This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer File: uqpkzSnJTM3hREj2GhcsdjseQFA.cer (raw, json) Hash identifier: uUT+aD8xalixeAVrTG5ovyccweOohV3LdTdU8faukBo= Subject key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F842DDBBCA95FB6343CE69A61E34628 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30815 IP: 88.209.128.0/18 IP: 93.189.96.0/21 IP: 185.63.232.0/22 IP: 2a03:11e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:2d:db:bc:a9:5f:b6:34:3c:e6:9a:61:e3:46:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=baaa64cd29c94ccde14448f61a172c763b1e4050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:19:47:e9:26:d0:6a:36:ca:83:11:b2:12: ea:07:c8:5a:32:ba:2f:be:65:00:37:39:8d:d8:c1: c0:3a:8d:69:80:6e:57:b0:0b:72:03:34:98:f8:16: 0a:f6:a3:ba:22:8e:95:9a:a1:48:cb:f9:ef:c9:4b: 96:1c:eb:05:3b:6a:bd:b1:68:6c:5f:af:61:21:db: 42:4d:ee:c8:94:8d:b9:7e:95:b3:05:c2:d6:68:89: 9f:43:da:1a:f3:39:df:c7:67:20:2c:35:04:8b:41: f6:91:f4:72:eb:0a:01:01:43:9a:96:de:e1:29:be: 43:62:68:36:26:03:42:56:40:88:32:d8:d7:c5:ce: d6:5d:85:11:13:d7:85:c6:16:93:8d:3d:a7:2d:05: 63:40:e4:47:ef:0f:ad:de:fc:fe:77:3d:90:c7:da: ba:8b:cf:9e:42:28:89:d0:24:5d:ba:c1:7d:8c:45: 37:2d:fa:8b:c6:76:0b:fb:24:28:72:78:79:8d:ab: 56:10:86:16:d8:9c:1b:8b:66:ed:06:48:84:0c:1f: 9a:16:b2:61:62:a4:5a:a9:44:4f:75:58:71:a0:f7: 87:4d:8c:a3:29:b4:bf:7f:fa:bd:d2:aa:24:51:6d: b4:d5:97:69:0b:ba:89:47:90:d2:07:c5:5f:ec:e2: ce:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.209.128.0/18 93.189.96.0/21 185.63.232.0/22 IPv6: 2a03:11e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30815 Signature Algorithm: sha256WithRSAEncryption 3c:83:d2:d9:0e:cb:f5:ed:6a:3e:14:81:93:f0:b4:d5:94:bc: 7c:1b:d4:15:6d:54:61:d1:9c:68:19:88:05:5d:0c:57:30:c2: e7:9a:17:c8:e9:9d:41:23:69:a0:c2:44:6a:3d:87:1f:47:a9: a4:49:11:03:07:a5:27:8f:ea:a0:bc:0b:71:51:15:8b:95:76: 9f:3b:f0:35:2e:29:f9:84:aa:e2:6f:fc:c5:0f:b3:27:9b:df: 7c:91:5a:4d:a9:82:d8:fa:70:99:9e:60:69:a3:ae:e0:5d:dc: cd:5b:78:7a:5b:f0:af:3f:fa:c8:c0:5c:d1:2c:09:cd:2e:4c: 7f:21:bb:3b:18:56:58:7c:aa:1a:f7:98:80:d4:44:4a:30:b6: 92:04:b8:17:fa:ca:55:31:8f:5b:a8:da:aa:4e:93:2e:b7:88: f7:1e:dd:bc:5a:cd:1a:66:63:4c:67:1b:1f:f7:b6:21:29:82: ca:99:80:79:75:a3:a5:6b:26:56:b4:6a:10:e1:9b:29:25:d5: 36:ee:18:08:de:cc:0e:63:dd:3a:94:45:e0:00:f1:79:84:ff: 4b:1a:28:a1:28:1e:ed:bd:b5:a8:ba:ed:f3:ce:e5:0a:7a:a4: e4:57:ea:d9:46:bf:21:f2:3a:f8:dc:70:17:69:24:4a:dc:f2: 59:ec:44:fd -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt/hC3bvKlftjQ85pph40YoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWFhNjRjZDI5Yzk0Y2NkZTE0NDQ4ZjYxYTE3MmM3NjNiMWU0MDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbwZR+km0Go2yoMRshLqB8haMrov vmUANzmN2MHAOo1pgG5XsAtyAzSY+BYK9qO6Io6VmqFIy/nvyUuWHOsFO2q9sWhs X69hIdtCTe7IlI25fpWzBcLWaImfQ9oa8znfx2cgLDUEi0H2kfRy6woBAUOalt7h Kb5DYmg2JgNCVkCIMtjXxc7WXYURE9eFxhaTjT2nLQVjQORH7w+t3vz+dz2Qx9q6 i8+eQiiJ0CRdusF9jEU3LfqLxnYL+yQocnh5jatWEIYW2Jwbi2btBkiEDB+aFrJh YqRaqURPdVhxoPeHTYyjKbS/f/q90qokUW201ZdpC7qJR5DSB8Vf7OLOEQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFLqqZM0pyUzN4URI9hoXLHY7HkBQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzcxZjQz OS0yYjFiLTRlZjAtYjZhNS04ZmNhYTY5MzZjNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvNzFmNDM5 LTJiMWItNGVmMC1iNmE1LThmY2FhNjkzNmM2Yy8xL3VxcGt6U25KVE0zaFJFajJH aGNzZGpzZVFGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQGWNGAAwQDXb1gAwQCuT/oMA0EAgACMAcDBQAq AxHgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnhfMA0GCSqGSIb3DQEBCwUAA4IB AQA8g9LZDsv17Wo+FIGT8LTVlLx8G9QVbVRh0ZxoGYgFXQxXMMLnmhfI6Z1BI2mg wkRqPYcfR6mkSREDB6Unj+qgvAtxURWLlXafO/A1Lin5hKrib/zFD7Mnm998kVpN qYLY+nCZnmBpo67gXdzNW3h6W/CvP/rIwFzRLAnNLkx/Ibs7GFZYfKoa95iA1ERK MLaSBLgX+spVMY9bqNqqTpMut4j3Ht28Ws0aZmNMZxsf97YhKYLKmYB5daOlayZW tGoQ4ZspJdU27hgI3swOY906lEXgAPF5hP9LGiihKB7tvbWouu3zzuUKeqTkV+rZ Rr8h8jr43HAXaSRK3PJZ7ET9 -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:06 2026 by rpki-client