This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer File: uWCxR0bFh1JErjtpQWLsbYxjJV4.cer (raw, json) Hash identifier: mPnbDAeK2T8IP83LWlU/1anfwOZTEHqUAN/FFfoBhBY= Subject key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB619126E3816670105DBF62BBA8EB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208390 IP: 45.135.208.0/22 IP: 2a0e:8ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:61:91:26:e3:81:66:70:10:5d:bf:62:bb:a8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b960b14746c5875244ae3b694162ec6d8c63255e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:dc:05:8d:27:7a:8d:42:f1:fa:54:e0:8f: e8:a2:00:e5:5b:2b:65:ba:d0:10:3a:47:7c:60:97: bb:f4:1d:fe:47:5b:d5:fd:8b:b0:e2:39:70:88:3a: 5f:68:a3:9c:0a:d3:a8:01:e5:f6:de:2e:95:15:4e: 54:35:7a:13:58:13:c7:20:2f:09:8c:ed:10:86:42: 59:d2:f3:02:ec:a2:36:c5:31:e3:90:5c:8f:d7:76: 5b:6f:b3:a2:a9:ca:03:79:64:0a:6b:07:54:b1:aa: 7e:ce:9c:58:7a:ac:84:15:b4:9d:d5:83:2e:5d:0d: 09:cb:d9:ad:0e:b7:24:79:20:ff:f1:be:b6:01:11: e6:05:5f:6b:bc:f3:e0:c1:79:ae:f1:6d:3c:a6:58: 4c:05:74:0f:cc:1a:04:60:6d:43:b8:67:bf:8a:7c: a6:cb:6c:b1:94:14:3c:51:1c:84:2e:27:d4:a4:ed: bd:28:61:3f:de:ab:c7:9e:40:ef:86:78:f9:90:ae: 56:d8:88:ca:23:c4:da:60:39:2b:1e:e2:37:a5:f8: c1:ef:ec:81:94:c3:ee:ae:b5:57:8b:57:74:d9:2b: 8d:ec:28:46:92:45:c4:bc:be:37:0e:40:70:ef:01: 58:2c:56:23:11:81:05:f7:37:83:37:f5:73:c2:14: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.208.0/22 IPv6: 2a0e:8ec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208390 Signature Algorithm: sha256WithRSAEncryption 2e:d9:94:3f:39:ba:42:25:6d:3a:77:d5:a4:81:b5:3c:2b:c0: 11:45:bf:6e:b6:9e:fc:2a:95:24:dd:99:cb:96:e5:3f:12:7b: a6:d1:28:82:10:d7:b2:7f:da:51:d6:eb:61:a0:bf:79:bb:31: 96:3c:dd:e2:84:a0:47:44:75:36:51:17:1f:5d:a8:35:4f:83: 36:22:73:9a:9a:b0:d1:a6:00:f8:13:bd:f8:31:6d:05:85:0c: ec:51:fc:50:63:22:7b:4c:f8:78:d3:18:c5:34:44:cb:41:fc: 21:0a:a0:db:51:c2:8f:5c:6a:73:29:cc:9e:4f:41:f7:f1:5b: ad:73:4a:5d:06:ea:94:12:06:b5:7f:15:8e:14:2e:0f:96:cb: eb:88:12:56:d1:33:1e:0e:5d:ac:05:28:5b:67:27:cc:e5:10: dd:1b:35:26:25:28:de:fc:83:86:69:8e:bf:3c:94:13:52:d5: 57:7b:5f:61:00:e0:74:c0:f6:42:47:84:55:f9:60:4d:ec:84: 3d:a0:08:92:da:f1:41:1b:34:4f:47:fd:0d:a8:bc:c8:20:ef: 82:1a:0b:ef:fb:da:f6:69:d5:21:4f:36:e7:38:08:6b:9b:a3: 56:f9:75:8a:db:5a:2d:cc:5e:1b:51:f8:e2:3a:5a:60:66:55: 1e:11:ea:43 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt262GRJuOBZnAQXb9iu6jrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTYwYjE0NzQ2YzU4NzUyNDRhZTNiNjk0MTYyZWM2ZDhjNjMyNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpHcBY0neo1C8fpU4I/oogDlWytl utAQOkd8YJe79B3+R1vV/Yuw4jlwiDpfaKOcCtOoAeX23i6VFU5UNXoTWBPHIC8J jO0QhkJZ0vMC7KI2xTHjkFyP13Zbb7OiqcoDeWQKawdUsap+zpxYeqyEFbSd1YMu XQ0Jy9mtDrckeSD/8b62ARHmBV9rvPPgwXmu8W08plhMBXQPzBoEYG1DuGe/inym y2yxlBQ8URyELifUpO29KGE/3qvHnkDvhnj5kK5W2IjKI8TaYDkrHuI3pfjB7+yB lMPurrVXi1d02SuN7ChGkkXEvL43DkBw7wFYLFYjEYEF9zeDN/VzwhQPMQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLlgsUdGxYdSRK47aUFi7G2MYyVeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzQ1ODA3 OC00MjZlLTQ0NDktYTJhOS0xODg4MmEyODA5YjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvNDU4MDc4 LTQyNmUtNDQ0OS1hMmE5LTE4ODgyYTI4MDliMi8xL3VXQ3hSMGJGaDFKRXJqdHBR V0xzYll4akpWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYfQMA0EAgACMAcDBQMqDo7AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMuBjANBgkqhkiG9w0BAQsFAAOCAQEALtmUPzm6QiVt OnfVpIG1PCvAEUW/brae/CqVJN2Zy5blPxJ7ptEoghDXsn/aUdbrYaC/ebsxljzd 4oSgR0R1NlEXH12oNU+DNiJzmpqw0aYA+BO9+DFtBYUM7FH8UGMie0z4eNMYxTRE y0H8IQqg21HCj1xqcynMnk9B9/FbrXNKXQbqlBIGtX8VjhQuD5bL64gSVtEzHg5d rAUoW2cnzOUQ3Rs1JiUo3vyDhmmOvzyUE1LVV3tfYQDgdMD2QkeEVflgTeyEPaAI ktrxQRs0T0f9Dai8yCDvghoL7/va9mnVIU825zgIa5ujVvl1ittaLcxeG1H44jpa YGZVHhHqQw== -----END CERTIFICATE-----Generated at Tue Jan 27 01:33:40 2026 by rpki-client