This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer File: uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer (raw, json) Hash identifier: oAJVLaRZwrP6RJxoXTHppp4RCl0aLgYQqcMdex1s3d4= Subject key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F851D6234C3900A7D4A7F3DA1840728 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51865 AS: 198046 AS: 199170 AS: 201783 AS: 207319 AS: 212893 IP: 46.19.208.0/21 IP: 185.238.172.0/22 IP: 2a01:ad00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1d:62:34:c3:90:0a:7d:4a:7f:3d:a1:84:07:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:18:da:e6:80:d5:67:4c:f2:ab:7b:1c:9f:b7: 7c:c2:4e:b4:a3:34:b0:c3:7e:ae:c7:98:11:88:5f: 92:5f:a9:f8:ae:c8:b1:93:fa:ba:14:5d:7d:59:4b: 03:10:46:49:96:15:35:16:b6:f7:22:76:ef:53:16: 6d:09:23:02:7c:41:d5:72:d3:ce:5b:cc:b8:13:fd: 9c:67:c7:a1:dd:37:91:dc:2d:af:67:6e:5d:63:82: 5e:90:ab:b7:7b:77:af:41:03:e0:d6:f2:e6:b6:e0: 12:e8:94:5e:b7:9f:d5:cb:92:9e:53:c0:49:00:e4: ff:cb:63:ff:01:ad:d0:b0:82:dc:6f:3a:b7:a6:06: c5:74:02:11:21:f8:9e:e8:db:4a:16:27:c8:35:20: fb:ff:70:29:8e:8b:ea:e1:60:70:5b:e9:97:08:3c: c6:58:33:8f:59:f7:72:0d:e0:55:d3:49:4c:e2:b6: 02:55:ec:e4:04:6a:2a:43:28:d4:18:22:bc:7b:04: 82:25:60:6a:5d:15:39:52:f4:4c:d4:bd:ce:0c:8a: 4b:ca:c6:f7:58:93:7f:8a:47:a3:b4:28:21:72:07: 8e:e2:c2:72:87:9e:7b:91:98:e3:97:a3:80:17:19: df:37:5a:f0:8d:2b:e8:23:c2:e3:7b:56:99:99:bc: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.208.0/21 185.238.172.0/22 IPv6: 2a01:ad00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51865 198046 199170 201783 207319 212893 Signature Algorithm: sha256WithRSAEncryption 91:a3:af:05:ca:23:95:8d:9e:26:9b:d7:b6:5a:aa:1f:da:99: 1f:6f:01:8b:1f:bf:a3:83:22:a2:da:79:d8:3c:34:bc:43:d7: 85:11:c9:7f:4f:3f:43:3a:a4:3b:9b:12:5d:8f:85:99:cc:57: 5a:c4:af:7a:cb:7b:59:1e:60:e1:b3:30:f1:53:f1:23:75:86: 73:8f:ae:c2:fc:98:28:b2:ce:3b:10:fa:d9:d5:ec:bd:0c:01: d8:df:a6:04:53:ff:c1:0e:0e:94:35:5f:a6:cf:3b:b6:4d:24: 5a:b1:96:e8:18:a3:cc:a5:de:ee:d7:8b:8b:4d:87:24:bb:4a: a7:98:4e:d3:7a:e0:ab:23:5a:c9:3d:01:46:9f:c1:06:59:a1: 33:2a:92:3a:08:07:60:e2:a0:db:5b:75:0c:27:9c:97:77:f9: f5:2e:7f:de:94:7b:a2:73:3e:a7:50:80:1e:15:f4:b8:85:b5: 28:98:93:3e:2c:9e:1a:22:16:4f:75:c9:e7:3e:f9:43:fb:6e: 75:4b:f7:4a:02:18:b7:54:6d:a9:91:51:05:4f:07:56:90:ea: 47:fe:cc:1b:91:91:ae:a4:2a:73:d2:44:e0:46:d4:d2:89:dc: 49:43:94:4d:df:be:80:6c:97:bc:65:83:4a:bf:a4:37:3f:77: bf:48:ae:24 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZt/hR1iNMOQCn1Kfz2hhAcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTBkZmMyYTY1MWI1ZWZhYjJjMGNkNTkzMjJkNmQzYjU1OTA2NTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRja5oDVZ0zyq3scn7d8wk60ozSw w36ux5gRiF+SX6n4rsixk/q6FF19WUsDEEZJlhU1Frb3InbvUxZtCSMCfEHVctPO W8y4E/2cZ8eh3TeR3C2vZ25dY4JekKu3e3evQQPg1vLmtuAS6JRet5/Vy5KeU8BJ AOT/y2P/Aa3QsILcbzq3pgbFdAIRIfie6NtKFifINSD7/3Apjovq4WBwW+mXCDzG WDOPWfdyDeBV00lM4rYCVezkBGoqQyjUGCK8ewSCJWBqXRU5UvRM1L3ODIpLysb3 WJN/ikejtCghcgeO4sJyh557kZjjl6OAFxnfN1rwjSvoI8Lje1aZmbwTqQIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFLkN/CplG176ssDNWTItbTtVkGVjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4Lzg0N2Jj OC1mN2U2LTQzZTAtYTVjZi1kM2UxNmExNjNkZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvODQ3YmM4 LWY3ZTYtNDNlMC1hNWNmLWQzZTE2YTE2M2RkMy8xL3VRMzhLbVViWHZxeXdNMVpN aTF0TzFXUVpXTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLhPQAwQCue6sMA0EAgACMAcDBQAqAa0AMDMG CCsGAQUFBwEIAQH/BCQwIqAgMB4CAwDKmQIDAwWeAgMDCgICAwMUNwIDAynXAgMD P50wDQYJKoZIhvcNAQELBQADggEBAJGjrwXKI5WNniab17Zaqh/amR9vAYsfv6OD IqLaedg8NLxD14URyX9PP0M6pDubEl2PhZnMV1rEr3rLe1keYOGzMPFT8SN1hnOP rsL8mCiyzjsQ+tnV7L0MAdjfpgRT/8EODpQ1X6bPO7ZNJFqxlugYo8yl3u7Xi4tN hyS7SqeYTtN64KsjWsk9AUafwQZZoTMqkjoIB2DioNtbdQwnnJd3+fUuf96Ue6Jz PqdQgB4V9LiFtSiYkz4snhoiFk91yec++UP7bnVL90oCGLdUbamRUQVPB1aQ6kf+ zBuRka6kKnPSROBG1NKJ3ElDlE3fvoBsl7xlg0q/pDc/d79IriQ= -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:18 2026 by rpki-client