This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer (raw, json) Hash identifier: HqLb5Ssxcb9iEIshn8Yh7JwlMDtv9/QVZkb7CVNyGyA= Subject key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9705C258A6CB6B6DA211BE52A3AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60481 IP: 185.78.40.0/22 IP: 2001:67c:173c::/48 IP: 2a03:57e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:97:05:c2:58:a6:cb:6b:6d:a2:11:be:52:a3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8d14227473e4b75c877274cf6c050f25c57721f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6d:0a:5d:ee:80:e9:e7:f7:1c:dd:0d:f1:2b: 47:fc:c0:6e:35:58:08:51:95:bb:bb:01:5b:d2:f9: 5b:02:ec:c6:f2:d0:29:44:1e:67:3a:65:1f:f1:93: 02:2a:e3:a0:7a:7b:1f:d3:f2:fa:d3:92:8a:d5:aa: 11:68:30:0c:04:17:b1:28:1a:d6:42:c7:3a:09:0e: 69:23:47:03:9d:08:88:52:52:de:cb:00:9e:f8:f1: 08:84:bb:1d:c2:6b:ed:05:95:d8:c3:cd:3d:56:15: 09:d1:23:ad:19:0b:e5:35:6c:5d:bc:89:9e:bc:48: 01:17:d1:f9:8a:d2:55:99:69:e1:12:82:a7:39:7b: 17:1a:db:77:95:52:f6:35:d4:9c:f8:2e:7b:53:ef: 81:9d:7b:65:50:a7:95:dd:6c:02:09:77:66:f6:1f: ce:51:25:1c:09:9e:b2:d0:b1:9d:ba:b8:3d:7a:a9: 9a:74:62:b7:c1:af:d0:98:0e:ec:aa:d0:bf:44:56: 45:74:ee:37:27:fb:23:d0:64:c1:fc:f2:d8:bc:62: 2f:89:7e:04:4f:3f:35:6d:35:67:fc:07:e1:69:64: 56:f4:61:bb:38:58:c9:e6:89:f5:b1:44:71:66:a8: a1:83:d3:a9:b8:12:df:58:95:08:8a:d3:b0:e5:83: 78:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.40.0/22 IPv6: 2001:67c:173c::/48 2a03:57e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60481 Signature Algorithm: sha256WithRSAEncryption 6b:48:a4:62:65:98:51:8b:f5:12:bb:7d:ba:33:24:08:0f:7d: c9:26:a0:33:3b:4c:e7:85:4a:71:25:39:ea:db:d1:5c:93:3e: 6e:a9:70:18:85:b4:a7:ef:e7:06:71:12:42:17:21:12:f9:11: cb:61:25:fa:a8:db:32:66:78:39:cd:c2:b7:c0:b1:ef:18:d7: d9:a7:01:93:9f:a1:17:64:5c:57:8a:29:dd:00:9f:88:9e:2c: 45:40:41:ac:03:a3:54:58:4c:57:9e:c3:31:b3:79:36:e8:ec: ae:dc:d2:17:45:cc:6c:f0:59:89:33:7c:ce:63:22:5f:dc:87: 9a:ab:49:d1:36:6c:ef:a3:b3:b7:aa:ac:43:78:18:56:44:31: 40:0b:8d:2b:36:38:ad:c9:1c:64:0c:f3:05:a7:06:df:c1:b5: fe:7f:cf:99:1b:e1:40:8d:cd:40:ab:95:b9:e1:8e:42:47:2c: fb:fb:11:23:3d:6f:80:b7:f9:0a:2b:a2:32:fd:6f:75:36:8b: 0e:4a:4b:c0:b2:95:82:9e:01:94:6d:36:4d:6c:7c:9a:15:79: 76:e0:e5:b1:8f:b5:2d:76:b4:5a:63:92:98:01:e8:d7:4d:fc: f5:14:6f:92:25:db:71:bc:f7:6d:b4:94:8f:b0:90:ee:19:d7: 87:6a:9b:0d -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt6W5cFwlimy2ttohG+UqOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGQxNDIyNzQ3M2U0Yjc1Yzg3NzI3NGNmNmMwNTBmMjVjNTc3MjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm0KXe6A6ef3HN0N8StH/MBuNVgI UZW7uwFb0vlbAuzG8tApRB5nOmUf8ZMCKuOgensf0/L605KK1aoRaDAMBBexKBrW Qsc6CQ5pI0cDnQiIUlLeywCe+PEIhLsdwmvtBZXYw809VhUJ0SOtGQvlNWxdvIme vEgBF9H5itJVmWnhEoKnOXsXGtt3lVL2NdSc+C57U++BnXtlUKeV3WwCCXdm9h/O USUcCZ6y0LGdurg9eqmadGK3wa/QmA7sqtC/RFZFdO43J/sj0GTB/PLYvGIviX4E Tz81bTVn/AfhaWRW9GG7OFjJ5on1sURxZqihg9OpuBLfWJUIitOw5YN4rwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFLjRQidHPkt1yHcnTPbAUPJcV3IfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2Q3NGI4 MC00MGVhLTRlMzQtYjUwZC0xMTRmYWNlMWE1NzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvZDc0Yjgw LTQwZWEtNGUzNC1iNTBkLTExNGZhY2UxYTU3MS8xL3VORkNKMGMtUzNYSWR5ZE05 c0JROGx4WGNoOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQCuU4oMBYEAgACMBADBwAgAQZ8FzwDBQAqA1fg MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsQTANBgkqhkiG9w0BAQsFAAOCAQEA a0ikYmWYUYv1Ert9ujMkCA99ySagMztM54VKcSU56tvRXJM+bqlwGIW0p+/nBnES QhchEvkRy2El+qjbMmZ4Oc3Ct8Cx7xjX2acBk5+hF2RcV4op3QCfiJ4sRUBBrAOj VFhMV57DMbN5NujsrtzSF0XMbPBZiTN8zmMiX9yHmqtJ0TZs76Ozt6qsQ3gYVkQx QAuNKzY4rckcZAzzBacG38G1/n/PmRvhQI3NQKuVueGOQkcs+/sRIz1vgLf5Ciui Mv1vdTaLDkpLwLKVgp4BlG02TWx8mhV5duDlsY+1LXa0WmOSmAHo10389RRvkiXb cbz3bbSUj7CQ7hnXh2qbDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:43 2026 by rpki-client