This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer File: uQkHzuT6xQ83U2Iq0hqYmud0HEc.cer (raw, json) Hash identifier: HC8H7Tu0SjVykqnqwE/fX6H4TFKPKVf9yQWw2bzwGGA= Subject key identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E12C2A39C8CF582230379AE2E802B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212896 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:12:c2:a3:9c:8c:f5:82:23:03:79:ae:2e:80:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b90907cee4fac50f3753622ad21a989ae7741c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:67:10:c0:46:1f:de:77:ce:9e:8a:00:cd:d6: de:85:1c:61:d8:5f:1b:2a:7f:d4:60:e3:75:68:d5: de:f8:5d:a7:0a:8e:23:96:9d:8c:af:5d:02:76:9f: 4b:36:aa:b4:e3:18:b1:ce:cf:12:89:55:9f:a9:69: a8:0f:ed:a4:8a:66:ab:54:30:64:d9:e6:92:cc:89: af:f9:79:7e:26:0f:be:f8:1e:9a:ed:b0:c8:8b:7d: 36:15:59:fe:f6:d7:f0:bf:ec:d9:50:fa:b2:8b:74: dc:3d:d2:84:15:81:4e:8c:1d:ba:6e:72:56:80:0c: 58:26:b8:d3:ac:ef:8e:2c:eb:58:e4:70:9d:be:8e: a2:6c:87:99:75:9f:f1:3c:6c:7d:0f:34:ce:24:a9: 93:f3:74:97:69:8d:16:52:e3:71:d8:bd:81:00:41: 32:2f:22:92:cf:44:6a:97:84:9a:cd:3b:d2:d9:92: eb:df:95:1c:f2:d3:9c:64:40:15:90:8f:cd:53:bb: 3c:26:f4:f9:e8:b3:37:de:0d:22:96:28:ba:6e:8b: 3f:e3:b0:18:95:6b:ec:78:6c:cc:73:1f:3c:11:f4: 6e:d3:32:89:81:33:a6:c6:48:21:8e:f0:a9:39:bc: 24:f3:46:3b:a9:2f:fc:11:51:25:18:b8:b0:01:fc: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:09:07:CE:E4:FA:C5:0F:37:53:62:2A:D2:1A:98:9A:E7:74:1C:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3c16d2-d290-47fb-911d-5996cae9d115/1/uQkHzuT6xQ83U2Iq0hqYmud0HEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212896 Signature Algorithm: sha256WithRSAEncryption 63:a1:78:3b:93:66:da:bc:69:a5:41:22:eb:c3:75:5e:52:ea: 0a:31:e4:56:81:f8:c1:07:60:75:93:59:ab:98:a7:16:ba:d2: aa:09:11:54:7c:31:c1:75:69:c1:be:ca:de:b4:94:0d:bc:65: 1f:49:ad:65:e9:d9:b8:bb:61:01:bc:c8:46:a9:ab:41:83:be: bd:bf:75:ff:c5:68:d7:a0:99:08:0e:5c:e2:86:62:cb:5a:92: c8:ad:dc:41:1d:c3:35:03:09:91:d3:a6:04:5f:09:04:41:f9: 0c:8a:9d:a7:64:ca:c4:a0:81:d3:ed:7b:e1:3e:47:dd:00:c3: b8:11:df:b2:52:df:ea:ef:f5:db:d1:64:76:13:04:94:32:66: 05:b8:86:b6:e3:b2:cf:4a:15:ec:e0:7d:3a:87:5e:1f:4a:ff: 27:f5:ea:ee:17:1a:8e:cf:ee:0c:c1:6c:b0:2a:47:51:0f:7e: 93:fe:9b:9d:b6:fe:67:26:76:7f:eb:38:c4:fe:94:be:28:97: 2d:24:d1:8e:03:b7:6f:1d:91:77:2f:33:83:9d:3e:d6:ee:19: b9:85:3a:83:fc:59:44:b5:d9:bb:0f:d1:5d:b7:d4:a9:82:4d: fa:54:99:ac:0d:cf:fc:fa:1d:72:7b:1d:cc:06:8b:e8:40:6f: 31:5d:c8:cb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fhLCo5yM9YIjA3muLoArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTA5MDdjZWU0ZmFjNTBmMzc1MzYyMmFkMjFhOTg5YWU3NzQxYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2cQwEYf3nfOnooAzdbehRxh2F8b Kn/UYON1aNXe+F2nCo4jlp2Mr10Cdp9LNqq04xixzs8SiVWfqWmoD+2kimarVDBk 2eaSzImv+Xl+Jg+++B6a7bDIi302FVn+9tfwv+zZUPqyi3TcPdKEFYFOjB26bnJW gAxYJrjTrO+OLOtY5HCdvo6ibIeZdZ/xPGx9DzTOJKmT83SXaY0WUuNx2L2BAEEy LyKSz0Rql4SazTvS2ZLr35Uc8tOcZEAVkI/NU7s8JvT56LM33g0ilii6bos/47AY lWvseGzMcx88EfRu0zKJgTOmxkghjvCpObwk80Y7qS/8EVElGLiwAfxjOwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLkJB87k+sUPN1NiKtIamJrndBxHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzNjMTZk Mi1kMjkwLTQ3ZmItOTExZC01OTk2Y2FlOWQxMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvM2MxNmQy LWQyOTAtNDdmYi05MTFkLTU5OTZjYWU5ZDExNS8xL3VRa0h6dVQ2eFE4M1UySXEw aHFZbXVkMEhFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/oDANBgkqhkiG9w0BAQsFAAOCAQEAY6F4O5Nm2rxp pUEi68N1XlLqCjHkVoH4wQdgdZNZq5inFrrSqgkRVHwxwXVpwb7K3rSUDbxlH0mt ZenZuLthAbzIRqmrQYO+vb91/8Vo16CZCA5c4oZiy1qSyK3cQR3DNQMJkdOmBF8J BEH5DIqdp2TKxKCB0+174T5H3QDDuBHfslLf6u/129FkdhMElDJmBbiGtuOyz0oV 7OB9OodeH0r/J/Xq7hcajs/uDMFssCpHUQ9+k/6bnbb+ZyZ2f+s4xP6UviiXLSTR jgO3bx2Rdy8zg50+1u4ZuYU6g/xZRLXZuw/RXbfUqYJN+lSZrA3P/PodcnsdzAaL 6EBvMV3Iyw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:46 2026 by rpki-client