This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer File: uQMr2xKMhuALIcd5WagBHEDQZQw.cer (raw, json) Hash identifier: kw/1MQeNUjALHEKMMBbgDe+jmAeEA0YwMhusY1U08hE= Subject key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3774690CF58A47A163D89D794CDCC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211878 IP: 45.152.88.0/22 IP: 2a0f:5100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:74:69:0c:f5:8a:47:a1:63:d8:9d:79:4c:dc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9032bdb128c86e00b21c77959a8011c40d0650c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:75:57:5b:e1:04:40:e9:58:fb:81:84:e2: ad:59:c4:87:60:89:f0:1a:b9:89:a8:1c:46:0d:df: c2:04:12:50:3d:49:c0:2f:84:d1:57:21:21:e9:5f: 45:bb:6b:5f:45:46:a7:a3:e4:2e:ad:ec:94:08:9f: 07:d9:7c:92:e9:f7:53:c2:61:7b:ed:d5:86:3d:07: 27:f3:c6:e0:b4:76:c3:d3:0c:a0:cf:43:64:18:d3: 01:60:b5:ec:bc:94:be:42:49:47:5c:53:3a:01:37: fd:f2:fa:da:1c:f7:7d:a9:b0:75:37:a8:f2:a8:65: cc:d4:76:c1:3e:80:5b:ec:f5:c0:55:bb:ee:7b:a0: f3:6f:ff:db:28:3f:8e:09:8c:b0:be:75:66:35:31: 0f:27:93:83:84:84:26:dd:cf:e6:80:e1:e7:88:c5: 97:b6:bb:af:0b:75:ef:7c:6d:5c:eb:cd:b3:51:ac: 1b:96:92:ce:82:80:fd:b2:cf:0a:2a:82:4e:d9:9d: 9b:59:d1:39:2b:3c:30:88:2d:af:18:35:0b:af:b1: 55:c3:ee:dc:e1:17:f7:94:3b:be:b5:a1:aa:47:26: 07:d6:76:d1:8f:07:fa:e7:f5:3e:34:13:56:c6:84: 62:d5:c0:1b:b7:d4:c8:24:30:9a:cc:73:6d:a3:f0: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.88.0/22 IPv6: 2a0f:5100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211878 Signature Algorithm: sha256WithRSAEncryption 59:5c:2d:29:c7:ae:fe:0c:0b:9b:db:00:28:c9:30:96:a2:49: 9f:a5:0f:d0:d1:50:11:cc:e2:4f:36:25:89:62:f1:7a:4e:f1: f7:90:3f:3c:2f:56:3d:da:77:da:49:e7:0d:40:7b:dd:09:a8: 76:52:b1:a6:85:ab:c7:86:70:85:5f:91:86:81:a1:10:93:fb: dc:04:33:ef:56:c8:b3:1b:3c:6c:3d:f8:19:9b:78:dc:c3:0f: 3b:e1:76:3b:b7:f6:33:32:e9:0f:09:0c:54:0c:be:d0:2a:39: 88:88:96:7e:c6:ed:ed:e2:51:76:32:cd:21:3b:69:a3:3a:9b: bc:ee:5d:51:1f:a8:bc:8b:2b:be:10:56:0f:29:22:a8:dd:13: 17:c6:2c:ac:e5:26:be:81:06:97:e5:12:36:0d:b7:2e:83:ee: 28:89:d1:bb:03:c5:b0:28:54:55:b7:c9:f5:b0:d9:71:31:cd: a2:d1:e9:b5:0c:aa:52:a9:58:31:7b:c0:7d:c7:5d:c4:1a:3c: 95:40:b3:02:75:59:22:f5:e2:f9:dd:95:bc:27:3f:53:81:ee: 40:2b:8d:ce:0b:50:65:d1:6c:26:75:11:72:38:b5:f6:57:9d: 60:e9:88:b7:ae:c9:12:2d:5c:08:56:e7:20:05:d0:13:2a:20: 87:ac:19:5b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N3RpDPWKR6Fj2J15TNzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTAzMmJkYjEyOGM4NmUwMGIyMWM3Nzk1OWE4MDExYzQwZDA2NTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W51V1vhBEDpWPuBhOKtWcSHYInw GrmJqBxGDd/CBBJQPUnAL4TRVyEh6V9Fu2tfRUano+QureyUCJ8H2XyS6fdTwmF7 7dWGPQcn88bgtHbD0wygz0NkGNMBYLXsvJS+QklHXFM6ATf98vraHPd9qbB1N6jy qGXM1HbBPoBb7PXAVbvue6Dzb//bKD+OCYywvnVmNTEPJ5ODhIQm3c/mgOHniMWX truvC3XvfG1c682zUawblpLOgoD9ss8KKoJO2Z2bWdE5KzwwiC2vGDULr7FVw+7c 4Rf3lDu+taGqRyYH1nbRjwf65/U+NBNWxoRi1cAbt9TIJDCazHNto/D4DQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLkDK9sSjIbgCyHHeVmoARxA0GUMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2JjYjAz ZC0xYzExLTQ1MTYtYTg4Zi1mZTg0NmY3NWQxNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvYmNiMDNk LTFjMTEtNDUxNi1hODhmLWZlODQ2Zjc1ZDE3MC8xL3VRTXIyeEtNaHVBTEljZDVX YWdCSEVEUVpRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZhYMA0EAgACMAcDBQMqD1EAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM7pjANBgkqhkiG9w0BAQsFAAOCAQEAWVwtKceu/gwL m9sAKMkwlqJJn6UP0NFQEcziTzYliWLxek7x95A/PC9WPdp32knnDUB73QmodlKx poWrx4ZwhV+RhoGhEJP73AQz71bIsxs8bD34GZt43MMPO+F2O7f2MzLpDwkMVAy+ 0Co5iIiWfsbt7eJRdjLNITtpozqbvO5dUR+ovIsrvhBWDykiqN0TF8YsrOUmvoEG l+USNg23LoPuKInRuwPFsChUVbfJ9bDZcTHNotHptQyqUqlYMXvAfcddxBo8lUCz AnVZIvXi+d2VvCc/U4HuQCuNzgtQZdFsJnURcji19ledYOmIt67JEi1cCFbnIAXQ Eyogh6wZWw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:05 2026 by rpki-client