZk6qz w/Xv0jrLVI+zedMJZOKohfAdk7unyTKfxwmvZ78SF+S81zQXR5dSk6ISwCmLaDcI TezlMLT4uOeskXRguUrkiVI3eX6HuTCMWHjV/HuraHtqz27ptPYbQcCONwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFLhercLscLMPpCJe1/zVcw8Me8YWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1L2YwN2Ix OC0xOWQ3LTQxZjItYWY2Yi1iYzdhMjA4YTVlMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvZjA3YjE4 LTE5ZDctNDFmMi1hZjZiLWJjN2EyMDhhNWUyZS8xL3VGNnR3dXh3c3cta0lsN1hf TlZ6RHd4N3hoWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQEHyowAwQFH4DgAwQCw7F8AwQCw9bEMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAlDqMA0GCSqGSIb3DQEBCwUAA4IBAQAP4jeDlqcF td+CroNuwYzIqIB7OF6M1DbBsf8tGbuvDdSWm+A9Wt2KlrkH+fOusRzkDF3OPaC/ V7f1R5T/CIY6qR9Cq+bXvQ9YQCB2cxsakA1mUlRJO2hnGcR2yyTT7ZMl7VqeWY5P xxCEr40iJyivT3LGLsezk7Ijm8cHgc/SaxkFEW2tlhD6N8yXUbOhs2N8/I/q0XgS pcTOaZeIss9frxKPcO/yZKG9KbPS6iFEZoWscn25tu/NRJh4e8RaAZ0d75cu7sQm Q19CBXyYxvMeLgFcJ3onDOzY+981xDXvjMQbZNPpTUEVCekSRyucYMssmt7kS41n KJezxxFBo0r4 -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:42 2026 by rpki-client