This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer File: uNI7HmwH5iry0ufrbeCJOwkRmrs.cer (raw, json) Hash identifier: ggdYfRBGRji+oHdPIlbezT4925RY8SbS1VpJWqa6g4k= Subject key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910A5F43EAA134D32E1C3935D2C2647 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204141 IP: 82.211.192.0/19 IP: 185.140.0.0/22 IP: 2a03:19c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a5:f4:3e:aa:13:4d:32:e1:c3:93:5d:2c:26:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:77:bc:a6:1d:ed:ee:c1:de:ff:2e:b1:f8: a7:65:f3:0b:c4:74:fc:bb:79:bd:49:a0:4b:47:23: 56:15:e5:90:d2:88:e0:b4:b0:50:10:2f:e2:d8:05: 7c:74:79:a2:88:c3:2c:5c:39:31:3b:3d:db:2c:80: fd:6c:54:dd:f4:d8:c2:3b:6b:29:cc:6b:6e:98:57: 87:66:94:62:85:3a:4f:97:22:25:0c:73:f0:70:8b: 3c:59:2f:fb:93:66:58:ee:31:3d:cd:02:ad:3d:97: ff:f4:6b:8d:53:18:d4:28:77:a3:56:4b:39:3a:d2: 13:c9:42:c7:92:21:5b:07:ba:98:9b:73:9b:48:8c: bd:5e:3e:a6:60:d8:d3:67:04:8f:31:ce:6d:81:3f: 02:52:32:4f:f6:72:81:21:5a:e8:29:7b:09:c5:06: 14:96:e7:aa:ed:e4:d5:06:a1:ae:7f:c7:ea:55:84: 64:4f:95:a6:cb:e9:96:9a:6c:e0:c5:8b:ef:26:90: 02:8c:0b:52:8c:4b:12:0f:ba:f2:d2:94:93:86:79: 88:c1:eb:d4:40:4f:c7:28:c9:f0:8a:47:dc:3d:af: e1:a0:a2:54:16:a4:76:74:c4:00:b0:e5:18:af:54: 4a:d8:a0:54:b6:f8:11:6b:c1:8a:74:43:fe:87:cf: 02:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.211.192.0/19 185.140.0.0/22 IPv6: 2a03:19c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204141 Signature Algorithm: sha256WithRSAEncryption 22:70:8c:85:93:3e:a0:22:c9:04:68:60:56:aa:01:e4:97:d5: 0f:03:8e:18:94:be:c1:a0:c6:60:b6:7c:e4:1a:ce:60:15:95: 0c:6c:fe:26:c7:d7:f1:55:8b:d9:da:16:0d:ce:67:c8:8c:dd: ad:32:cf:e9:cc:1e:7b:19:a6:74:51:1f:49:52:2d:48:57:c8: 7d:6a:ab:c8:e8:3a:e7:3f:58:f1:db:c8:6c:e6:96:9d:33:70: 5b:07:60:94:ca:a7:0d:55:c5:38:54:fc:43:28:cc:f8:5e:03: 0c:fc:32:65:a8:c0:90:78:0b:3f:68:46:22:c4:2d:8d:d4:fa: 2b:c4:99:8f:4e:65:81:0c:c9:4b:11:22:8a:f7:4b:51:c2:6e: 5a:8a:49:2f:e1:1f:7c:60:b3:e2:a0:a9:b1:40:9c:b0:29:eb: bd:4a:33:db:60:38:26:a2:82:3b:1a:5f:c0:59:b2:0c:97:26: 47:95:7d:8c:53:55:39:d0:a6:77:22:5f:8c:3b:2e:13:7f:e9: c6:56:70:1f:e4:16:91:e0:67:ae:97:8a:59:b9:1f:68:d1:4a: 06:44:e8:c6:51:a0:15:57:c0:e9:10:1b:0a:8a:cc:67:f1:30: 55:56:7e:80:fc:bb:61:8f:75:f7:20:1c:e0:75:61:46:03:a3: 1d:c8:41:9f -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EKX0PqoTTTLhw5NdLCZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGQyM2IxZTZjMDdlNjJhZjJkMmU3ZWI2ZGUwODkzYjA5MTE5YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVJ3vKYd7e7B3v8usfinZfMLxHT8 u3m9SaBLRyNWFeWQ0ojgtLBQEC/i2AV8dHmiiMMsXDkxOz3bLID9bFTd9NjCO2sp zGtumFeHZpRihTpPlyIlDHPwcIs8WS/7k2ZY7jE9zQKtPZf/9GuNUxjUKHejVks5 OtITyULHkiFbB7qYm3ObSIy9Xj6mYNjTZwSPMc5tgT8CUjJP9nKBIVroKXsJxQYU lueq7eTVBqGuf8fqVYRkT5Wmy+mWmmzgxYvvJpACjAtSjEsSD7ry0pSThnmIwevU QE/HKMnwikfcPa/hoKJUFqR2dMQAsOUYr1RK2KBUtvgRa8GKdEP+h88CEQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLjSOx5sB+Yq8tLn623giTsJEZq7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmL2I3NGFh Mi0yNWUwLTRhZDUtOGNjMy02OTA2MWVmMmM0OTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvYjc0YWEy LTI1ZTAtNGFkNS04Y2MzLTY5MDYxZWYyYzQ5OS8xL3VOSTdIbXdINWlyeTB1ZnJi ZUNKT3drUm1ycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFUtPAAwQCuYwAMA0EAgACMAcDBQAqAxnAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdbTANBgkqhkiG9w0BAQsFAAOCAQEAInCM hZM+oCLJBGhgVqoB5JfVDwOOGJS+waDGYLZ85BrOYBWVDGz+JsfX8VWL2doWDc5n yIzdrTLP6cweexmmdFEfSVItSFfIfWqryOg65z9Y8dvIbOaWnTNwWwdglMqnDVXF OFT8QyjM+F4DDPwyZajAkHgLP2hGIsQtjdT6K8SZj05lgQzJSxEiivdLUcJuWopJ L+EffGCz4qCpsUCcsCnrvUoz22A4JqKCOxpfwFmyDJcmR5V9jFNVOdCmdyJfjDsu E3/pxlZwH+QWkeBnrpeKWbkfaNFKBkToxlGgFVfA6RAbCorMZ/EwVVZ+gPy7YY91 9yAc4HVhRgOjHchBnw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:12:37 2026 by rpki-client