This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer (raw, json) Hash identifier: zJ4NArsRDxI5fFdRPuX36IDdYjPmdSvyZ4HSuPPxH38= Subject key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C2419624A435B378D198D387055C6F924 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 03 Feb 2026 15:22:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.97.0.0/16 IP: 69.62.64.0/18 IP: 72.60.0.0 -- 72.62.255.255 IP: 76.13.0.0/16 IP: 103.199.184.0/22 IP: 148.222.52.0/22 IP: 148.230.64.0/18 IP: 168.231.64.0/18 IP: 187.77.0.0/16 IP: 187.124.0.0/16 IP: 187.127.0.0/16 IP: 194.164.148.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:19:62:4a:43:5b:37:8d:19:8d:38:70:55:c6:f9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 3 15:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:70:1b:37:4d:72:d9:14:c5:d8:56:3e:71: e7:27:8c:5e:cd:71:a8:20:7b:e0:9a:2b:3d:b1:f9: 40:a7:b2:fc:a9:d7:e1:fa:e0:2f:84:f0:da:ac:7d: a0:c3:7d:50:0b:54:96:d4:94:f6:7a:7c:42:a3:ef: 1f:a2:7d:b1:4a:0b:f3:fb:22:15:00:19:9d:0f:52: 69:bb:2c:66:be:d5:89:8b:a1:6d:3f:ff:f7:ef:98: 2d:56:45:c0:c1:33:17:91:8f:f0:e2:91:e3:33:e3: a3:30:ac:5c:b3:e3:c9:90:78:f0:cf:82:75:bb:a7: af:2a:ce:57:f8:d1:81:0e:aa:df:a5:e8:19:0d:64: 4a:0a:2d:e6:d4:58:ed:41:32:21:5e:b0:59:8a:4b: 4a:4f:d4:ec:47:3a:31:c2:34:02:79:6e:fd:69:f6: cf:03:6e:1a:db:29:83:92:5f:14:57:40:41:fb:13: 3c:1b:81:0e:45:53:19:24:22:07:f7:eb:b3:bc:78: 22:83:cf:70:ec:7e:5f:5f:0b:0a:06:14:1a:d8:ea: 9f:01:06:ee:71:19:06:bd:05:03:67:ba:5f:6d:1d: c0:68:7d:1a:e5:da:ea:98:d8:11:fe:bf:08:89:a9: 5e:33:89:6c:2f:fc:5d:a6:79:c9:a1:67:64:50:01: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.97.0.0/16 69.62.64.0/18 72.60.0.0-72.62.255.255 76.13.0.0/16 103.199.184.0/22 148.222.52.0/22 148.230.64.0/18 168.231.64.0/18 187.77.0.0/16 187.124.0.0/16 187.127.0.0/16 194.164.148.0/22 Signature Algorithm: sha256WithRSAEncryption 07:5e:55:e5:19:27:f5:a1:7f:1e:97:0b:f1:44:8a:b2:25:39: f8:d2:fa:6a:ec:de:f8:b4:c5:c7:30:db:a9:1f:4a:59:06:b4: ce:b8:e4:b7:b3:3a:e6:32:64:2c:13:af:1e:b1:fa:b8:6d:74: aa:ea:ed:4f:71:60:50:87:5f:02:96:f7:67:22:50:3e:26:19: 1b:68:34:04:ce:e2:bd:67:c3:cb:2b:a3:fb:f3:1a:60:6e:92: c1:b1:9d:c4:4a:12:cc:41:51:5c:a1:53:f4:4b:b1:a1:4e:ff: b0:c6:39:e3:6f:55:45:c0:ca:99:39:70:ce:ca:98:47:27:2c: a1:28:49:c2:0f:1a:6d:a1:80:8a:0f:4b:73:ad:4c:9e:ea:37: a5:29:46:67:44:e3:74:17:3b:68:cd:f8:9e:59:9b:46:92:33: 21:a5:78:cd:78:74:93:cd:08:88:d9:ca:f9:a4:23:60:6b:51: bb:83:41:fb:bc:59:73:6b:39:23:0f:59:c9:56:96:43:7f:de: 84:24:dc:b2:c8:2f:5e:49:60:22:40:9a:48:a2:42:1c:cc:1a: 5c:89:11:6b:f7:9f:29:6a:06:24:0c:2a:43:21:be:23:4d:ce: 5a:4b:8e:55:13:0e:1d:5c:7f:a4:80:3e:29:de:5e:5d:5f:d5: fa:53:9b:42 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZwkGWJKQ1s3jRmNOHBVxvkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAzMTUyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTE0MTY2YjY4NWFjMDE1Yjk0MTI2Y2RiOGIxOGM4M2ExMmVkODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTFwGzdNctkUxdhWPnHnJ4xezXGo IHvgmis9sflAp7L8qdfh+uAvhPDarH2gw31QC1SW1JT2enxCo+8fon2xSgvz+yIV ABmdD1JpuyxmvtWJi6FtP//375gtVkXAwTMXkY/w4pHjM+OjMKxcs+PJkHjwz4J1 u6evKs5X+NGBDqrfpegZDWRKCi3m1FjtQTIhXrBZiktKT9TsRzoxwjQCeW79afbP A24a2ymDkl8UV0BB+xM8G4EORVMZJCIH9+uzvHgig89w7H5fXwsKBhQa2OqfAQbu cRkGvQUDZ7pfbR3AaH0a5drqmNgR/r8IialeM4lsL/xdpnnJoWdkUAGNGwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFLkUFmtoWsAVuUEmzbixjIOhLthiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2QzYmU3 MC1kZGYxLTQ4ZjUtODY2Zi1lYTY3YTk4NjI1ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvZDNiZTcw LWRkZjEtNDhmNS04NjZmLWVhNjdhOTg2MjVmZS8xL3VSUVdhMmhhd0JXNVFTYk51 TEdNZzZFdTJHSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGIGCCsGAQUF BwEHAQH/BFMwUTBPBAIAATBJAwMAH2EDBAZFPkAwCgMDAkg8AwMASD4DAwBMDQME AmfHuAMEApTeNAMEBpTmQAMEBqjnQAMDALtNAwMAu3wDAwC7fwMEAsKklDANBgkq hkiG9w0BAQsFAAOCAQEAB15V5Rkn9aF/HpcL8USKsiU5+NL6auze+LTFxzDbqR9K WQa0zrjkt7M65jJkLBOvHrH6uG10qurtT3FgUIdfApb3ZyJQPiYZG2g0BM7ivWfD yyuj+/MaYG6SwbGdxEoSzEFRXKFT9EuxoU7/sMY5429VRcDKmTlwzsqYRycsoShJ wg8abaGAig9Lc61Mnuo3pSlGZ0TjdBc7aM34nlmbRpIzIaV4zXh0k80IiNnK+aQj YGtRu4NB+7xZc2s5Iw9ZyVaWQ3/ehCTcssgvXklgIkCaSKJCHMwaXIkRa/efKWoG JAwqQyG+I03OWkuOVRMOHVx/pIA+Kd5eXV/V+lObQg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:00 2026 by rpki-client