This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
File:                     uveRJ-40o67pB5yOl5nEDw3I3KI.cer (raw, json)
Hash identifier:          3vtslywRM6bEsK6HBRhNs+PmwNfMKJ/SZ/lKHw0WQuo=
Subject key identifier:   BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B76EB48FF4B0605D157AEB907C540A383
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 00:18:09 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 212951
                          IP: 185.71.132.0/22
                          IP: 2a05:3380::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:48:ff:4b:06:05:d1:57:ae:b9:07:c5:40:a3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:d6:6a:5d:a7:a3:cd:6c:3d:98:c0:d0:83:
                    e7:a2:08:3b:38:3d:f5:1f:52:5b:54:75:e1:1c:45:
                    e0:f6:5e:79:f2:8d:09:95:b1:47:c7:d8:00:eb:9f:
                    0b:0a:76:b7:5e:25:cc:80:dd:69:d7:20:4e:bf:70:
                    cf:33:9c:ba:ad:e9:cb:44:fe:c4:1c:ec:fd:81:ca:
                    93:ff:cc:b8:ff:91:51:e6:61:64:58:32:9a:83:c7:
                    fb:c0:45:98:b9:c9:88:1a:11:6a:aa:0d:39:b4:de:
                    38:cf:26:8c:eb:e8:a7:95:ae:a4:77:e7:4d:2f:dc:
                    d3:d0:fc:f7:c7:bc:05:38:02:c1:43:bd:d1:e7:0a:
                    61:88:88:c3:43:07:c6:ba:0d:f3:e9:dd:4e:c8:e0:
                    f2:96:1e:61:09:24:93:78:25:80:70:71:31:1e:ea:
                    e7:44:fc:2f:8b:26:0a:ab:08:a8:50:52:97:d4:9e:
                    49:79:73:92:9b:a3:85:55:2b:53:2b:65:3a:b7:1f:
                    b6:e8:95:ba:bc:e3:45:be:ba:cf:e7:53:a0:f4:00:
                    6a:17:e4:a8:27:17:2c:9d:5c:4e:48:12:0b:31:82:
                    10:38:0f:09:1e:f3:e2:8e:9b:ea:90:7c:04:da:3f:
                    14:e7:01:bd:f0:8a:44:39:46:03:e9:12:65:6a:56:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.71.132.0/22
                IPv6:
                  2a05:3380::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212951

    Signature Algorithm: sha256WithRSAEncryption
         57:7b:ed:04:af:8e:28:88:c6:20:18:da:7f:80:20:0a:6b:fc:
         b9:63:cb:2c:d8:1a:8c:55:1c:e0:ad:5f:55:16:b3:91:a2:12:
         05:83:fa:b0:60:90:b0:78:99:f6:94:f5:1e:78:48:6b:3e:d2:
         a6:dd:e2:ed:72:36:64:f1:54:9b:76:6b:58:3a:21:59:14:17:
         9f:60:f5:d0:4d:ab:36:c5:67:94:25:85:5e:30:db:bf:e5:68:
         d6:37:5f:a6:76:65:40:cb:c2:3d:d6:61:20:7c:14:3a:fe:95:
         f6:f1:28:0a:6b:d9:6d:04:e0:db:83:03:db:6b:71:24:44:f4:
         a9:1c:7e:86:96:40:97:93:6c:3c:20:33:48:0c:33:1b:0d:3c:
         0d:62:f9:1f:fe:54:3c:95:e8:d9:09:29:ed:6d:c2:95:7f:ef:
         dd:4e:cb:35:12:92:86:84:1e:66:5d:05:9d:08:a2:ee:b5:e3:
         c7:cf:5a:5a:e1:a2:cf:45:c2:bb:8a:68:cc:06:03:0d:26:18:
         d4:1c:9d:83:b9:2d:f7:ed:a1:87:3b:42:b3:9c:21:a4:04:3e:
         ab:c9:da:0b:3e:55:2b:9b:c1:48:3a:3a:00:aa:64:94:ff:2b:
         cc:6e:0f:37:ca:ac:f5:85:9d:1b:91:35:2c:6e:6f:31:2c:59:
         a9:b1:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:52:28 2026 by rpki-client