This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer File: uhzvb56e3EXjzSjvQCUZeVLUYOk.cer (raw, json) Hash identifier: fe/ZGTDVYRoJnyhQ+E+jpA+r8+uv0tNJAfHkSXhHy8w= Subject key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF28C5D5C22F498813A2A1AB8A26006 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.143.252.0/22 IP: 2a07:39c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:8c:5d:5c:22:f4:98:81:3a:2a:1a:b8:a2:60:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:81:63:5f:96:4f:6e:8f:ac:56:c3:fa:d9: 43:19:dd:9f:c7:20:27:1e:20:94:4d:66:a2:6d:4d: 4d:9d:44:8d:00:ff:fd:16:d4:32:e0:73:11:33:fa: fb:63:ef:fe:2a:9c:69:cb:7d:da:57:d4:4c:a0:0f: 28:24:f2:6f:fd:77:6c:59:1f:bc:21:8b:eb:6d:dc: 3a:1c:a6:ab:80:6e:46:33:d5:a9:d9:71:62:a7:33: 0f:84:3a:b3:77:00:dd:2b:93:4a:57:a6:a8:b3:2e: 99:c9:1d:dc:5d:92:f0:3c:98:ef:22:3a:48:87:57: 52:0f:9c:f2:77:4d:a3:8a:d6:b7:4b:42:08:f3:84: f1:91:0e:e0:21:bc:ee:e5:23:78:da:92:af:4e:cd: bd:f0:c3:bf:68:44:c5:58:bd:90:80:d3:2c:f1:00: a2:70:ff:b7:01:d4:5d:0b:e1:6b:df:8c:e3:93:d4: c4:40:b2:5b:86:46:35:00:d8:6f:4e:8b:70:42:09: 59:17:32:d7:94:73:5b:c8:8c:d8:cf:9a:a4:e8:ba: d3:5a:8d:ac:da:34:07:fd:05:8f:de:53:9b:42:15: e2:e4:95:53:c7:69:dc:c8:cb:1d:04:9d:56:6d:7d: fd:d8:9f:bc:7a:fd:cc:da:1c:f2:bd:ce:ef:7c:2a: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.252.0/22 IPv6: 2a07:39c0::/29 Signature Algorithm: sha256WithRSAEncryption 86:5d:89:0d:a6:4f:6c:18:2a:bb:15:dd:7e:04:51:40:47:c7: 08:c6:3d:7c:d7:da:cf:7a:d9:1f:c6:bc:ce:75:73:42:bb:77: 4d:73:48:f1:78:26:21:ec:61:14:d3:b6:e9:1c:07:0d:bb:fb: a0:07:d6:fc:25:52:b8:4a:72:a2:84:21:84:fe:bc:8b:3f:53: 5f:d6:8b:fa:c6:36:c8:96:cd:c1:2e:4f:68:d5:5b:d8:08:87: 89:f5:c0:43:39:a4:60:37:27:41:04:20:2e:5a:7a:72:43:7d: fd:48:c3:c2:ec:c2:a9:2f:19:00:49:93:53:94:0d:27:04:a8: ab:7b:68:e9:93:3f:25:53:01:db:15:ea:c3:5b:fe:8e:95:98: ac:de:a3:7f:4c:db:b9:de:aa:a5:a7:5a:c2:16:a3:af:9a:50: 42:51:c9:6a:df:86:53:e4:bd:1c:e4:dc:c7:05:69:b2:fb:eb: 21:1e:19:72:9d:c2:f4:7c:e1:d8:31:a8:c9:c9:c2:65:18:57: 57:59:38:08:da:aa:2a:5c:d1:67:88:a2:58:47:61:09:73:72: 5c:ae:8f:3d:b2:32:b9:58:de:b3:72:db:5d:c7:7d:af:32:cb: c0:05:78:b2:ec:81:f5:4e:75:7b:03:99:22:29:80:7d:71:ed: 24:c0:2b:98 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/8oxdXCL0mIE6Khq4omAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTFjZWY2ZjllOWVkYzQ1ZTNjZDI4ZWY0MDI1MTk3OTUyZDQ2MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW6BY1+WT26PrFbD+tlDGd2fxyAn HiCUTWaibU1NnUSNAP/9FtQy4HMRM/r7Y+/+Kpxpy33aV9RMoA8oJPJv/XdsWR+8 IYvrbdw6HKargG5GM9Wp2XFipzMPhDqzdwDdK5NKV6aosy6ZyR3cXZLwPJjvIjpI h1dSD5zyd02jita3S0II84TxkQ7gIbzu5SN42pKvTs298MO/aETFWL2QgNMs8QCi cP+3AdRdC+Fr34zjk9TEQLJbhkY1ANhvTotwQglZFzLXlHNbyIzYz5qk6LrTWo2s 2jQH/QWP3lObQhXi5JVTx2ncyMsdBJ1WbX392J+8ev3M2hzyvc7vfCoENwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLoc72+entxF480o70AlGXlS1GDpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzIxZDY2 My02ODc0LTQ4OWMtYWI5ZS1kOWNhMDNlNjZmZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMjFkNjYz LTY4NzQtNDg5Yy1hYjllLWQ5Y2EwM2U2NmZmYi8xL3VoenZiNTZlM0VYanpTanZR Q1VaZVZMVVlPay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuY/8MA0EAgACMAcDBQMqBznAMA0GCSqGSIb3 DQEBCwUAA4IBAQCGXYkNpk9sGCq7Fd1+BFFAR8cIxj1819rPetkfxrzOdXNCu3dN c0jxeCYh7GEU07bpHAcNu/ugB9b8JVK4SnKihCGE/ryLP1Nf1ov6xjbIls3BLk9o 1VvYCIeJ9cBDOaRgNydBBCAuWnpyQ339SMPC7MKpLxkASZNTlA0nBKire2jpkz8l UwHbFerDW/6OlZis3qN/TNu53qqlp1rCFqOvmlBCUclq34ZT5L0c5NzHBWmy++sh HhlyncL0fOHYMajJycJlGFdXWTgI2qoqXNFniKJYR2EJc3Jcro89sjK5WN6zcttd x32vMsvABXiy7IH1TnV7A5kiKYB9ce0kwCuY -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:32 2026 by rpki-client