This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ubrpYJaypQez1LDCdLwv9Ynp-aI.cer File: ubrpYJaypQez1LDCdLwv9Ynp-aI.cer (raw, json) Hash identifier: oIRwcnOKzqjaXONm0OKOhgXNofPCn2mUZ45Umjg/YHI= Subject key identifier: B9:BA:E9:60:96:B2:A5:07:B3:D4:B0:C2:74:BC:2F:F5:89:E9:F9:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F152BBC837DAFACBAD9208F62A91118 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 78.41.224.0/21 IP: 92.39.112.0/20 IP: 185.38.32.0/22 IP: 212.21.32.0/19 IP: 2a00:5e00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2b:bc:83:7d:af:ac:ba:d9:20:8f:62:a9:11:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9bae96096b2a507b3d4b0c274bc2ff589e9f9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:bd:4d:bb:a5:79:98:bd:a3:c2:38:5b:80: 90:30:9f:8f:3d:ba:ab:56:ab:6e:fa:40:75:45:62: 03:da:55:c6:58:00:27:45:ff:4b:ec:4d:ec:0c:6d: 56:72:a2:8e:a6:55:83:0f:eb:93:45:cb:7b:90:08: 82:ae:10:40:ef:9b:bb:a3:1c:63:30:f4:13:4d:07: 8e:ba:f2:b0:0a:0b:a4:fc:73:85:da:68:17:be:0d: 94:57:d1:90:fc:59:22:9a:c0:1d:67:01:64:6e:66: af:ac:73:cc:74:41:fa:5c:7c:2b:6f:ed:b2:95:ea: bf:a5:f1:a8:3f:08:75:7f:ff:4e:af:72:03:e7:fa: 99:e5:df:3c:10:ca:66:71:fd:72:f2:3d:04:d1:32: 2b:6c:95:80:0c:dd:04:09:bd:e0:ba:f9:e3:3f:96: 8d:c7:c2:da:f8:ba:a3:9e:7f:46:44:0b:6b:de:34: 86:1b:03:45:62:ed:fe:f5:56:6a:46:79:f7:d7:42: ad:d1:24:e0:d3:bc:3d:a6:6d:a0:4c:cf:03:ee:b1: 0d:16:ed:eb:75:79:43:f6:70:38:87:c2:62:fd:7d: c8:77:ac:d3:65:10:8a:b3:7b:46:4e:4e:76:53:68: ae:7f:db:2f:5a:1d:4c:71:65:b7:d3:1f:24:a6:18: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BA:E9:60:96:B2:A5:07:B3:D4:B0:C2:74:BC:2F:F5:89:E9:F9:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/34e759-c9e3-45ba-881b-0873865e4432/1/ubrpYJaypQez1LDCdLwv9Ynp-aI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.224.0/21 92.39.112.0/20 185.38.32.0/22 212.21.32.0/19 IPv6: 2a00:5e00::/32 Signature Algorithm: sha256WithRSAEncryption a2:17:0e:23:0e:d1:31:85:04:bf:62:88:8c:6f:17:20:e3:b1: 82:9e:b8:7a:e7:10:b2:9b:e4:b1:94:99:37:6a:dd:03:91:aa: 76:97:91:ca:9c:b7:11:d6:06:5b:92:c6:0b:d3:80:fb:ba:a2: 43:ba:8e:f7:e4:5c:af:72:38:33:78:64:50:5d:09:4d:43:96: 77:d3:25:6a:48:ac:ba:87:75:a4:f1:43:83:f0:71:9a:76:94: 6d:9d:8c:dd:fd:b7:3a:a5:b5:8a:9d:8b:72:e6:05:fb:17:37: 1c:f8:ed:72:3f:7a:ce:52:09:0e:0a:af:a8:74:48:19:cf:1c: 38:d6:2d:e7:c0:3e:9b:74:2e:98:eb:62:45:36:b3:60:2d:44: 28:d6:fe:a2:36:78:11:e4:ce:a1:9c:15:ad:bf:d0:52:2c:d2: ed:d8:d8:cb:75:00:71:ad:39:98:27:65:68:1c:ce:34:b7:a9: 1c:2e:69:a4:13:6c:d3:99:df:df:ed:07:5e:bd:70:83:24:89: a9:e9:37:ad:a2:0e:fc:56:a1:3f:91:54:9f:75:21:d2:fb:8d: 66:00:19:9c:be:94:09:bc:1b:cd:c8:10:90:91:1b:cd:43:a5: ba:cd:44:d6:b9:90:53:94:67:d4:f8:00:2f:ba:b9:0e:8f:e1: 73:49:51:6a -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt/FSu8g32vrLrZII9iqREYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWJhZTk2MDk2YjJhNTA3YjNkNGIwYzI3NGJjMmZmNTg5ZTlmOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O+9TbuleZi9o8I4W4CQMJ+PPbqr Vqtu+kB1RWID2lXGWAAnRf9L7E3sDG1WcqKOplWDD+uTRct7kAiCrhBA75u7oxxj MPQTTQeOuvKwCguk/HOF2mgXvg2UV9GQ/FkimsAdZwFkbmavrHPMdEH6XHwrb+2y leq/pfGoPwh1f/9Or3ID5/qZ5d88EMpmcf1y8j0E0TIrbJWADN0ECb3guvnjP5aN x8La+Lqjnn9GRAtr3jSGGwNFYu3+9VZqRnn310Kt0STg07w9pm2gTM8D7rENFu3r dXlD9nA4h8Ji/X3Id6zTZRCKs3tGTk52U2iuf9svWh1McWW30x8kphi7owIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFLm66WCWsqUHs9SwwnS8L/WJ6fmiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzM0ZTc1 OS1jOWUzLTQ1YmEtODgxYi0wODczODY1ZTQ0MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMzRlNzU5 LWM5ZTMtNDViYS04ODFiLTA4NzM4NjVlNDQzMi8xL3VicnBZSmF5cFFlejFMRENk THd2OVlucC1hSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDTingAwQEXCdwAwQCuSYgAwQF1BUgMA0EAgAC MAcDBQAqAF4AMA0GCSqGSIb3DQEBCwUAA4IBAQCiFw4jDtExhQS/YoiMbxcg47GC nrh65xCym+SxlJk3at0Dkap2l5HKnLcR1gZbksYL04D7uqJDuo735FyvcjgzeGRQ XQlNQ5Z30yVqSKy6h3Wk8UOD8HGadpRtnYzd/bc6pbWKnYty5gX7Fzcc+O1yP3rO UgkOCq+odEgZzxw41i3nwD6bdC6Y62JFNrNgLUQo1v6iNngR5M6hnBWtv9BSLNLt 2NjLdQBxrTmYJ2VoHM40t6kcLmmkE2zTmd/f7QdevXCDJImp6Tetog78VqE/kVSf dSHS+41mABmcvpQJvBvNyBCQkRvNQ6W6zUTWuZBTlGfU+AAvurkOj+FzSVFq -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:54 2026 by rpki-client