This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ulnZ9a887kQgFLc1lhxzuWkmDhk.cer File: ulnZ9a887kQgFLc1lhxzuWkmDhk.cer (raw, json) Hash identifier: x7pz3gTVJPPrDOgklnOngpTB7OA5HOf+HwZQ9N/ysAc= Subject key identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A350EC846BDCBBED95C10BD90B84C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51623 IP: 195.93.144.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:50:ec:84:6b:dc:bb:ed:95:c1:0b:d9:0b:84:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba59d9f5af3cee442014b735961c73b969260e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:15:38:46:6c:79:05:91:d2:bb:f3:ba:d6: 06:86:3f:85:4c:12:66:4d:5b:99:99:c8:c6:5c:c8: d9:8e:20:2e:4b:39:53:ea:2b:78:b6:14:21:39:4b: ad:d6:56:15:92:e7:5a:17:86:20:52:d3:5b:13:09: 16:15:db:cb:64:98:f3:30:ec:97:f4:35:5c:9d:c2: 90:3c:79:4d:d7:06:1b:1d:03:dc:ca:ae:4c:db:9c: 1b:f7:75:07:9c:e8:48:2d:c4:2f:93:a1:b2:63:02: 2c:a8:7a:8c:d5:49:dc:cc:a0:b2:4b:01:d6:b8:b8: 39:ac:7d:fb:28:d0:df:a3:29:d4:5f:f0:18:7e:e2: 68:ee:4a:4a:af:7a:b8:1f:57:83:7f:d5:36:b7:49: ad:ea:b1:df:34:0a:a9:70:d9:45:d3:d1:6d:65:7f: 7a:5d:1c:79:c4:cb:3d:3a:c5:3a:d9:f7:d4:ca:9d: 9c:c0:7a:a3:d8:e5:3e:ac:bb:09:a9:06:2f:31:64: b4:3d:f2:40:67:80:9e:72:1f:c7:fa:2e:5d:34:22: 9c:57:cd:0a:15:bc:cf:c5:e2:87:d8:16:41:09:30: 23:db:8f:cd:fa:b1:60:13:c3:2b:f2:0d:e8:02:20: 0b:89:31:ab:c8:50:1f:28:21:e8:d9:a6:d1:84:de: d8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:59:D9:F5:AF:3C:EE:44:20:14:B7:35:96:1C:73:B9:69:26:0E:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/03d3fa-9e22-441e-b5c5-d203e20018f5/1/ulnZ9a887kQgFLc1lhxzuWkmDhk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.93.144.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51623 Signature Algorithm: sha256WithRSAEncryption 48:b9:40:da:cd:0f:ae:60:f2:7d:8a:53:ab:79:ab:76:e8:94: 37:20:b7:56:bf:21:7e:d8:bd:0a:2d:23:dd:47:56:d2:77:42: 74:17:94:df:7b:50:d5:70:ea:77:8a:fa:e6:12:f1:ec:44:16: 3d:2b:1d:c5:ff:00:6d:ad:6b:12:72:24:d9:bf:50:7b:3c:6a: f9:21:c7:95:fc:73:a4:00:95:b5:dc:91:0f:ce:92:aa:20:0c: 26:2e:13:85:b6:1f:71:de:ee:93:e8:62:b9:04:c1:69:cf:6d: a8:3c:40:3f:c2:05:7b:2e:3f:76:81:98:aa:6f:94:51:1d:cb: 59:e8:97:e3:cb:08:eb:a9:aa:ed:2b:e1:7c:59:9e:3c:21:05: 6c:64:5c:ba:42:c8:13:8f:0c:5b:3d:68:ad:f3:3e:0f:7f:05: ab:b5:bb:53:77:cb:3d:c9:68:51:80:fb:04:02:34:6f:da:a7: 8c:21:2c:d1:89:7f:87:ff:75:91:36:f9:30:cd:1f:2c:f5:2c: ef:9a:3f:5d:66:60:36:14:45:09:98:10:5e:d0:85:0b:0b:c3: 12:48:1e:c2:4e:61:0a:7e:f8:6f:a5:c7:1a:72:05:2b:7f:17: 2e:88:b8:14:71:cd:cd:26:6f:69:21:3f:8c:68:5e:05:a2:46: 7d:18:8d:ab -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4o1DshGvcu+2VwQvZC4TDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTU5ZDlmNWFmM2NlZTQ0MjAxNGI3MzU5NjFjNzNiOTY5MjYwZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GAVOEZseQWR0rvzutYGhj+FTBJm TVuZmcjGXMjZjiAuSzlT6it4thQhOUut1lYVkudaF4YgUtNbEwkWFdvLZJjzMOyX 9DVcncKQPHlN1wYbHQPcyq5M25wb93UHnOhILcQvk6GyYwIsqHqM1UnczKCySwHW uLg5rH37KNDfoynUX/AYfuJo7kpKr3q4H1eDf9U2t0mt6rHfNAqpcNlF09FtZX96 XRx5xMs9OsU62ffUyp2cwHqj2OU+rLsJqQYvMWS0PfJAZ4Cech/H+i5dNCKcV80K FbzPxeKH2BZBCTAj24/N+rFgE8Mr8g3oAiALiTGryFAfKCHo2abRhN7YvQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLpZ2fWvPO5EIBS3NZYcc7lpJg4ZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzAzZDNm YS05ZTIyLTQ0MWUtYjVjNS1kMjAzZTIwMDE4ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvMDNkM2Zh LTllMjItNDQxZS1iNWM1LWQyMDNlMjAwMThmNS8xL3Vsblo5YTg4N2tRZ0ZMYzFs aHh6dVdrbURoay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw12QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDJpzANBgkqhkiG9w0BAQsFAAOCAQEASLlA2s0PrmDyfYpTq3mrduiUNyC3Vr8h fti9Ci0j3UdW0ndCdBeU33tQ1XDqd4r65hLx7EQWPSsdxf8Aba1rEnIk2b9Qezxq +SHHlfxzpACVtdyRD86SqiAMJi4ThbYfcd7uk+hiuQTBac9tqDxAP8IFey4/doGY qm+UUR3LWeiX48sI66mq7SvhfFmePCEFbGRcukLIE48MWz1orfM+D38Fq7W7U3fL PcloUYD7BAI0b9qnjCEs0Yl/h/91kTb5MM0fLPUs75o/XWZgNhRFCZgQXtCFCwvD Ekgewk5hCn74b6XHGnIFK38XLoi4FHHNzSZvaSE/jGheBaJGfRiNqw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:08 2026 by rpki-client