This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer File: uFnbfywuOzq9i_QV8M4f_zNDKew.cer (raw, json) Hash identifier: lTe/AlE/VPMclxpq0Snd7I4q+HZzs4bCq7R7dQZh6kE= Subject key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB47EBECB3840CE2F11E71EEE86609 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.54.218.0/23 IP: 185.159.136.0/22 IP: 195.28.22.0/23 IP: 2a07:b440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:47:eb:ec:b3:84:0c:e2:f1:1e:71:ee:e8:66:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:20:66:13:99:72:65:c2:28:f3:30:ff:29: 30:2a:fd:7a:5b:cd:22:0f:32:7e:4f:e6:f7:e4:1b: 89:d9:ba:92:b4:3b:3c:9c:a7:49:cc:32:3f:19:92: f6:f8:fd:5a:cf:0f:f2:67:40:d7:f9:4a:f4:ab:fc: 78:d9:8b:9d:78:83:1d:85:67:4c:d4:54:02:13:cd: e5:67:ba:79:0c:7f:bb:0a:04:40:c6:75:a2:76:34: cc:e4:a9:7c:75:14:93:c7:37:60:03:93:63:09:41: e5:b2:53:54:0b:4f:d6:3f:27:24:1e:a8:40:d0:e2: 16:30:02:83:e2:62:c8:86:d6:8b:2a:d2:cc:4e:d4: d1:6f:ac:c3:9e:c5:9d:8b:36:26:6a:8e:80:82:63: 29:45:2a:53:b8:5e:ef:60:f7:1d:77:d3:56:df:20: 22:7d:49:ca:f4:ee:b0:03:0c:2c:46:ba:65:46:cd: f5:26:ee:a9:1f:d9:15:80:3a:b5:c1:ae:d7:32:24: 71:41:b7:a5:50:70:6d:19:a2:c5:10:89:60:ad:25: 2f:8d:da:da:d1:7d:7d:43:a8:c5:71:12:ad:cb:86: d0:3c:e0:9f:7e:ef:a8:2d:50:64:ff:25:22:b4:ab: 1c:02:8e:fc:9f:9c:07:8a:60:ed:62:c0:05:76:21: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.218.0/23 185.159.136.0/22 195.28.22.0/23 IPv6: 2a07:b440::/29 Signature Algorithm: sha256WithRSAEncryption 79:8a:b5:80:05:c5:0e:48:13:e9:6a:8d:e1:93:77:8d:aa:2e: ac:c5:42:98:46:fc:72:26:f3:2b:a6:46:f2:03:61:12:36:ce: c0:59:bf:c2:70:43:e1:d4:8e:ea:f2:c5:9e:bc:0e:50:31:8d: 9b:f6:e6:d8:df:72:5f:0e:95:5d:4b:b6:eb:0d:bc:5a:1c:1e: e3:1c:61:33:f8:7d:38:11:09:a5:27:d5:2f:50:b9:04:55:fd: 0e:fb:1c:88:ee:28:95:ac:c3:f1:16:a2:1a:3c:9c:aa:16:74: fd:0d:2d:28:3d:bb:a3:4a:cb:a9:06:e4:88:bc:80:17:25:1f: 9f:19:a4:40:00:07:4e:82:f1:a6:75:f6:29:ff:e6:16:ad:fd: ee:d6:92:be:9e:3b:01:20:e5:88:ab:fb:df:96:c8:05:24:5e: 24:dd:e4:1d:dd:fe:6e:0e:46:58:71:96:05:97:36:49:c9:76: ca:04:37:7b:90:bf:54:14:1f:58:ce:dd:ac:e9:1a:c7:0e:e3: 65:af:09:59:bd:3c:05:6c:16:72:d0:54:19:ff:89:02:ed:68: b8:6d:9d:6e:83:c3:58:89:04:3e:14:d5:23:b1:9f:78:0d:f1: f3:d0:45:a2:2a:8f:0c:22:70:ae:0d:80:bd:35:73:b2:72:a8: dc:6b:0b:8f -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt260fr7LOEDOLxHnHu6GYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODU5ZGI3ZjJjMmUzYjNhYmQ4YmY0MTVmMGNlMWZmZjMzNDMyOWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4sgZhOZcmXCKPMw/ykwKv16W80i DzJ+T+b35BuJ2bqStDs8nKdJzDI/GZL2+P1azw/yZ0DX+Ur0q/x42YudeIMdhWdM 1FQCE83lZ7p5DH+7CgRAxnWidjTM5Kl8dRSTxzdgA5NjCUHlslNUC0/WPyckHqhA 0OIWMAKD4mLIhtaLKtLMTtTRb6zDnsWdizYmao6AgmMpRSpTuF7vYPcdd9NW3yAi fUnK9O6wAwwsRrplRs31Ju6pH9kVgDq1wa7XMiRxQbelUHBtGaLFEIlgrSUvjdra 0X19Q6jFcRKty4bQPOCffu+oLVBk/yUitKscAo78n5wHimDtYsAFdiFk0QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLhZ238sLjs6vYv0FfDOH/8zQynsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzdlYjdj My1lMzRhLTRmYmMtOTI3Mi00YzFjNTdhODFmZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvN2ViN2Mz LWUzNGEtNGZiYy05MjcyLTRjMWM1N2E4MWZmZC8xL3VGbmJmeXd1T3pxOWlfUVY4 TTRmX3pOREtldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBuTbaAwQCuZ+IAwQBwxwWMA0EAgACMAcDBQMq B7RAMA0GCSqGSIb3DQEBCwUAA4IBAQB5irWABcUOSBPpao3hk3eNqi6sxUKYRvxy JvMrpkbyA2ESNs7AWb/CcEPh1I7q8sWevA5QMY2b9ubY33JfDpVdS7brDbxaHB7j HGEz+H04EQmlJ9UvULkEVf0O+xyI7iiVrMPxFqIaPJyqFnT9DS0oPbujSsupBuSI vIAXJR+fGaRAAAdOgvGmdfYp/+YWrf3u1pK+njsBIOWIq/vflsgFJF4k3eQd3f5u DkZYcZYFlzZJyXbKBDd7kL9UFB9Yzt2s6RrHDuNlrwlZvTwFbBZy0FQZ/4kC7Wi4 bZ1ug8NYiQQ+FNUjsZ94DfHz0EWiKo8MInCuDYC9NXOycqjcawuP -----END CERTIFICATE-----Generated at Mon Jan 26 22:28:34 2026 by rpki-client