This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer File: uHt2aWhxYpblu6C86DhWrnFluLg.cer (raw, json) Hash identifier: bBoaN47MQ/drvfPnb7cipkDBoNYKnv2PxqKntnCsDUs= Subject key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB8C730863E8DB30765B4EF37266A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 66.245.192.0/19 IP: 78.141.192.0/18 IP: 80.240.16.0/20 IP: 95.179.128.0/17 IP: 185.92.220.0/22 IP: 192.248.128.0/18 IP: 199.247.0.0/19 IP: 209.250.224.0/19 IP: 217.69.0.0/20 IP: 2a05:f480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8c:73:08:63:e8:db:30:76:5b:4e:f3:72:66:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b87b766968716296e5bba0bce83856ae7165b8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:59:5e:37:43:46:0a:da:eb:c2:e5:ea:72: 78:ab:aa:c4:09:7e:b0:38:c3:96:69:d9:4a:b9:b2: 01:9f:17:d7:1d:dd:30:a5:e4:8d:4c:47:e5:0c:03: c4:9b:f0:33:a7:b5:94:c7:17:fe:44:23:a2:47:82: b3:d9:04:57:0a:18:d8:88:be:01:89:6f:14:bc:38: ab:19:ac:4e:1c:8e:97:a4:11:f6:04:c2:84:d7:dd: f9:64:9c:dc:52:3a:73:05:f7:ef:f6:52:0c:f2:2a: 3c:78:63:b0:f0:d6:98:81:e5:1e:6b:23:3b:17:e5: ca:8d:89:1e:18:ed:32:4c:82:eb:92:08:24:27:96: 5a:a7:29:77:17:ce:95:80:b7:a1:a4:72:f5:5a:eb: a2:96:46:24:8a:15:cd:93:99:14:a5:8c:2b:91:af: da:6a:f1:40:a7:51:5f:50:8d:89:68:d9:03:27:96: 1a:38:e2:b9:ee:3e:01:f9:fc:eb:b1:6e:ef:65:d8: ed:99:95:ca:35:4f:8f:04:fc:0a:48:04:2b:21:a0: 14:8e:52:b6:75:ed:82:f6:99:62:a4:6a:2e:0a:fd: 7b:88:eb:fd:0f:06:ea:b0:96:40:43:60:08:74:88: fb:c1:6c:4f:0d:64:9a:1e:0c:57:29:3d:5a:04:81: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.245.192.0/19 78.141.192.0/18 80.240.16.0/20 95.179.128.0/17 185.92.220.0/22 192.248.128.0/18 199.247.0.0/19 209.250.224.0/19 217.69.0.0/20 IPv6: 2a05:f480::/29 Signature Algorithm: sha256WithRSAEncryption 15:65:23:fe:f8:50:0f:8b:b9:03:b5:60:d3:c6:00:8e:d6:36: e8:45:61:97:9b:20:3b:32:33:fb:4e:cf:39:42:d7:ee:83:9f: 83:4a:90:19:96:cc:4a:b1:ab:2d:a5:73:d0:12:5e:1f:e8:af: c4:f7:66:54:33:47:0c:15:49:21:37:af:6b:83:de:b7:a6:08: a0:2b:41:2d:90:14:4c:97:72:ae:37:62:e8:75:1b:a4:e7:dc: 15:62:08:cf:be:b3:8a:c0:a2:c2:58:5b:e0:e4:6a:2a:53:15: eb:63:1a:21:49:e3:e1:ae:f1:78:a4:c3:d5:c6:ac:a7:85:f2: b2:9e:cb:72:5e:41:b8:78:82:5f:59:93:80:25:b7:c0:cc:bf: af:98:b3:8e:d7:d3:ce:e2:9e:8d:a4:9b:a1:f5:76:18:ac:45: 89:ad:5b:0f:62:de:d1:53:c3:68:ec:20:b0:73:25:61:5d:bb: 4f:05:05:62:cc:b2:29:b7:41:37:71:bb:84:25:c9:4b:7a:e6: d7:4b:c8:8d:a1:27:12:05:3a:b3:73:c8:e5:5c:1b:a3:c0:9a: 80:b8:cf:ed:0a:e2:b5:7a:c0:58:cc:26:d9:8f:1a:a0:1b:3d: 72:4e:c5:06:cd:18:9f:5b:73:55:3d:05:62:1b:69:15:92:c0: e7:d1:24:db -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt264xzCGPo2zB2W07zcmapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODdiNzY2OTY4NzE2Mjk2ZTViYmEwYmNlODM4NTZhZTcxNjViOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcJZXjdDRgra68Ll6nJ4q6rECX6w OMOWadlKubIBnxfXHd0wpeSNTEflDAPEm/Azp7WUxxf+RCOiR4Kz2QRXChjYiL4B iW8UvDirGaxOHI6XpBH2BMKE1935ZJzcUjpzBffv9lIM8io8eGOw8NaYgeUeayM7 F+XKjYkeGO0yTILrkggkJ5Zapyl3F86VgLehpHL1WuuilkYkihXNk5kUpYwrka/a avFAp1FfUI2JaNkDJ5YaOOK57j4B+fzrsW7vZdjtmZXKNU+PBPwKSAQrIaAUjlK2 de2C9plipGouCv17iOv9DwbqsJZAQ2AIdIj7wWxPDWSaHgxXKT1aBIEeiwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFLh7dmlocWKW5bugvOg4Vq5xZbi4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5L2EzZWRl Ni1iYzMxLTRkMDAtOTI1Yy0zZDYxMmYzMjQ5OTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvYTNlZGU2 LWJjMzEtNGQwMC05MjVjLTNkNjEyZjMyNDk5Ni8xL3VIdDJhV2h4WXBibHU2Qzg2 RGhXcm5GbHVMZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQFQvXAAwQGTo3AAwQEUPAQAwQHX7OAAwQCuVzc AwQGwPiAAwQFx/cAAwQF0frgAwQE2UUAMA0EAgACMAcDBQMqBfSAMA0GCSqGSIb3 DQEBCwUAA4IBAQAVZSP++FAPi7kDtWDTxgCO1jboRWGXmyA7MjP7Ts85Qtfug5+D SpAZlsxKsastpXPQEl4f6K/E92ZUM0cMFUkhN69rg963pgigK0EtkBRMl3KuN2Lo dRuk59wVYgjPvrOKwKLCWFvg5GoqUxXrYxohSePhrvF4pMPVxqynhfKynstyXkG4 eIJfWZOAJbfAzL+vmLOO19PO4p6NpJuh9XYYrEWJrVsPYt7RU8No7CCwcyVhXbtP BQVizLIpt0E3cbuEJclLeubXS8iNoScSBTqzc8jlXBujwJqAuM/tCuK1esBYzCbZ jxqgGz1yTsUGzRifW3NVPQViG2kVksDn0STb -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:52 2026 by rpki-client