This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer File: uRHH7b8dPMT7B1OBo392JWuHKF0.cer (raw, json) Hash identifier: NKcofsvAv05+e5MDwcAGW0sfVijZWXu3EPOXI+fsBLI= Subject key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B15B471A94FBAEB990EEF7DFCD9B6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20751 AS: 25101 AS: 47592 IP: 80.64.128.0 -- 80.64.139.255 IP: 83.216.208.0/20 IP: 185.136.212.0/22 IP: 193.111.237.0/24 IP: 2a00:a460::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:15:b4:71:a9:4f:ba:eb:99:0e:ef:7d:fc:d9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:61:6a:1c:b3:12:4d:11:2d:70:2d:1a:db: 96:54:4f:66:58:ca:94:42:2a:e0:c5:b2:35:f0:ab: 4e:76:e5:48:25:60:cc:ce:61:96:ef:1f:03:4f:cb: 2c:20:da:38:e3:68:4e:0c:56:fb:b4:ec:bf:c0:10: 91:d6:32:52:65:68:88:bf:72:4a:2b:79:28:20:87: 6a:22:15:34:78:69:d7:82:ef:ea:fe:72:ac:62:d1: 10:69:45:7f:a8:ec:fa:6b:b4:f9:a1:3c:85:83:d2: 1e:9a:dd:7a:b0:0e:a4:3f:e1:23:38:f2:1b:c9:2a: fe:8b:fc:ed:40:2b:e1:18:9d:7e:38:69:dc:36:28: 97:01:5f:70:43:bf:15:bd:40:1b:a6:96:44:ee:bc: cb:10:38:ef:27:bd:c5:34:1e:95:4c:e0:a6:95:3d: bb:6d:77:81:c6:3f:18:56:99:5d:4b:89:01:82:10: 1c:05:60:0d:d9:66:a9:64:99:eb:33:d3:12:3b:10: fa:e5:b3:52:41:af:58:ef:48:f3:42:d1:db:10:6d: fe:c4:0a:f0:61:f0:88:bb:75:31:0e:c9:ce:81:96: 50:70:1e:6b:d5:1b:0a:8e:a7:cd:ab:18:f2:56:a5: 4f:4e:80:7f:31:9e:c1:da:e6:c5:51:ef:ed:b5:87: 54:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.128.0-80.64.139.255 83.216.208.0/20 185.136.212.0/22 193.111.237.0/24 IPv6: 2a00:a460::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20751 25101 47592 Signature Algorithm: sha256WithRSAEncryption 07:92:d1:1f:30:26:60:c7:02:4a:1f:3a:f8:2c:71:51:d9:2e: 4c:e4:85:c0:0c:4e:3f:72:87:f9:51:67:a5:24:38:b1:af:9f: aa:10:07:dd:a1:1b:2d:68:c0:d5:56:89:a9:98:b6:62:f2:1b: 93:ef:dd:58:fb:25:a9:50:3d:1e:74:d1:28:15:17:0b:18:f8: d2:73:b4:fc:ca:7a:7d:21:9a:fc:71:5f:13:17:9c:0a:99:c6: 60:b9:74:9d:81:37:32:26:6b:9b:f1:a8:aa:62:c2:f5:56:ae: eb:41:a2:01:99:bf:18:2a:8d:68:33:c7:63:80:e9:e3:1b:5e: e9:c3:30:7a:fb:7e:1b:14:e9:5d:b2:da:35:66:9e:42:f6:cc: 5e:1a:55:bc:cf:9f:f3:28:4f:87:01:87:aa:a0:2d:5c:45:d9: b7:4d:32:33:ec:e5:66:2f:57:6e:cf:1a:52:33:f5:b4:65:3d: 23:f5:7f:fc:d5:97:e0:95:89:55:92:c9:43:a0:da:e9:4b:80: 49:6d:2c:17:35:fd:4a:86:e1:a4:b3:b8:77:6a:07:7e:bf:bd: 21:83:c2:b6:82:9e:1f:6e:02:e9:22:8a:17:ea:2d:8e:bf:0e: 8c:47:b6:16:48:8b:34:0c:65:0e:7e:69:9a:4b:59:9e:20:59: 69:7e:b0:f6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZt6WxW0calPuuuZDu99/Nm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTExYzdlZGJmMWQzY2M0ZmIwNzUzODFhMzdmNzYyNTZiODcyODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZFhahyzEk0RLXAtGtuWVE9mWMqU QirgxbI18KtOduVIJWDMzmGW7x8DT8ssINo442hODFb7tOy/wBCR1jJSZWiIv3JK K3koIIdqIhU0eGnXgu/q/nKsYtEQaUV/qOz6a7T5oTyFg9Iemt16sA6kP+EjOPIb ySr+i/ztQCvhGJ1+OGncNiiXAV9wQ78VvUAbppZE7rzLEDjvJ73FNB6VTOCmlT27 bXeBxj8YVpldS4kBghAcBWAN2WapZJnrM9MSOxD65bNSQa9Y70jzQtHbEG3+xArw YfCIu3UxDsnOgZZQcB5r1RsKjqfNqxjyVqVPToB/MZ7B2ubFUe/ttYdUUwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFLkRx+2/HTzE+wdTgaN/diVrhyhdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzIzYjE0 OC1lMGRkLTRmYTYtYWY0NC02MTMwMTc4ODZlOGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvMjNiMTQ4 LWUwZGQtNGZhNi1hZjQ0LTYxMzAxNzg4NmU4Yi8xL3VSSEg3YjhkUE1UN0IxT0Jv MzkySld1SEtGMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgMAwDBAdQQIADBAJQQIgDBART2NADBAK5iNQDBADB b+0wDQQCAAIwBwMFACoApGAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICUQ8CAmIN AgMAuegwDQYJKoZIhvcNAQELBQADggEBAAeS0R8wJmDHAkofOvgscVHZLkzkhcAM Tj9yh/lRZ6UkOLGvn6oQB92hGy1owNVWiamYtmLyG5Pv3Vj7JalQPR500SgVFwsY +NJztPzKen0hmvxxXxMXnAqZxmC5dJ2BNzIma5vxqKpiwvVWrutBogGZvxgqjWgz x2OA6eMbXunDMHr7fhsU6V2y2jVmnkL2zF4aVbzPn/MoT4cBh6qgLVxF2bdNMjPs 5WYvV27PGlIz9bRlPSP1f/zVl+CViVWSyUOg2ulLgEltLBc1/UqG4aSzuHdqB36/ vSGDwraCnh9uAukiihfqLY6/DoxHthZIizQMZQ5+aZpLWZ4gWWl+sPY= -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:45 2026 by rpki-client