This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer File: uUZ8BbpC7h85pkpT4dA0Azbl48M.cer (raw, json) Hash identifier: la6SBZw76HFaobtKsLiTNe4MnHeZi0odtJtoaT1tUOY= Subject key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11BC8BFF1635F033F5F6B941F82524 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.99.180.0/22 IP: 194.99.128.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:bc:8b:ff:16:35:f0:33:f5:f6:b9:41:f8:25:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:0f:7e:6f:eb:bc:18:1b:0b:ca:aa:74:95: de:de:62:82:ea:38:be:6b:11:32:5b:23:42:d9:89: 05:13:74:71:71:99:87:f0:32:8b:a8:0e:bd:b8:48: 1f:e1:93:83:a0:20:b1:49:d7:ca:7a:a5:bf:9f:24: 9c:0d:e3:02:7d:5c:61:c9:5f:93:57:14:bb:4b:b7: 01:91:81:9c:3e:08:e6:14:f1:e1:40:cf:a4:11:99: 89:ac:cc:14:8d:cd:e0:21:3f:1a:1a:61:ca:0e:df: 4f:c8:66:bc:ff:7b:42:20:75:b4:ab:67:fc:36:b3: 8a:c2:59:a8:ed:71:2b:8a:d6:e1:71:88:95:6f:12: ab:e4:62:a6:6d:ca:bb:9a:0b:6a:11:c3:79:55:57: b4:9f:66:2f:6d:a0:f3:6f:d8:a3:37:53:3b:eb:c3: b0:33:13:55:42:a9:8d:29:da:cf:98:a0:b7:a0:d1: c2:ad:d8:db:e0:c9:a9:18:6e:c3:46:7d:17:9a:ee: af:8b:57:5d:93:a5:30:f6:85:db:31:ba:f4:03:b2: 94:34:db:91:bb:b9:26:c6:0f:a4:b9:52:85:ee:66: bf:31:9c:96:e2:b5:20:5f:77:08:cb:66:75:42:d0: ae:53:8a:ec:c4:2e:68:fb:47:d1:04:9f:0d:84:2c: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.180.0/22 194.99.128.0/20 Signature Algorithm: sha256WithRSAEncryption 38:21:7b:74:56:f3:2b:f5:c1:ff:9e:27:8b:f0:cd:82:31:7c: da:69:e6:39:fc:86:a3:ca:24:4e:48:c0:63:11:65:c6:25:4d: cf:1f:6e:67:85:c9:06:b2:17:4b:50:ba:9d:bd:0c:8f:4b:4c: f5:b7:5c:3a:35:69:ea:57:b6:13:6e:df:2a:31:30:22:a0:78: 55:c5:eb:6d:71:06:fc:29:77:e9:63:be:19:11:85:67:1e:2f: f2:ca:4e:98:8e:ea:cd:b8:87:bf:f1:fc:e6:0a:07:31:dc:80: ea:d4:09:a4:61:cb:c0:68:93:a1:49:dd:78:1c:3b:58:f3:2e: 21:6a:30:96:21:a3:86:fd:83:11:b0:51:ad:a8:b5:3b:37:a4: ca:7f:17:31:88:94:88:12:ca:ba:7e:a8:7b:d4:c3:b3:41:b4: 19:65:dd:13:62:88:97:01:59:7d:db:82:b2:d4:af:a9:1f:eb: 56:44:b3:5a:73:a9:1b:63:47:cf:9e:67:07:37:7c:ed:8c:83: 02:7a:19:d9:40:11:ea:81:d9:f7:b6:d8:60:cb:9c:14:2f:c0: 83:ef:c9:92:49:88:b7:9a:31:b0:8b:55:08:8c:c9:4c:d0:52: c9:aa:da:c3:0d:51:ce:4e:e1:e6:67:09:15:a6:22:1a:9c:06: 24:e3:1c:17 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt8EbyL/xY18DP19rlB+CUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTQ2N2MwNWJhNDJlZTFmMzlhNjRhNTNlMWQwMzQwMzM2ZTVlM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwIPfm/rvBgbC8qqdJXe3mKC6ji+ axEyWyNC2YkFE3RxcZmH8DKLqA69uEgf4ZODoCCxSdfKeqW/nyScDeMCfVxhyV+T VxS7S7cBkYGcPgjmFPHhQM+kEZmJrMwUjc3gIT8aGmHKDt9PyGa8/3tCIHW0q2f8 NrOKwlmo7XEritbhcYiVbxKr5GKmbcq7mgtqEcN5VVe0n2YvbaDzb9ijN1M768Ow MxNVQqmNKdrPmKC3oNHCrdjb4MmpGG7DRn0Xmu6vi1ddk6Uw9oXbMbr0A7KUNNuR u7kmxg+kuVKF7ma/MZyW4rUgX3cIy2Z1QtCuU4rsxC5o+0fRBJ8NhCwBcQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFLlGfAW6Qu4fOaZKU+HQNAM25ePDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzY1MmM4 OC1hYmU2LTQ3OTQtYjdhZS0zOWJmNzUxZTMxMGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvNjUyYzg4 LWFiZTYtNDc5NC1iN2FlLTM5YmY3NTFlMzEwZC8xL3VVWjhCYnBDN2g4NXBrcFQ0 ZEEwQXpibDQ4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCuWO0AwQEwmOAMA0GCSqGSIb3DQEBCwUAA4IB AQA4IXt0VvMr9cH/nieL8M2CMXzaaeY5/IajyiROSMBjEWXGJU3PH25nhckGshdL ULqdvQyPS0z1t1w6NWnqV7YTbt8qMTAioHhVxettcQb8KXfpY74ZEYVnHi/yyk6Y jurNuIe/8fzmCgcx3IDq1AmkYcvAaJOhSd14HDtY8y4hajCWIaOG/YMRsFGtqLU7 N6TKfxcxiJSIEsq6fqh71MOzQbQZZd0TYoiXAVl924Ky1K+pH+tWRLNac6kbY0fP nmcHN3ztjIMCehnZQBHqgdn3tthgy5wUL8CD78mSSYi3mjGwi1UIjMlM0FLJqtrD DVHOTuHmZwkVpiIanAYk4xwX -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:02 2026 by rpki-client