This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer File: uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer (raw, json) Hash identifier: xWfx0eALfhqHhHfIS4dMVvrjFaW7v9LBW8B+Syj0/dY= Subject key identifier: BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDC07A3C3CDE8CDB472A8B743EF45C66F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 15:30:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 147.234.106.0 -- 147.234.159.255 IP: 147.234.161.0 -- 147.234.169.255 IP: 147.234.171.0 -- 147.234.174.255 IP: 147.234.176.0/21 IP: 147.234.185.0 -- 147.234.255.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:07:a3:c3:cd:e8:cd:b4:72:a8:b7:43:ef:45:c6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 15:30:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:80:2c:b6:47:aa:e8:c3:e8:a4:9e:13:17: e4:d9:9d:fd:21:92:16:9b:b7:d2:45:9d:56:a6:ac: 19:c5:e2:f9:06:16:be:f6:07:c9:ee:8f:8a:a9:19: 84:7c:96:ed:6d:c5:08:94:17:74:a8:f8:02:d2:f0: 4e:89:ad:0b:0f:f2:f5:08:00:6b:f0:8d:64:2e:cc: 91:1a:7f:f8:18:bf:01:9f:17:af:3c:23:b3:da:8b: cc:e6:65:2d:ca:f3:01:b3:67:1f:dc:8c:9e:d3:e4: 7c:e6:07:33:de:e8:6e:e7:76:c0:96:09:0e:6d:e6: cc:f4:f2:bb:3a:4f:f0:92:69:97:70:94:de:e6:60: 3f:9b:d4:b1:97:e2:9e:de:ac:15:ae:f4:21:3e:80: 32:02:82:4f:b0:51:17:ee:bf:4a:70:99:77:2c:c9: f7:c0:94:71:3e:24:2d:14:4f:f0:02:96:77:fc:6b: a7:77:13:e6:b2:01:74:0f:40:80:7c:71:c9:4e:bb: 3f:5b:fa:ba:a3:ea:f9:d4:63:49:e8:62:11:d4:d8: e0:e8:89:dc:5c:82:67:a8:aa:cc:e3:05:8b:c7:c5: 22:1b:3d:dd:da:59:1b:d0:2e:18:31:33:89:87:28: 86:9b:57:73:43:f9:47:7c:38:dc:4f:10:49:a3:54: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.106.0-147.234.159.255 147.234.161.0-147.234.169.255 147.234.171.0-147.234.174.255 147.234.176.0/21 147.234.185.0-147.234.255.255 Signature Algorithm: sha256WithRSAEncryption 66:2e:10:fb:f3:6f:cb:54:85:a2:9f:77:1b:d0:28:8e:60:2c: e6:ed:7c:9d:ef:11:05:84:5f:05:20:55:c7:e0:3f:c1:09:89: 4b:7f:f1:d2:83:26:4a:eb:eb:e0:85:9c:e9:27:54:fb:0f:1c: e0:2e:62:83:84:eb:47:bf:4d:fb:cc:33:42:7c:66:80:31:90: 87:c3:2f:8c:fd:75:ef:6d:a3:16:16:d6:ef:fb:d4:c5:37:b9: 14:a0:3a:61:69:2e:ac:af:53:b3:f3:c3:49:2a:51:3e:b2:3e: a0:0e:f9:d0:f6:d5:67:77:51:0b:87:93:29:a2:42:03:46:7d: 83:db:d6:a5:9f:11:38:94:43:45:f4:97:2b:1a:0c:e4:92:0c: dd:3b:33:48:b4:fd:cf:a0:14:96:a3:9f:15:dc:98:53:21:c0: c2:99:9b:d0:25:f5:38:95:58:4b:fd:d4:77:82:af:c0:99:79: aa:5b:3e:7d:b5:ec:6e:25:db:0e:54:09:f5:cd:da:03:9d:1c: c0:fb:8a:3c:e3:17:d0:bb:71:24:bd:5b:dc:47:b6:26:1c:2f: 2b:e0:90:70:5b:b4:10:8c:d1:46:64:45:1b:a0:f0:7e:62:dc: db:5f:ea:4c:42:dd:f7:56:c4:b3:e4:63:ac:5d:1e:ab:31:b2: 73:ce:f7:b3 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZvcB6PDzejNtHKot0PvRcZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTUzMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTI2N2I4ZTIxNTNmYmZjOTkwMzg0N2I0NTAyYTJiZWY0NGI1NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b2ALLZHqujD6KSeExfk2Z39IZIW m7fSRZ1WpqwZxeL5Bha+9gfJ7o+KqRmEfJbtbcUIlBd0qPgC0vBOia0LD/L1CABr 8I1kLsyRGn/4GL8BnxevPCOz2ovM5mUtyvMBs2cf3Iye0+R85gcz3uhu53bAlgkO bebM9PK7Ok/wkmmXcJTe5mA/m9Sxl+Ke3qwVrvQhPoAyAoJPsFEX7r9KcJl3LMn3 wJRxPiQtFE/wApZ3/GundxPmsgF0D0CAfHHJTrs/W/q6o+r51GNJ6GIR1Njg6Inc XIJnqKrM4wWLx8UiGz3d2lkb0C4YMTOJhyiGm1dzQ/lHfDjcTxBJo1QO6QIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFLome44hU/v8mQOEe0UCor70S1bmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4Lzk4NWRh NS03ODhjLTQ3YTAtYWI4ZS04ODU0YjAxOWRiOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvOTg1ZGE1 LTc4OGMtNDdhMC1hYjhlLTg4NTRiMDE5ZGI5YS8xL3VpWjdqaUZULV95WkE0UjdS UUtpdnZSTFZ1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFYGCCsGAQUF BwEHAQH/BEcwRTBDBAIAATA9MAwDBAGT6moDBAWT6oAwDAMEAJPqoQMEAZPqqDAM AwQAk+qrAwQAk+quAwQDk+qwMAsDBACT6rkDAwCT6jANBgkqhkiG9w0BAQsFAAOC AQEAZi4Q+/Nvy1SFop93G9AojmAs5u18ne8RBYRfBSBVx+A/wQmJS3/x0oMmSuvr 4IWc6SdU+w8c4C5ig4TrR79N+8wzQnxmgDGQh8MvjP11722jFhbW7/vUxTe5FKA6 YWkurK9Ts/PDSSpRPrI+oA750PbVZ3dRC4eTKaJCA0Z9g9vWpZ8ROJRDRfSXKxoM 5JIM3TszSLT9z6AUlqOfFdyYUyHAwpmb0CX1OJVYS/3Ud4KvwJl5qls+fbXsbiXb DlQJ9c3aA50cwPuKPOMX0LtxJL1b3Ee2JhwvK+CQcFu0EIzRRmRFG6DwfmLc21/q TELd91bEs+RjrF0eqzGyc873sw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:18 2026 by rpki-client