This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer File: ueLcI0DFMJtj66I8--fu0Rt0r0c.cer (raw, json) Hash identifier: aYcp+x8oK/MzwBPwBKuA1AVpym3PSpFv7zXukHyoO6o= Subject key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDC947909C93A96739341324A4D9B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21454 IP: 80.252.224.0/20 IP: 185.173.236.0/22 IP: 188.214.198.0/24 IP: 195.74.75.0/24 IP: 2a10:5340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c9:47:90:9c:93:a9:67:39:34:13:24:a4:d9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:c1:04:a1:dd:eb:fc:80:e4:05:60:9b:f3: 5a:c1:34:35:bd:64:23:0a:b2:04:01:b3:5c:bb:08: c0:27:bf:d5:4e:53:ba:0a:ff:8b:dd:ab:73:ce:77: e2:59:15:57:0b:ea:a5:62:9d:fc:c2:0d:37:19:28: 98:0f:9a:d3:c0:e0:18:05:4e:19:42:1d:dc:33:80: f5:90:ca:dc:ac:45:b8:16:59:1f:c4:2c:19:2d:d0: c8:29:10:a2:26:23:00:a2:dd:f3:13:b6:64:a8:44: c1:54:b6:0d:a5:d4:26:71:4c:24:0f:87:ff:97:bd: e3:c6:48:2d:73:8a:69:7f:b8:4f:7c:8c:07:58:c2: d2:c4:5f:a1:b9:29:98:c3:f2:4c:04:60:d0:7d:02: a9:25:e0:3b:b5:26:95:72:6c:88:ed:a1:62:04:07: b4:26:98:cb:86:7d:a5:5d:df:fa:7f:e7:2e:80:2a: 43:39:8c:a9:ae:b2:18:85:71:5b:bc:52:5c:e9:14: 23:c8:99:ec:8e:4c:f7:d4:96:03:b0:70:58:d8:62: 0c:89:57:72:cb:af:37:de:b6:0f:5e:8c:a7:04:33: 30:c5:89:fc:59:41:60:a6:57:51:16:ff:2b:d0:b0: b1:61:e2:d0:74:18:97:1d:11:ab:b8:ae:49:e2:98: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.252.224.0/20 185.173.236.0/22 188.214.198.0/24 195.74.75.0/24 IPv6: 2a10:5340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21454 Signature Algorithm: sha256WithRSAEncryption 01:4f:28:15:f7:51:e5:85:64:77:02:14:39:72:7a:66:46:a6: 17:d7:df:74:31:84:18:b6:7b:51:cf:f5:35:bd:07:9e:42:f0: 27:69:c8:2e:75:fa:4d:36:19:04:b2:55:f1:e8:46:7f:f4:3b: 89:4e:c4:9f:8f:84:3a:6e:46:1d:4e:04:fb:a3:e8:5a:3d:d8: ec:69:e5:44:e7:61:1f:54:35:c9:b7:bc:e8:b2:3b:d6:8e:f7: df:61:95:05:1b:e4:e2:1d:6a:98:2a:f3:d8:73:e5:83:a9:66: 17:8a:e8:c8:73:5c:71:c1:cd:50:90:32:b4:9f:d7:83:cf:67: 54:64:1f:81:5c:fa:86:27:56:4d:27:b6:70:24:44:e0:f2:21: 0e:25:3a:36:7f:42:8a:79:c4:ff:8e:15:c1:9f:4b:8d:79:d2: 02:23:d7:ab:af:79:d2:60:fb:cb:c1:f9:65:e6:85:53:d2:ee: 27:ef:73:8d:45:d1:b7:81:c6:d4:68:6a:9f:78:a2:2d:c3:b1: 71:c6:db:8e:90:ff:7d:63:ab:b2:00:37:90:54:f6:48:22:56: 44:74:41:e0:63:df:fc:d6:eb:36:88:50:a2:c5:89:05:ce:e4: ab:97:ce:20:c6:d7:6a:47:e6:61:5a:de:a0:87:77:53:ef:3a: ef:c7:d2:ad -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt87clHkJyTqWc5NBMkpNmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWUyZGMyMzQwYzUzMDliNjNlYmEyM2NmYmU3ZWVkMTFiNzRhZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnbBBKHd6/yA5AVgm/NawTQ1vWQj CrIEAbNcuwjAJ7/VTlO6Cv+L3atzznfiWRVXC+qlYp38wg03GSiYD5rTwOAYBU4Z Qh3cM4D1kMrcrEW4FlkfxCwZLdDIKRCiJiMAot3zE7ZkqETBVLYNpdQmcUwkD4f/ l73jxkgtc4ppf7hPfIwHWMLSxF+huSmYw/JMBGDQfQKpJeA7tSaVcmyI7aFiBAe0 JpjLhn2lXd/6f+cugCpDOYyprrIYhXFbvFJc6RQjyJnsjkz31JYDsHBY2GIMiVdy y6833rYPXoynBDMwxYn8WUFgpldRFv8r0LCxYeLQdBiXHRGruK5J4pjkBwIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFLni3CNAxTCbY+uiPPvn7tEbdK9HMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzZmOTlk Mi1hZDA1LTRjZmMtOWE1ZS05Y2JlZGNlYzg2ZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvNmY5OWQy LWFkMDUtNGNmYy05YTVlLTljYmVkY2VjODZkNi8xL3VlTGNJMERGTUp0ajY2STgt LWZ1MFJ0MHIwYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQEUPzgAwQCua3sAwQAvNbGAwQAw0pLMA0EAgAC MAcDBQMqEFNAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlPOMA0GCSqGSIb3DQEB CwUAA4IBAQABTygV91HlhWR3AhQ5cnpmRqYX1990MYQYtntRz/U1vQeeQvAnacgu dfpNNhkEslXx6EZ/9DuJTsSfj4Q6bkYdTgT7o+haPdjsaeVE52EfVDXJt7zosjvW jvffYZUFG+TiHWqYKvPYc+WDqWYXiujIc1xxwc1QkDK0n9eDz2dUZB+BXPqGJ1ZN J7ZwJETg8iEOJTo2f0KKecT/jhXBn0uNedICI9err3nSYPvLwfll5oVT0u4n73ON RdG3gcbUaGqfeKItw7FxxtuOkP99Y6uyADeQVPZIIlZEdEHgY9/81us2iFCixYkF zuSrl84gxtdqR+ZhWt6gh3dT7zrvx9Kt -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:37 2026 by rpki-client