This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer File: uFYxEIJXtx_jMLyYs6vBRslbiOA.cer (raw, json) Hash identifier: 67QzQOnaB1o+OkAnEmzYZBj0QYcluFI9LifUb38pxno= Subject key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8F0F6BD8879F93472B79B187E38CE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205270 AS: 206757 IP: 45.147.16.0/22 IP: 116.204.252.0/22 IP: 185.218.236.0/22 IP: 185.222.148.0/22 IP: 193.16.151.0/24 IP: 193.16.156.0/24 IP: 195.10.218.0/24 IP: 201.148.168.0/22 IP: 203.78.160.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f0:f6:bd:88:79:f9:34:72:b7:9b:18:7e:38:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b85631108257b71fe330bc98b3abc146c95b88e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2e:9b:8c:c3:b6:8b:75:6d:4b:11:21:89:6f: 01:32:ff:df:0a:5a:3c:ff:c5:bc:eb:2d:2f:83:2e: d1:5b:56:db:78:e8:3b:23:57:a0:08:e7:3f:67:60: e2:a7:3f:20:94:a0:cd:59:98:15:be:cf:ff:80:f0: 47:54:b6:69:cf:48:1d:4c:32:2d:c9:20:23:3c:c5: b2:ac:99:45:fe:b4:dc:45:fd:af:32:a0:f4:e9:d6: 1c:69:ad:c3:db:1e:1d:49:01:d3:95:06:b3:be:fb: 5c:65:0e:0e:a8:48:a2:8c:cc:26:5b:e1:96:fe:3d: 0c:2f:0c:bd:10:4b:a4:2d:c1:1a:ea:73:b9:6d:ba: 6a:65:e3:f8:c8:4b:52:d7:d3:d3:e9:b3:92:0a:03: 75:4e:31:22:35:20:33:cf:ba:97:1e:be:55:85:60: 9d:6e:91:6d:45:6f:2d:55:df:85:f0:87:84:7e:26: 11:fc:f4:0d:2e:02:19:e7:6e:57:34:1f:ed:16:06: 43:76:38:4b:5a:b0:9b:c7:7c:95:6c:57:ff:c8:41: e5:f6:b6:c0:bf:44:e3:71:93:b1:96:36:14:15:63: c0:03:48:3e:49:98:a1:2b:1a:83:48:74:c7:05:b4: 63:fe:c1:65:86:d8:88:55:d2:b4:ff:2d:df:91:23: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.16.0/22 116.204.252.0/22 185.218.236.0/22 185.222.148.0/22 193.16.151.0/24 193.16.156.0/24 195.10.218.0/24 201.148.168.0/22 203.78.160.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205270 206757 Signature Algorithm: sha256WithRSAEncryption 5e:7f:8d:c5:89:d7:6d:c0:1f:e5:02:92:93:37:d4:60:9e:a0: a9:f2:12:b4:bc:b5:bc:c5:a1:98:52:0d:d7:40:96:6b:03:07: c4:c5:25:16:a6:26:16:39:a3:42:68:16:0f:34:69:fc:cb:9b: 38:20:94:b5:d6:66:98:34:3e:8a:60:9a:1b:f3:99:0d:27:46: 49:80:a8:b1:e3:2b:22:e3:5a:7c:8d:47:e5:b1:96:6d:c2:1a: 19:86:1e:ef:22:9c:8a:07:fa:dc:5d:10:0b:b0:e1:92:ad:68: 7f:17:37:00:e0:32:f0:99:be:f4:a6:58:a5:32:49:04:a8:9d: a1:f5:64:79:37:c4:40:5e:91:13:05:28:dd:09:37:04:fb:cb: 1c:6c:90:10:de:33:14:3d:b2:40:3b:40:fd:28:ba:a4:5f:34: 45:cc:b5:56:40:64:da:51:03:aa:35:fd:8c:2e:c5:42:f5:ac: cf:f1:c4:67:86:1a:dd:7f:7d:47:c8:98:6d:44:d5:7d:fc:3a: ae:4b:c7:f7:0b:bc:1f:07:c7:8c:96:dd:2a:2b:e9:e6:98:ea: 1e:30:3d:e5:09:21:01:92:52:c7:ff:50:f5:62:72:e1:6a:9a: 07:2c:c8:37:b7:6b:2a:65:88:a3:5c:44:5f:77:f3:56:d3:7f: 19:d6:1b:64 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt6yPD2vYh5+TRyt5sYfjjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODU2MzExMDgyNTdiNzFmZTMzMGJjOThiM2FiYzE0NmM5NWI4OGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy6bjMO2i3VtSxEhiW8BMv/fClo8 /8W86y0vgy7RW1bbeOg7I1egCOc/Z2Dipz8glKDNWZgVvs//gPBHVLZpz0gdTDIt ySAjPMWyrJlF/rTcRf2vMqD06dYcaa3D2x4dSQHTlQazvvtcZQ4OqEiijMwmW+GW /j0MLwy9EEukLcEa6nO5bbpqZeP4yEtS19PT6bOSCgN1TjEiNSAzz7qXHr5VhWCd bpFtRW8tVd+F8IeEfiYR/PQNLgIZ525XNB/tFgZDdjhLWrCbx3yVbFf/yEHl9rbA v0TjcZOxljYUFWPAA0g+SZihKxqDSHTHBbRj/sFlhtiIVdK0/y3fkSNRCQIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFLhWMRCCV7cf4zC8mLOrwUbJW4jgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzU0ODdk ZS02Nzg0LTQwMmEtODdhYS1hMmVjYmE4ZTQ5OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvNTQ4N2Rl LTY3ODQtNDAyYS04N2FhLWEyZWNiYThlNDk5ZC8xL3VGWXhFSUpYdHhfak1MeVlz NnZCUnNsYmlPQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjA8BAIAATA2AwQCLZMQAwQCdMz8AwQCudrsAwQCud6UAwQAwRCX AwQAwRCcAwQAwwraAwQCyZSoAwQAy06gMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC AwMh1gIDAyelMA0GCSqGSIb3DQEBCwUAA4IBAQBef43FiddtwB/lApKTN9RgnqCp 8hK0vLW8xaGYUg3XQJZrAwfExSUWpiYWOaNCaBYPNGn8y5s4IJS11maYND6KYJob 85kNJ0ZJgKix4ysi41p8jUflsZZtwhoZhh7vIpyKB/rcXRALsOGSrWh/FzcA4DLw mb70plilMkkEqJ2h9WR5N8RAXpETBSjdCTcE+8scbJAQ3jMUPbJAO0D9KLqkXzRF zLVWQGTaUQOqNf2MLsVC9azP8cRnhhrdf31HyJhtRNV9/DquS8f3C7wfB8eMlt0q K+nmmOoeMD3lCSEBklLH/1D1YnLhapoHLMg3t2sqZYijXERfd/NW038Z1htk -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:23 2026 by rpki-client