This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer File: uef3G89S7W0Ft-s7dB7HkG533Mo.cer (raw, json) Hash identifier: vFmgm1UdmIaseKzA4Z2jdRYTxvzfOGhn+R3a6WN0azM= Subject key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC89A3F453407D32017DDE8555755BF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28865 IP: 91.235.104.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9a:3f:45:34:07:d3:20:17:dd:e8:55:57:55:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:6e:81:25:a8:8d:d0:62:c6:00:2f:26:e9: d5:c9:a0:f2:f8:6e:aa:7f:4a:f9:48:33:59:6e:2f: 1d:a7:19:b7:7c:c2:cb:d7:ea:07:05:74:24:58:9d: e7:49:79:25:91:3f:6a:4c:8c:92:bd:08:26:81:52: 8b:80:0e:d0:2d:89:5b:21:a6:51:eb:d6:ef:28:9c: 3c:0b:c0:58:81:c9:6a:04:82:08:a9:fd:cf:1f:a5: 78:48:08:25:5e:61:de:15:4a:96:6e:7b:c7:59:e9: fe:84:5d:23:c2:e7:0b:63:c5:f4:0a:a9:58:6c:45: de:4d:0d:04:11:d5:28:32:a0:13:99:5c:cc:fe:87: 9b:5e:23:3b:9e:93:fa:f6:ff:b0:7c:c3:21:2e:2e: ce:98:ff:12:4c:62:e6:5e:6a:f2:68:e8:28:8f:c1: 75:5b:7d:33:eb:9a:14:b3:94:d9:cb:4a:e5:f7:9e: d6:a9:d6:01:26:62:fc:65:f0:df:0d:ef:f6:bd:02: 01:dc:8c:1f:d1:4a:4c:b4:8e:85:9c:5a:1f:9d:16: 85:7a:4d:7d:ce:1c:6d:14:ea:71:18:e1:2b:7d:94: a0:4a:49:ed:76:d2:87:4f:29:20:7d:08:0b:9b:23: a4:ca:73:86:fa:40:dc:ce:64:3f:99:21:d2:a1:3a: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.104.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28865 Signature Algorithm: sha256WithRSAEncryption 94:54:69:b5:a5:06:d4:12:ba:b3:c5:fc:b5:26:c9:fa:3e:72: be:5e:5e:61:91:b6:a2:83:df:42:e7:18:c0:0b:8a:dc:ed:82: 48:3c:0d:33:06:71:88:12:73:40:e0:32:54:16:80:53:63:4f: ad:2f:20:d3:2d:45:84:86:76:2e:c9:50:3f:46:21:20:0c:a1: e7:cf:52:3f:11:32:2e:1b:20:f7:98:ea:c3:ca:fd:ab:26:1e: cc:3b:9d:66:cb:70:4c:ad:fb:65:13:6d:5e:7e:17:15:4e:38: e7:d4:ab:af:53:10:d1:0e:ef:df:21:5f:d2:35:3d:f4:f1:1e: 94:05:83:16:c3:a2:89:2d:f9:5b:1d:96:cd:3d:d7:cb:73:c8: de:de:d0:88:1d:4e:c8:e6:59:7d:fb:c5:45:f2:fa:22:14:3e: 47:d1:68:07:ac:80:f4:55:aa:c6:60:ee:9f:e9:ba:d3:4a:20: b2:e9:15:3a:60:a8:cd:7d:de:e5:99:52:9f:44:0d:ac:16:e4: 96:44:69:a4:2b:7e:9b:ba:cd:5d:be:82:82:8a:fb:96:d3:19: be:ed:08:03:77:8e:21:ba:1f:f9:b4:d5:19:b8:be:a1:3c:19: 0f:be:98:15:a9:b6:94:5c:70:df:77:ba:58:48:7a:5e:ae:c4: 7d:36:3a:06 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6yJo/RTQH0yAX3ehVV1W/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWU3ZjcxYmNmNTJlZDZkMDViN2ViM2I3NDFlYzc5MDZlNzdkY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oZugSWojdBixgAvJunVyaDy+G6q f0r5SDNZbi8dpxm3fMLL1+oHBXQkWJ3nSXklkT9qTIySvQgmgVKLgA7QLYlbIaZR 69bvKJw8C8BYgclqBIIIqf3PH6V4SAglXmHeFUqWbnvHWen+hF0jwucLY8X0CqlY bEXeTQ0EEdUoMqATmVzM/oebXiM7npP69v+wfMMhLi7OmP8STGLmXmryaOgoj8F1 W30z65oUs5TZy0rl957WqdYBJmL8ZfDfDe/2vQIB3Iwf0UpMtI6FnFofnRaFek19 zhxtFOpxGOErfZSgSkntdtKHTykgfQgLmyOkynOG+kDczmQ/mSHSoTrPywIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLnn9xvPUu1tBbfrO3Qex5Bud9zKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzBmMTY5 NS03YWQ2LTRkMjQtODA2ZC1iNWNkMTNkOTE4NGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvMGYxNjk1 LTdhZDYtNGQyNC04MDZkLWI1Y2QxM2Q5MTg0Yy8xL3VlZjNHODlTN1cwRnQtczdk QjdIa0c1MzNNby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW+toMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnDBMA0GCSqGSIb3DQEBCwUAA4IBAQCUVGm1pQbUErqzxfy1Jsn6PnK+Xl5hkbai g99C5xjAC4rc7YJIPA0zBnGIEnNA4DJUFoBTY0+tLyDTLUWEhnYuyVA/RiEgDKHn z1I/ETIuGyD3mOrDyv2rJh7MO51my3BMrftlE21efhcVTjjn1KuvUxDRDu/fIV/S NT308R6UBYMWw6KJLflbHZbNPdfLc8je3tCIHU7I5ll9+8VF8voiFD5H0WgHrID0 VarGYO6f6brTSiCy6RU6YKjNfd7lmVKfRA2sFuSWRGmkK36bus1dvoKCivuW0xm+ 7QgDd44huh/5tNUZuL6hPBkPvpgVqbaUXHDfd7pYSHpersR9NjoG -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:31 2026 by rpki-client