This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer File: uaxJ0czcrt2aE_SAPfGu3ObcERI.cer (raw, json) Hash identifier: zstN1jEhqY8JitE1XisjKSMipLU5HmzIxkmxAD2FMac= Subject key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15870D0EF866B3D77AA8AC6A2DAEA0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48863 AS: 52157 AS: 61275 IP: 5.100.176.0/20 IP: 77.223.160.0/19 IP: 85.93.224.0/19 IP: 91.135.48.0/20 IP: 93.89.112.0/20 IP: 178.248.96.0/21 IP: 185.3.0.0/22 IP: 185.24.188.0/22 IP: 185.80.156.0/22 IP: 185.193.92.0/22 IP: 185.209.224.0/22 IP: 185.237.36.0/22 IP: 188.93.184.0/21 IP: 213.138.160.0/19 IP: 2a02:25e8::/29 IP: 2a03:ba00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:87:0d:0e:f8:66:b3:d7:7a:a8:ac:6a:2d:ae:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:89:9f:c8:09:7a:89:04:2d:e4:63:48:65: 79:87:01:32:8d:df:4e:53:e4:61:50:42:f8:f5:ae: cb:7f:a1:41:33:4b:d7:61:82:63:33:19:61:5c:57: 1f:7f:28:93:79:37:db:71:74:85:a9:ae:a8:3b:fc: c2:b8:64:c8:98:f8:36:a7:5d:25:eb:9a:af:c6:18: 3c:c7:c0:d1:2b:46:b9:54:e5:83:a0:51:f6:66:1b: 37:29:98:39:48:43:20:08:a3:2b:7e:6d:95:d4:ce: 64:75:81:c1:da:63:b5:24:e9:a4:40:e2:04:ec:99: cb:ca:50:74:a4:b6:12:3a:52:2e:9b:c1:cc:84:56: 1c:10:8a:42:66:84:9d:6d:52:c5:cd:e1:9e:17:44: 3d:2f:35:5f:05:0c:4c:e4:ba:9a:f6:dd:57:6a:60: 5f:19:16:93:63:fc:c7:5f:ca:9b:75:25:b5:6a:42: 19:eb:5e:87:af:be:fb:2d:cd:f9:b8:6d:b7:b0:51: 2b:85:04:78:52:5d:2a:5c:44:01:8a:eb:50:aa:e6: 0a:f4:9f:03:52:2b:12:91:d8:9e:09:19:4e:36:63: 4a:17:38:8a:5a:f7:3e:68:81:ab:1f:5a:f5:ab:93: a1:56:b6:53:54:ae:62:82:c1:14:5f:20:5b:c6:77: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.100.176.0/20 77.223.160.0/19 85.93.224.0/19 91.135.48.0/20 93.89.112.0/20 178.248.96.0/21 185.3.0.0/22 185.24.188.0/22 185.80.156.0/22 185.193.92.0/22 185.209.224.0/22 185.237.36.0/22 188.93.184.0/21 213.138.160.0/19 IPv6: 2a02:25e8::/29 2a03:ba00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48863 52157 61275 Signature Algorithm: sha256WithRSAEncryption 67:12:9f:d2:db:94:33:b4:5d:2a:17:80:28:8d:fc:51:b8:5a: 23:64:1d:fe:2d:84:d6:47:0f:a5:bd:98:43:93:7c:b0:00:05: d4:60:24:ea:ab:72:f8:b0:39:77:01:cb:47:31:5a:42:2e:7d: ff:2e:a7:91:08:e6:dc:84:be:a0:c9:44:89:2e:3e:f1:5b:1d: 24:d4:ba:5a:18:fa:d2:5b:ea:e2:70:66:5b:02:24:e0:12:6d: 55:f0:6c:58:6f:ff:9b:9b:d5:85:6c:7c:78:f3:60:6a:ac:94: ee:d0:23:e3:49:29:64:ba:bd:5b:df:1b:13:f9:43:00:98:93: 2d:14:29:3b:5e:25:1f:f8:e7:5e:8c:1d:fa:dc:23:77:b8:b0: d7:a0:67:20:91:8a:b3:7e:87:08:40:58:2f:48:50:c0:6e:97: 9e:0f:a7:88:76:94:1a:f1:cc:8c:4c:f0:02:0c:c2:2d:d4:06: a5:70:9c:1a:8d:b4:ae:f5:07:60:f8:41:63:4d:6f:d1:15:97: 56:99:3d:a9:fc:a8:d1:ac:80:c6:e7:e1:09:6d:21:cc:d2:0c: b5:13:b9:38:f6:eb:23:41:8d:6d:42:09:d2:ae:95:9d:41:2f: d9:53:40:f2:f3:81:0e:af:10:e0:ee:39:e5:f1:80:34:90:90: 4c:6f:0d:ae -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZt/FYcNDvhms9d6qKxqLa6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWFjNDlkMWNjZGNhZWRkOWExM2Y0ODAzZGYxYWVkY2U2ZGMxMTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylyJn8gJeokELeRjSGV5hwEyjd9O U+RhUEL49a7Lf6FBM0vXYYJjMxlhXFcffyiTeTfbcXSFqa6oO/zCuGTImPg2p10l 65qvxhg8x8DRK0a5VOWDoFH2Zhs3KZg5SEMgCKMrfm2V1M5kdYHB2mO1JOmkQOIE 7JnLylB0pLYSOlIum8HMhFYcEIpCZoSdbVLFzeGeF0Q9LzVfBQxM5Lqa9t1XamBf GRaTY/zHX8qbdSW1akIZ616Hr777Lc35uG23sFErhQR4Ul0qXEQBiutQquYK9J8D UisSkdieCRlONmNKFziKWvc+aIGrH1r1q5OhVrZTVK5igsEUXyBbxne68wIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFLmsSdHM3K7dmhP0gD3xrtzm3BESMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzUzNzE5 MS0xMTc5LTQ4ZWMtYWQ5Zi1mZmU0M2E1MmQzZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNTM3MTkx LTExNzktNDhlYy1hZDlmLWZmZTQzYTUyZDNmNi8xL3VheEowY3pjcnQyYUVfU0FQ Zkd1M09iY0VSSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF BQcBBwEB/wR0MHIwWgQCAAEwVAMEBAVksAMEBU3foAMEBVVd4AMEBFuHMAMEBF1Z cAMEA7L4YAMEArkDAAMEArkYvAMEArlQnAMEArnBXAMEArnR4AMEArntJAMEA7xd uAMEBdWKoDAUBAIAAjAOAwUDKgIl6AMFAyoDugAwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAL7fAgMAy70CAwDvWzANBgkqhkiG9w0BAQsFAAOCAQEAZxKf0tuUM7Rd KheAKI38UbhaI2Qd/i2E1kcPpb2YQ5N8sAAF1GAk6qty+LA5dwHLRzFaQi59/y6n kQjm3IS+oMlEiS4+8VsdJNS6Whj60lvq4nBmWwIk4BJtVfBsWG//m5vVhWx8ePNg aqyU7tAj40kpZLq9W98bE/lDAJiTLRQpO14lH/jnXowd+twjd7iw16BnIJGKs36H CEBYL0hQwG6Xng+niHaUGvHMjEzwAgzCLdQGpXCcGo20rvUHYPhBY01v0RWXVpk9 qfyo0ayAxufhCW0hzNIMtRO5OPbrI0GNbUIJ0q6VnUEv2VNA8vOBDq8Q4O455fGA NJCQTG8Nrg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:38:29 2026 by rpki-client