This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer File: uytI9kNYARx4QtPOxcstRwaLg20.cer (raw, json) Hash identifier: u9FvZ+U3jYcIJhcHUHa/z65EK63Z7i7BEdX5xC/5V5M= Subject key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3762D31B1D0C8FCA66E8F4179AA5BB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12824 AS: 215484 IP: 46.41.128.0/18 IP: 46.242.128.0/17 IP: 62.129.192.0/18 IP: 79.96.0.0/16 IP: 89.161.128.0/17 IP: 188.128.128.0/17 IP: 212.85.96.0/19 IP: 2a02:25a8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:62:d3:1b:1d:0c:8f:ca:66:e8:f4:17:9a:a5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:b6:8c:e6:9c:44:d1:b5:08:ea:34:b2:c9: cc:57:01:71:93:75:4d:dc:5c:0c:fd:9d:73:b0:65: dc:36:e2:e1:cc:63:ea:82:74:95:9c:ec:f9:05:b1: bb:b8:2e:a4:52:6d:53:99:b5:ab:52:b4:70:3b:95: 67:76:85:1d:05:b2:c6:9f:15:43:76:49:f8:e0:3b: 91:27:ca:9f:ce:c2:79:be:87:a7:b7:19:89:1c:6f: eb:af:54:0f:41:85:22:18:83:a2:f9:ba:37:32:79: 0b:79:bb:d2:61:4c:f8:42:5e:de:b8:96:27:d6:cf: 8b:7b:d3:c5:81:46:02:98:17:47:78:8f:f6:2f:d8: 8e:a0:fb:95:2d:b7:7f:52:21:5b:7f:b9:65:d1:98: 1f:3f:63:07:31:79:79:ba:e4:c6:77:54:85:7c:a0: c2:e3:21:96:04:3a:b5:83:bf:e4:e8:de:92:28:84: 31:ba:70:93:b0:69:c7:f1:27:a3:cc:21:9b:ae:d8: a6:7a:a6:f7:e1:9d:9c:8a:f6:63:23:6d:41:03:0f: fa:e6:d1:d4:c9:66:44:0a:82:d2:4b:39:25:31:f3: 9d:8d:75:75:8f:3f:73:a0:74:7f:c1:bb:d4:44:e0: c6:dd:f5:27:6b:28:de:d7:95:dd:3e:6d:e9:55:8e: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.41.128.0/18 46.242.128.0/17 62.129.192.0/18 79.96.0.0/16 89.161.128.0/17 188.128.128.0/17 212.85.96.0/19 IPv6: 2a02:25a8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12824 215484 Signature Algorithm: sha256WithRSAEncryption 27:f0:c1:ec:41:89:a9:03:60:04:cc:b8:a4:6d:c6:7c:e1:c8: 3a:68:8c:d2:29:f3:93:1b:cf:ec:f4:26:f0:61:44:61:35:51: 81:ad:77:b5:5f:6c:23:09:f3:d0:e9:b2:2c:ef:34:b0:23:01: 3d:aa:16:6d:61:4e:63:c8:13:5d:bf:d0:c0:0b:94:43:48:67: d5:d6:60:49:53:21:2b:a9:be:c2:12:12:fe:c6:64:2f:6f:09: 85:81:d5:34:df:94:68:b9:88:5b:01:7d:80:a0:1b:fa:ea:38: 5f:a8:34:73:59:96:59:e5:f3:ed:77:91:79:28:22:36:ab:ff: ba:97:a4:41:44:6b:ce:45:8f:1d:59:6b:16:8c:9c:8b:9b:6c: 87:3b:bf:fc:0d:61:ed:80:ee:2b:c7:2b:80:3f:9a:9a:78:6b: 24:a0:3e:95:ed:c9:56:91:b3:59:08:e4:43:81:1f:1d:cc:59: 1e:bc:ce:23:a8:ec:c5:fb:e8:5f:47:da:2b:21:8a:9d:d6:61: 12:40:cc:a4:49:09:5d:7f:e9:5d:6a:5c:6e:47:c1:7b:d0:93: a2:fc:fd:73:17:d2:f5:80:ec:02:9a:e0:c6:8d:ca:d2:bd:b9: 56:d9:6c:8b:d4:15:56:0f:3e:60:df:75:ec:d0:1e:69:b5:36: 0d:ab:a5:92 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt+N2LTGx0Mj8pm6PQXmqW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjJiNDhmNjQzNTgwMTFjNzg0MmQzY2VjNWNiMmQ0NzA2OGI4MzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0y2jOacRNG1COo0ssnMVwFxk3VN 3FwM/Z1zsGXcNuLhzGPqgnSVnOz5BbG7uC6kUm1TmbWrUrRwO5VndoUdBbLGnxVD dkn44DuRJ8qfzsJ5voentxmJHG/rr1QPQYUiGIOi+bo3MnkLebvSYUz4Ql7euJYn 1s+Le9PFgUYCmBdHeI/2L9iOoPuVLbd/UiFbf7ll0ZgfP2MHMXl5uuTGd1SFfKDC 4yGWBDq1g7/k6N6SKIQxunCTsGnH8SejzCGbrtimeqb34Z2civZjI21BAw/65tHU yWZECoLSSzklMfOdjXV1jz9zoHR/wbvURODG3fUnayje15XdPm3pVY79kQIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFLsrSPZDWAEceELTzsXLLUcGi4NtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViL2Y2NmI2 Yi1jZGRlLTQwY2ItYTE4Mi1jNTIyOTg2M2FlYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvZjY2YjZi LWNkZGUtNDBjYi1hMTgyLWM1MjI5ODYzYWViYS8xL3V5dEk5a05ZQVJ4NFF0UE94 Y3N0UndhTGcyMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFEGCCsGAQUF BwEHAQH/BEIwQDAvBAIAATApAwQGLimAAwQHLvKAAwQGPoHAAwMAT2ADBAdZoYAD BAe8gIADBAXUVWAwDQQCAAIwBwMFAyoCJagwHgYIKwYBBQUHAQgBAf8EDzANoAsw CQICMhgCAwNJvDANBgkqhkiG9w0BAQsFAAOCAQEAJ/DB7EGJqQNgBMy4pG3GfOHI OmiM0inzkxvP7PQm8GFEYTVRga13tV9sIwnz0OmyLO80sCMBPaoWbWFOY8gTXb/Q wAuUQ0hn1dZgSVMhK6m+whIS/sZkL28JhYHVNN+UaLmIWwF9gKAb+uo4X6g0c1mW WeXz7XeReSgiNqv/upekQURrzkWPHVlrFoyci5tshzu//A1h7YDuK8crgD+amnhr JKA+le3JVpGzWQjkQ4EfHcxZHrzOI6jsxfvoX0faKyGKndZhEkDMpEkJXX/pXWpc bkfBe9CTovz9cxfS9YDsAprgxo3K0r25Vtlsi9QVVg8+YN917NAeabU2Daulkg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:43 2026 by rpki-client