This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer File: uXK9SdVRtK2lvWu2lWGKeUUa004.cer (raw, json) Hash identifier: 8Wc9Zy3sRUCKSAnHrs6YL8ruUw+8OzFOZvtUSZHTBrA= Subject key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EEBEDB6C9751EA6EA8CAC75F5F24F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60672 IP: 31.24.104.0/21 IP: 31.28.64.0/24 IP: 31.28.66.0/24 IP: 31.28.69.0/24 IP: 31.28.71.0/24 IP: 31.28.73.0 -- 31.28.74.255 IP: 31.28.76.0/22 IP: 31.28.87.0 -- 31.28.95.255 IP: 94.126.41.0 -- 94.126.42.255 IP: 94.126.44.0 -- 94.126.46.255 IP: 178.18.118.0/24 IP: 178.18.120.0/22 IP: 193.192.2.0/23 IP: 193.193.162.0/23 IP: 195.191.250.0/24 IP: 2a01:8000::/32 IP: 2a10:6740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:eb:ed:b6:c9:75:1e:a6:ea:8c:ac:75:f5:f2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:85:cb:65:56:9e:46:ce:ac:56:f8:ae:e7: 84:a0:eb:72:7a:e5:fc:f8:bb:63:6a:02:8e:40:44: 6e:ac:ed:23:4c:02:45:41:30:96:e5:2d:f9:e6:1e: 7f:b3:64:e5:2e:92:e1:1c:4b:a2:cc:57:2c:90:92: b9:81:7e:12:65:78:de:bc:34:5e:4d:d1:41:18:f5: 87:13:3a:2f:a2:fd:76:53:13:5f:d5:cd:f0:df:1c: 5b:7c:f7:e8:83:c4:d9:69:1d:0e:2c:07:11:c8:05: b0:0b:b1:91:e5:47:fc:f9:f9:96:32:bb:45:13:d7: ce:f9:95:b8:f1:0f:08:0d:95:0b:0f:cd:b6:03:47: bd:89:bb:79:2a:fb:2d:b2:ee:16:36:22:f2:ed:86: 41:be:2f:f8:1d:0d:4b:46:90:62:74:e4:33:65:3b: 47:2a:79:5e:a5:44:fc:63:c4:d6:fe:54:7d:9e:4d: 2d:67:d7:4b:96:ee:bd:56:8a:c7:be:1f:dc:30:3d: 0c:be:f6:6c:f8:e0:bb:fc:8f:89:16:83:71:d1:e1: e6:80:27:21:90:a2:da:fc:b7:60:d9:56:e5:cf:72: fd:ab:3c:6a:52:52:d6:6f:a5:93:f3:04:78:f6:d9: 1a:4c:34:14:5b:3b:ec:f5:3c:dc:16:29:08:1f:0d: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.104.0/21 31.28.64.0/24 31.28.66.0/24 31.28.69.0/24 31.28.71.0/24 31.28.73.0-31.28.74.255 31.28.76.0/22 31.28.87.0-31.28.95.255 94.126.41.0-94.126.42.255 94.126.44.0-94.126.46.255 178.18.118.0/24 178.18.120.0/22 193.192.2.0/23 193.193.162.0/23 195.191.250.0/24 IPv6: 2a01:8000::/32 2a10:6740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60672 Signature Algorithm: sha256WithRSAEncryption 45:93:26:89:a3:2c:83:1c:75:65:e3:85:bd:f1:41:2c:1f:16: cd:9e:1f:0e:73:f8:3a:6f:b4:6b:66:d8:2b:e3:74:b0:cd:d4: 07:6f:28:42:3c:b6:67:cc:e2:68:4e:ae:81:29:24:db:fe:c9: 3b:ce:17:03:42:d4:37:cc:dc:24:4f:90:d5:25:f9:43:0b:e7: 49:d7:22:96:a4:3e:40:3a:c1:aa:46:09:5a:c7:0b:bd:1c:39: e3:7f:3c:e6:4e:58:02:37:8e:44:9b:1a:26:ad:a9:6e:2e:b2: 0f:30:e8:66:ab:f7:53:c1:48:ac:c2:6a:86:a7:25:78:ce:b3: 12:f0:a6:5f:32:16:27:86:c6:31:05:6b:15:37:59:35:3e:9d: b2:e6:05:84:3d:2f:b5:62:fd:92:2a:b2:7e:9c:89:0f:8f:2f: 86:8c:ad:0c:4f:9d:9d:3f:d3:e2:23:e1:5d:6e:21:50:3a:e5: a2:4b:f3:23:39:1f:5d:4a:56:50:23:46:47:10:8b:45:a8:4e: 21:9d:97:8b:d6:f6:6d:9b:03:b5:5f:d8:e9:eb:c3:9d:76:65: 97:08:89:de:d2:b3:c5:c3:33:90:e3:75:85:f6:fb:a7:65:ea: f0:71:0f:22:fa:04:72:aa:ad:c1:8d:a2:e9:a0:d2:0a:67:c4: 8f:f4:79:85 -----BEGIN CERTIFICATE----- MIIGIjCCBQqgAwIBAgISAZt5fuvttsl1HqbqjKx19fJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTcyYmQ0OWQ1NTFiNGFkYTViZDZiYjY5NTYxOGE3OTQ1MWFkMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xqFy2VWnkbOrFb4rueEoOtyeuX8 +LtjagKOQERurO0jTAJFQTCW5S355h5/s2TlLpLhHEuizFcskJK5gX4SZXjevDRe TdFBGPWHEzovov12UxNf1c3w3xxbfPfog8TZaR0OLAcRyAWwC7GR5Uf8+fmWMrtF E9fO+ZW48Q8IDZULD822A0e9ibt5Kvstsu4WNiLy7YZBvi/4HQ1LRpBidOQzZTtH KnlepUT8Y8TW/lR9nk0tZ9dLlu69VorHvh/cMD0MvvZs+OC7/I+JFoNx0eHmgCch kKLa/Ldg2Vblz3L9qzxqUlLWb6WT8wR49tkaTDQUWzvs9TzcFikIHw3MpQIDAQAB o4IDLjCCAyowHQYDVR0OBBYEFLlyvUnVUbStpb1rtpVhinlFGtNOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2ZlMDdi Ny1mNDY0LTRlNjctODI5OS1jYTVlNjg1NDM4YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvZmUwN2I3 LWY0NjQtNGU2Ny04Mjk5LWNhNWU2ODU0MzhhMi8xL3VYSzlTZFZSdEsybHZXdTJs V0dLZVVVYTAwNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGsBggrBgEF BQcBBwEB/wSBnDCBmTCBgAQCAAEwegMEAx8YaAMEAB8cQAMEAB8cQgMEAB8cRQME AB8cRzAMAwQAHxxJAwQAHxxKAwQCHxxMMAwDBAAfHFcDBAUfHEAwDAMEAF5+KQME AF5+KjAMAwQCXn4sAwQAXn4uAwQAshJ2AwQCshJ4AwQBwcACAwQBwcGiAwQAw7/6 MBQEAgACMA4DBQAqAYAAAwUDKhBnQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA 7QAwDQYJKoZIhvcNAQELBQADggEBAEWTJomjLIMcdWXjhb3xQSwfFs2eHw5z+Dpv tGtm2CvjdLDN1AdvKEI8tmfM4mhOroEpJNv+yTvOFwNC1DfM3CRPkNUl+UML50nX IpakPkA6wapGCVrHC70cOeN/POZOWAI3jkSbGiatqW4usg8w6Gar91PBSKzCaoan JXjOsxLwpl8yFieGxjEFaxU3WTU+nbLmBYQ9L7Vi/ZIqsn6ciQ+PL4aMrQxPnZ0/ 0+Ij4V1uIVA65aJL8yM5H11KVlAjRkcQi0WoTiGdl4vW9m2bA7Vf2Onrw512ZZcI id7Ss8XDM5DjdYX2+6dl6vBxDyL6BHKqrcGNoumg0gpnxI/0eYU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:54 2026 by rpki-client