This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer (raw, json) Hash identifier: z5ppgKKaII0n8ulleyTXIuuCfTjH+1j2WdhfvQQ6qoI= Subject key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80DC3B08B5ADD21FCB6C08A3C8E0C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47755 IP: 91.232.38.0/24 IP: 185.68.24.0/22 IP: 2a05:1540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:dc:3b:08:b5:ad:d2:1f:cb:6c:08:a3:c8:e0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:a0:c4:b3:c5:c4:6d:4f:3d:e3:80:3a:ae: 40:b7:a3:c6:f2:e1:46:34:05:72:51:ae:95:04:45: 51:54:a8:e8:50:8f:d5:34:2f:60:2a:2e:09:63:8e: ff:56:57:6c:ef:57:5d:eb:79:bb:e9:26:08:72:62: 31:05:b1:af:a4:ef:62:f1:05:ee:7e:b0:dc:e4:d2: 46:20:36:b0:c4:9d:a1:95:ff:66:04:72:76:8f:fe: fe:99:4f:3e:32:4a:20:e2:7f:40:11:9f:7a:89:e1: d0:6a:d0:d5:25:b9:7d:bf:8a:5d:b3:4b:84:f1:97: 7a:65:1a:dc:89:11:d7:bb:84:74:27:44:82:0d:63: c4:ca:81:0c:b3:4c:94:d7:48:2e:e8:9c:95:73:0a: be:7b:e2:45:4b:38:45:cc:b6:53:58:33:19:ac:e0: 0a:e6:60:10:52:bf:ec:9b:94:f4:dd:0a:2a:30:cc: 73:c3:c2:00:bc:fa:8b:30:08:a7:75:45:95:8f:a9: ef:f5:74:d0:14:86:bf:b2:b8:b0:b9:50:a9:82:44: 53:21:47:a9:9b:d3:c4:a0:d9:e9:88:39:5b:2b:d3: 30:be:8c:25:4f:5a:5a:e8:0b:86:c1:47:0a:20:46: ab:89:13:4b:a0:bd:90:36:e6:48:bf:2d:6b:ef:fc: 8a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.232.38.0/24 185.68.24.0/22 IPv6: 2a05:1540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47755 Signature Algorithm: sha256WithRSAEncryption 33:83:73:46:22:8a:6b:be:a6:35:f0:ae:0a:0d:3a:b4:ff:f5: 4f:b2:bf:f9:60:8c:b8:cf:1a:d1:eb:2d:a0:be:db:29:b5:f8: b0:c4:fa:76:ff:6a:4f:01:cb:51:75:9a:96:f3:ae:06:45:e8: 3d:85:cf:fb:9b:73:57:a6:65:a7:4c:25:20:1c:cf:1d:80:37: 67:93:01:b5:f8:06:4a:79:a6:8b:c1:60:6a:f9:95:38:57:ca: ee:99:70:bf:6c:e8:92:16:b8:e5:b8:da:df:95:0a:cb:a6:26: 83:22:2a:8b:2a:49:99:00:4b:94:ef:c8:d1:6a:b3:6f:11:87: e3:5d:7e:f9:aa:5b:af:7a:81:ea:cb:1c:4b:48:75:19:19:97: 39:31:35:d2:6c:4c:7f:c4:7a:3e:d4:0d:d9:87:69:61:e2:21: 7d:75:b0:d0:28:fc:7b:59:fd:a9:8b:00:6f:cf:81:8b:18:78: 76:ef:7b:c2:2f:2e:7c:5b:b7:6d:22:d6:d7:c3:e7:da:43:3b: 46:f9:1b:9c:5a:81:21:22:38:98:be:1f:d7:52:bf:db:d0:34: 2c:6d:06:6b:cb:dc:96:bb:5b:39:44:a4:52:04:88:79:93:0f: 3e:89:47:09:73:ab:2b:d3:43:1f:67:1b:4c:b4:9a:64:66:4c: 9d:0e:89:df -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8gNw7CLWt0h/LbAijyODEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTE1YWY1OWQyNGY1OWE2MGQ5N2MxYzg4YWI5NzlhMTRjNTgwZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucigxLPFxG1PPeOAOq5At6PG8uFG NAVyUa6VBEVRVKjoUI/VNC9gKi4JY47/Vlds71dd63m76SYIcmIxBbGvpO9i8QXu frDc5NJGIDawxJ2hlf9mBHJ2j/7+mU8+Mkog4n9AEZ96ieHQatDVJbl9v4pds0uE 8Zd6ZRrciRHXu4R0J0SCDWPEyoEMs0yU10gu6JyVcwq+e+JFSzhFzLZTWDMZrOAK 5mAQUr/sm5T03QoqMMxzw8IAvPqLMAindUWVj6nv9XTQFIa/sriwuVCpgkRTIUep m9PEoNnpiDlbK9MwvowlT1pa6AuGwUcKIEariRNLoL2QNuZIvy1r7/yKKwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLkVr1nST1mmDZfByIq5eaFMWA/0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzQ0OThh YS1jYzI3LTQzMTYtYWU4Ny1kNDcyZDlhZmUxMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNDQ5OGFh LWNjMjctNDMxNi1hZTg3LWQ0NzJkOWFmZTEzNC8xL3VSV3ZXZEpQV2FZTmw4SElp cmw1b1V4WURfUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW+gmAwQCuUQYMA0EAgACMAcDBQMqBRVAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC6izANBgkqhkiG9w0BAQsFAAOCAQEAM4Nz RiKKa76mNfCuCg06tP/1T7K/+WCMuM8a0estoL7bKbX4sMT6dv9qTwHLUXWalvOu BkXoPYXP+5tzV6Zlp0wlIBzPHYA3Z5MBtfgGSnmmi8FgavmVOFfK7plwv2zokha4 5bja35UKy6YmgyIqiypJmQBLlO/I0WqzbxGH411++apbr3qB6sscS0h1GRmXOTE1 0mxMf8R6PtQN2YdpYeIhfXWw0Cj8e1n9qYsAb8+Bixh4du97wi8ufFu3bSLW18Pn 2kM7RvkbnFqBISI4mL4f11K/29A0LG0Ga8vclrtbOUSkUgSIeZMPPolHCXOrK9ND H2cbTLSaZGZMnQ6J3w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:23 2026 by rpki-client