This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer File: uhGuI6PpyLxvWnnHFfqZp4z4Xf4.cer (raw, json) Hash identifier: +/EMULULMMn8Mm18CmABn5frKpLK/Bxe5SBvJibd4pw= Subject key identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA320871CC1B4CFB16274B496B600FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.228.60.0/23 IP: 2001:67c:22e8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:20:87:1c:c1:b4:cf:b1:62:74:b4:96:b6:00:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba11ae23a3e9c8bc6f5a79c715fa99a78cf85dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:db:b9:6e:cd:02:38:86:22:86:5f:8b:43: f4:7e:ca:1e:d8:b7:10:89:5b:d6:bd:c4:57:83:ec: 17:ca:85:d2:32:28:ee:5f:c4:c8:73:2a:27:b3:de: 5b:31:97:f4:97:36:65:cc:4b:f2:9d:30:d4:ad:a7: e8:5f:72:f8:8e:86:ac:38:d5:23:97:08:de:cc:c9: c9:68:a9:ee:45:c0:4d:04:d1:37:d8:2b:0e:20:9a: 4a:1f:d7:0e:43:2d:4d:ef:c9:c6:7b:72:95:bc:19: c8:d5:4e:65:60:0c:97:c3:f6:0f:7d:cc:9d:43:3c: e9:f5:2d:d3:3d:6f:b8:1b:a4:98:39:c5:ab:da:88: 4c:7b:ad:f8:3a:e9:0c:f7:17:e0:c4:1a:73:4a:6f: df:ee:6a:94:28:11:dc:ba:c8:d3:6f:f3:aa:95:f5: bc:47:84:31:25:60:8c:ab:5b:5e:38:53:e9:90:ca: 62:37:34:7b:b5:cd:8d:a0:00:39:03:6a:c2:03:59: df:93:f7:5d:58:fe:7f:86:6e:49:31:48:36:02:57: 4e:5a:14:01:bb:6c:0b:05:3f:b4:46:54:e6:09:b1: 55:6f:5f:7d:7f:7a:6a:d1:bd:3a:38:a6:06:38:5d: 6b:df:6c:8f:c0:f9:10:97:b2:e5:1a:23:91:5e:b7: 71:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:11:AE:23:A3:E9:C8:BC:6F:5A:79:C7:15:FA:99:A7:8C:F8:5D:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9ea636-ec11-4159-b24b-b1e0dd2bf5c7/1/uhGuI6PpyLxvWnnHFfqZp4z4Xf4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.60.0/23 IPv6: 2001:67c:22e8::/48 Signature Algorithm: sha256WithRSAEncryption 63:a8:0f:a7:80:7f:66:b6:f0:96:ae:2d:89:e0:81:72:41:76: fa:47:ca:88:7e:27:61:b1:de:78:cd:c3:06:de:32:79:46:cc: 21:37:f1:ea:b1:01:6e:7a:f0:86:4c:d8:9d:af:ff:e4:24:07: ec:02:09:2c:6a:0f:3f:d5:43:a6:6b:05:81:2c:4c:31:83:12: 9e:53:9c:e1:a0:d7:e9:e2:ac:93:c7:36:6b:ce:36:b9:34:da: 6e:ee:6d:85:7a:28:92:58:f8:b1:1b:d0:fc:68:86:54:ca:67: c8:c9:9b:b7:d3:1c:f4:00:8d:1d:a3:e0:e8:9d:3a:1f:fc:53: e6:39:d4:c8:a2:32:4d:8e:68:e7:b7:a2:81:6a:17:a6:34:5a: ce:8d:76:0c:c2:f9:69:2b:a9:35:90:82:eb:f5:eb:56:f8:14: ea:12:39:09:24:ee:12:75:e3:5b:a4:ec:48:8e:6a:b0:c5:43: b1:0c:f7:04:a6:3f:ef:e1:69:53:07:95:6a:29:da:41:40:fb: c8:3f:ad:36:4b:d2:77:28:84:38:fa:20:a7:f8:b8:75:34:cf: 6c:43:fe:a3:58:36:11:a8:70:e8:50:99:d5:00:63:ea:f1:54: dc:3c:dd:24:fb:d4:d5:98:16:f7:9f:54:74:e7:7e:c2:bd:79: 6e:9f:6c:9a -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt7oyCHHMG0z7FidLSWtgD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTExYWUyM2EzZTljOGJjNmY1YTc5YzcxNWZhOTlhNzhjZjg1ZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP/buW7NAjiGIoZfi0P0fsoe2LcQ iVvWvcRXg+wXyoXSMijuX8TIcyons95bMZf0lzZlzEvynTDUrafoX3L4joasONUj lwjezMnJaKnuRcBNBNE32CsOIJpKH9cOQy1N78nGe3KVvBnI1U5lYAyXw/YPfcyd Qzzp9S3TPW+4G6SYOcWr2ohMe634OukM9xfgxBpzSm/f7mqUKBHcusjTb/OqlfW8 R4QxJWCMq1teOFPpkMpiNzR7tc2NoAA5A2rCA1nfk/ddWP5/hm5JMUg2AldOWhQB u2wLBT+0RlTmCbFVb199f3pq0b06OKYGOF1r32yPwPkQl7LlGiORXrdxYwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFLoRriOj6ci8b1p5xxX6maeM+F3+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzllYTYz Ni1lYzExLTQxNTktYjI0Yi1iMWUwZGQyYmY1YzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvOWVhNjM2 LWVjMTEtNDE1OS1iMjRiLWIxZTBkZDJiZjVjNy8xL3VoR3VJNlBweUx4dldubkhG ZnFacDR6NFhmNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBW+Q8MA8EAgACMAkDBwAgAQZ8IugwDQYJKoZI hvcNAQELBQADggEBAGOoD6eAf2a28JauLYnggXJBdvpHyoh+J2Gx3njNwwbeMnlG zCE38eqxAW568IZM2J2v/+QkB+wCCSxqDz/VQ6ZrBYEsTDGDEp5TnOGg1+nirJPH NmvONrk02m7ubYV6KJJY+LEb0PxohlTKZ8jJm7fTHPQAjR2j4OidOh/8U+Y51Mii Mk2OaOe3ooFqF6Y0Ws6NdgzC+WkrqTWQguv161b4FOoSOQkk7hJ141uk7EiOarDF Q7EM9wSmP+/haVMHlWop2kFA+8g/rTZL0ncohDj6IKf4uHU0z2xD/qNYNhGocOhQ mdUAY+rxVNw83ST71NWYFvefVHTnfsK9eW6fbJo= -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:21 2026 by rpki-client