This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer File: uncwHhTWWzo9aG2qwW38SaxIx80.cer (raw, json) Hash identifier: 47HPwlSaqXRkPknNUyGfllDcCyvL869lkUgIX3pJqo0= Subject key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4FD281B570EA64FF44D7261DFB46B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211896 IP: 194.180.20.0/24 IP: 194.180.25.0/24 IP: 194.180.52.0/24 IP: 194.180.55.0/24 IP: 2a0f:b3c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fd:28:1b:57:0e:a6:4f:f4:4d:72:61:df:b4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:85:9f:f1:83:79:e9:e1:d6:dc:a7:78:f0: e9:64:9e:95:5b:5b:ea:f1:99:66:ec:2e:18:37:e7: 4d:77:75:c5:f1:6b:7a:f8:b5:e6:62:d7:4a:2f:10: d9:fc:59:fc:13:58:11:7e:d0:a7:58:f4:be:bf:5c: 0e:65:d7:21:0a:cf:f7:7e:0d:59:66:0b:67:99:8b: f4:ec:53:c2:38:b5:0a:eb:d4:fd:30:01:2f:be:ac: 3d:72:9c:58:22:86:c0:90:07:94:ca:a0:b6:21:79: cf:f5:e3:a6:dc:73:76:c1:c5:dc:31:b3:6d:de:e8: 1f:aa:bb:b0:fe:d4:14:da:63:37:a6:0d:87:31:07: 7e:8b:96:6f:00:b7:22:4e:9d:94:37:ff:0f:c2:35: 81:82:4f:aa:34:c1:4b:22:2e:8d:a1:c1:e2:6e:d4: 24:38:8e:5d:b9:37:11:d4:fc:8b:57:1e:8c:09:3e: ba:32:f7:21:a2:7b:d8:c2:4e:a0:89:b4:f3:f5:f1: 3b:fa:43:02:40:3e:9c:fb:8e:c4:3f:5f:85:c5:70: 44:4f:0d:08:cb:44:b0:6a:0c:cb:3c:44:84:e2:ee: 2a:a9:cf:9f:69:37:9a:4c:14:d0:b2:ac:79:f9:81: 30:4d:01:97:ec:e4:a3:75:36:06:34:cb:b6:a6:bf: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.20.0/24 194.180.25.0/24 194.180.52.0/24 194.180.55.0/24 IPv6: 2a0f:b3c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211896 Signature Algorithm: sha256WithRSAEncryption 4c:08:b3:b3:a1:09:47:97:f4:55:76:31:2c:bb:6c:64:10:48: 4e:aa:69:37:59:ad:e4:51:74:a1:67:75:f9:e1:96:97:a1:42: e0:ad:56:d5:be:81:91:c0:a3:cc:ce:51:15:91:a0:e8:14:bd: 28:31:cf:33:32:d3:89:13:fd:58:74:dd:6d:e3:63:28:e7:70: 97:1d:84:93:58:66:b9:c1:0f:4e:7a:0e:10:94:44:ca:ff:32: dc:fe:ef:f4:62:31:c9:02:2c:e9:a9:a4:44:d3:95:e7:4b:41: 08:8e:14:a1:6a:9e:ec:2f:c3:25:38:9a:6a:e3:a0:34:0b:76: c2:df:88:8a:40:ac:49:1b:97:94:29:a7:93:ff:a9:a3:7d:5c: 18:bb:3e:f3:ce:71:df:d2:9e:ce:24:03:cd:73:b1:55:93:f8: 8a:15:fb:28:2a:a9:ff:a3:5a:88:f6:8f:3f:c3:a7:40:5d:54: 7b:4e:ad:63:62:7c:f1:80:47:64:c9:b2:c5:b4:99:d8:f8:00: 2f:1c:93:21:f0:a8:f0:cb:97:a9:76:d0:f2:2c:24:5f:54:17: e9:d8:67:94:91:0b:23:76:4b:a5:b7:59:a6:1c:8a:d1:c0:1e: 0c:c8:59:55:fd:8b:56:7f:3b:5f:33:a8:09:6f:13:2b:47:0a: ea:df:3f:09 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7pP0oG1cOpk/0TXJh37RrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTc3MzAxZTE0ZDY1YjNhM2Q2ODZkYWFjMTZkZmM0OWFjNDhjN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfSFn/GDeenh1tynePDpZJ6VW1vq 8Zlm7C4YN+dNd3XF8Wt6+LXmYtdKLxDZ/Fn8E1gRftCnWPS+v1wOZdchCs/3fg1Z ZgtnmYv07FPCOLUK69T9MAEvvqw9cpxYIobAkAeUyqC2IXnP9eOm3HN2wcXcMbNt 3ugfqruw/tQU2mM3pg2HMQd+i5ZvALciTp2UN/8PwjWBgk+qNMFLIi6NocHibtQk OI5duTcR1PyLVx6MCT66MvchonvYwk6gibTz9fE7+kMCQD6c+47EP1+FxXBETw0I y0SwagzLPESE4u4qqc+faTeaTBTQsqx5+YEwTQGX7OSjdTYGNMu2pr9OlwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFLp3MB4U1ls6PWhtqsFt/EmsSMfNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2I3Mzkz Yi02ODE4LTQ4ZDMtYjA4MS01YzY4ZjZiMGIyYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvYjczOTNi LTY4MTgtNDhkMy1iMDgxLTVjNjhmNmIwYjJjNy8xL3VuY3dIaFRXV3pvOWFHMnF3 VzM4U2F4SXg4MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAwrQUAwQAwrQZAwQAwrQ0AwQAwrQ3MA0EAgAC MAcDBQMqD7PAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM7uDANBgkqhkiG9w0B AQsFAAOCAQEATAizs6EJR5f0VXYxLLtsZBBITqppN1mt5FF0oWd1+eGWl6FC4K1W 1b6BkcCjzM5RFZGg6BS9KDHPMzLTiRP9WHTdbeNjKOdwlx2Ek1hmucEPTnoOEJRE yv8y3P7v9GIxyQIs6amkRNOV50tBCI4UoWqe7C/DJTiaauOgNAt2wt+IikCsSRuX lCmnk/+po31cGLs+885x39KeziQDzXOxVZP4ihX7KCqp/6NaiPaPP8OnQF1Ue06t Y2J88YBHZMmyxbSZ2PgALxyTIfCo8MuXqXbQ8iwkX1QX6dhnlJELI3ZLpbdZphyK 0cAeDMhZVf2LVn87XzOoCW8TK0cK6t8/CQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:59 2026 by rpki-client