This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uglQnQRuXLar5boZqxurpUPTffg.cer File: uglQnQRuXLar5boZqxurpUPTffg.cer (raw, json) Hash identifier: 2nhx/L5McCYsFpF2CFdtKUTw0zrCACyQ4Os6Vy0/zFM= Subject key identifier: BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC77CE337F73F19C8A3A3622C98393E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43452 IP: 185.204.56.0/22 IP: 2a0a:f7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7c:e3:37:f7:3f:19:c8:a3:a3:62:2c:98:39:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba09509d046e5cb6abe5ba19ab1baba543d37df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:db:eb:e2:90:2c:82:81:2b:ee:16:79:be: eb:6f:9a:05:f2:b1:a8:52:fb:dd:1c:38:ec:9b:4a: 60:5b:89:0d:34:b8:9b:06:ca:9e:a2:24:22:f0:37: 28:29:d6:57:ca:25:32:ec:f4:98:24:c6:f2:05:3d: b8:ae:57:6e:bf:98:8f:ec:3d:02:8d:ef:cb:04:a7: f6:ae:ed:5b:4b:19:b5:86:82:b4:5b:20:65:63:9b: 21:0e:37:5d:30:39:9d:33:27:dc:cc:0e:d8:2b:18: d5:7c:ec:8c:37:09:23:9c:19:f5:9c:54:b2:96:66: 64:01:cd:51:94:5e:82:1f:48:78:fb:b2:20:e0:5e: 5e:a3:3d:6c:4f:20:17:81:51:ba:f7:1e:0b:ab:f1: a7:87:fc:17:f3:d5:b5:83:9c:95:39:18:51:84:d5: f7:55:aa:fb:57:76:a1:8e:d5:08:a5:81:7d:8e:36: 49:52:1a:31:10:94:9d:98:01:0e:a4:f9:ae:26:3f: 64:8c:05:70:45:46:fa:96:b2:a4:cf:64:6d:11:47: d1:55:8a:e3:50:b8:a7:6a:6d:c8:a9:9a:43:09:ab: 40:b0:76:b4:f2:f7:83:da:60:13:b2:be:0e:9a:91: 59:6a:bb:f2:76:32:dd:34:1d:88:a4:54:1e:09:57: a8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:09:50:9D:04:6E:5C:B6:AB:E5:BA:19:AB:1B:AB:A5:43:D3:7D:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/92dfa6-58f5-4fbf-afe4-d7e42200a49e/1/uglQnQRuXLar5boZqxurpUPTffg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.56.0/22 IPv6: 2a0a:f7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43452 Signature Algorithm: sha256WithRSAEncryption 43:13:0c:0c:31:bf:c0:b5:1b:bb:f6:d3:7d:6e:85:fa:8b:71: f5:53:83:96:6a:36:a1:12:ed:b5:45:f4:50:a5:27:c8:09:46: 6f:9a:28:47:7c:96:a4:14:04:85:5d:32:51:66:4b:70:6e:af: 15:23:29:eb:a9:be:1a:28:61:18:d9:5c:a6:42:87:64:f9:fe: b5:97:25:d1:99:f5:43:da:54:6f:3c:6d:67:b2:43:dd:63:05: 5c:80:22:64:ed:72:c1:5c:88:14:1c:77:d1:83:b2:20:5e:9b: d6:bd:b8:54:e9:6c:e5:0b:12:9c:9f:8b:86:af:38:dc:c1:6a: b0:98:06:cf:5a:1b:1b:49:d6:f2:a0:d1:e6:a2:22:00:ad:8d: 74:cb:e6:d5:20:86:9c:75:51:ac:01:18:f1:c0:e9:59:df:2d: bd:d6:f9:43:44:c8:0c:e3:10:c4:1e:03:3a:fa:d0:80:16:69: 58:21:85:4d:51:6b:7b:43:e8:18:5e:d3:d3:b3:88:75:01:95: ed:c1:bd:3e:c8:c3:58:26:91:67:48:3a:ca:ac:97:14:bd:02: 6a:17:05:24:e9:8e:2a:93:36:64:4c:bb:15:80:54:f5:29:08: 2c:e6:fd:b3:cc:72:47:ee:6e:78:ea:61:10:e8:ed:05:11:00: 10:41:18:e2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x3zjN/c/Gcijo2IsmDk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTA5NTA5ZDA0NmU1Y2I2YWJlNWJhMTlhYjFiYWJhNTQzZDM3ZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtbb6+KQLIKBK+4Web7rb5oF8rGo UvvdHDjsm0pgW4kNNLibBsqeoiQi8DcoKdZXyiUy7PSYJMbyBT24rlduv5iP7D0C je/LBKf2ru1bSxm1hoK0WyBlY5shDjddMDmdMyfczA7YKxjVfOyMNwkjnBn1nFSy lmZkAc1RlF6CH0h4+7Ig4F5eoz1sTyAXgVG69x4Lq/Gnh/wX89W1g5yVORhRhNX3 Var7V3ahjtUIpYF9jjZJUhoxEJSdmAEOpPmuJj9kjAVwRUb6lrKkz2RtEUfRVYrj ULinam3IqZpDCatAsHa08veD2mATsr4OmpFZarvydjLdNB2IpFQeCVeoTQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLoJUJ0Ebly2q+W6Gasbq6VD0334MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzkyZGZh Ni01OGY1LTRmYmYtYWZlNC1kN2U0MjIwMGE0OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvOTJkZmE2 LTU4ZjUtNGZiZi1hZmU0LWQ3ZTQyMjAwYTQ5ZS8xL3VnbFFuUVJ1WExhcjVib1px eHVycFVQVGZmZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucw4MA0EAgACMAcDBQMqCvfAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCpvDANBgkqhkiG9w0BAQsFAAOCAQEAQxMMDDG/wLUb u/bTfW6F+otx9VODlmo2oRLttUX0UKUnyAlGb5ooR3yWpBQEhV0yUWZLcG6vFSMp 66m+GihhGNlcpkKHZPn+tZcl0Zn1Q9pUbzxtZ7JD3WMFXIAiZO1ywVyIFBx30YOy IF6b1r24VOls5QsSnJ+Lhq843MFqsJgGz1obG0nW8qDR5qIiAK2NdMvm1SCGnHVR rAEY8cDpWd8tvdb5Q0TIDOMQxB4DOvrQgBZpWCGFTVFre0PoGF7T07OIdQGV7cG9 PsjDWCaRZ0g6yqyXFL0CahcFJOmOKpM2ZEy7FYBU9SkILOb9s8xyR+5ueOphEOjt BREAEEEY4g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:11 2026 by rpki-client