This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer (raw, json) Hash identifier: PhCmX9pHOEeRtYtY89FHXo2rQF7PSgAI//z/f2wmTaA= Subject key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC90E13FE2DBCAF898EE64CC9B40F7D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57389 IP: 45.14.92.0/22 IP: 45.146.0.0/22 IP: 81.16.192.0/20 IP: 141.98.248.0/22 IP: 185.5.228.0/22 IP: 185.106.112.0/22 IP: 185.130.176.0/22 IP: 185.174.16.0/22 IP: 185.180.88.0/22 IP: 185.182.212.0/22 IP: 185.205.248.0/22 IP: 185.221.140.0/22 IP: 185.232.80.0/22 IP: 194.48.174.0/23 IP: 194.48.188.0/23 IP: 2a07:1100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0e:13:fe:2d:bc:af:89:8e:e6:4c:c9:b4:0f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:80:ee:ea:70:ec:90:94:40:43:ff:28:73: 2f:29:8b:94:15:a9:fc:68:a8:45:76:2a:28:fd:4c: 9e:08:77:30:95:42:9e:d4:71:b9:87:bf:30:5f:0b: 3a:d7:eb:66:99:73:32:fe:fc:83:ea:16:7d:49:76: 63:7d:d7:81:24:34:73:89:b0:89:4e:a3:b8:30:17: 54:b1:03:f0:23:25:09:d9:db:96:9f:ea:d5:5f:b9: 15:64:60:44:b8:99:ce:58:c9:0a:7a:6d:bb:8a:e7: be:9d:5e:85:07:09:c6:d1:48:25:de:00:31:4b:69: 5c:21:d5:56:a9:83:e7:2e:84:55:bb:ae:bb:5a:74: 00:b7:5e:d5:6b:ed:1b:24:1c:10:72:8c:79:82:c7: 00:65:78:64:7c:82:70:c7:dc:1c:1e:1e:9a:2a:f0: af:79:52:9a:7d:1f:6b:94:e5:30:da:03:b4:b6:17: fa:f5:d6:c6:e0:4c:9a:39:f2:67:4c:07:08:7c:0b: 1d:7d:9e:45:ec:02:48:95:5f:12:a1:64:b5:f8:38: 0d:a2:f7:c7:17:4d:14:7f:36:67:75:df:a9:19:ff: b3:4c:1c:1f:36:00:3b:77:1f:5e:e8:63:b4:ca:93: e4:dd:bf:03:6b:7f:18:83:8e:22:35:7c:64:5d:a4: c3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.92.0/22 45.146.0.0/22 81.16.192.0/20 141.98.248.0/22 185.5.228.0/22 185.106.112.0/22 185.130.176.0/22 185.174.16.0/22 185.180.88.0/22 185.182.212.0/22 185.205.248.0/22 185.221.140.0/22 185.232.80.0/22 194.48.174.0/23 194.48.188.0/23 IPv6: 2a07:1100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57389 Signature Algorithm: sha256WithRSAEncryption 19:06:22:1b:4d:e1:34:03:7b:72:0a:58:2d:54:7e:7a:c4:a1: 41:a1:e8:48:38:2e:95:8b:15:16:fe:56:70:1e:55:4d:f1:76: 60:50:8a:38:8b:4f:6c:33:f4:5f:d7:e7:48:0b:70:51:b6:74: 43:01:dc:fc:1d:f9:f8:be:f6:28:80:36:3a:18:24:f1:7a:b2: a1:0c:de:e4:94:bb:94:b0:c7:e7:5b:84:21:b9:8c:cb:7d:be: 21:ab:2c:e1:23:7c:ab:69:ec:5e:cb:6f:8a:00:ce:63:e6:38: 94:28:2d:63:d1:9f:40:87:86:da:62:d7:b2:a1:cd:64:40:67: 0a:9d:8a:f1:48:e0:77:21:7b:5e:7e:ed:7a:40:b3:12:3b:21: 18:fb:2f:6a:df:ac:e5:0e:1b:c1:4a:62:e6:60:69:45:cf:a2: 19:6e:fc:0e:2c:81:b8:85:11:2a:46:d4:d1:ab:21:7b:6a:7b: a9:b7:c0:d1:ba:ec:05:92:d5:b0:e5:35:bc:fb:5d:a9:86:c4: c8:e4:53:ea:79:df:69:21:eb:60:1f:14:8d:90:cd:82:9c:97: d3:46:e8:e7:a6:87:48:f2:c2:dc:bd:3e:92:79:36:1e:43:eb: a8:56:8e:5b:82:d7:54:0c:ee:19:88:95:25:ac:a9:8b:1a:e1: 80:26:99:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt6yQ4T/i28r4mO5kzJtA99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTQ2ZTE1ODE5ZWFjZDA1YmNjZWJmODAwMTljYTNjYjdjNGEzOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQuA7upw7JCUQEP/KHMvKYuUFan8 aKhFdioo/UyeCHcwlUKe1HG5h78wXws61+tmmXMy/vyD6hZ9SXZjfdeBJDRzibCJ TqO4MBdUsQPwIyUJ2duWn+rVX7kVZGBEuJnOWMkKem27iue+nV6FBwnG0Ugl3gAx S2lcIdVWqYPnLoRVu667WnQAt17Va+0bJBwQcox5gscAZXhkfIJwx9wcHh6aKvCv eVKafR9rlOUw2gO0thf69dbG4EyaOfJnTAcIfAsdfZ5F7AJIlV8SoWS1+DgNovfH F00UfzZndd+pGf+zTBwfNgA7dx9e6GO0ypPk3b8Da38Yg44iNXxkXaTDnQIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFMVG4VgZ6s0FvM6/gAGco8t8SjjgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2Y5NWFj NS0wYjhiLTQ1ZDYtYmU5YS0yZGIyMjQ1ZjI5ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvZjk1YWM1 LTBiOGItNDVkNi1iZTlhLTJkYjIyNDVmMjk4NS8xL3hVYmhXQm5xelFXOHpyLUFB WnlqeTN4S09PQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGCBggrBgEF BQcBBwEB/wRzMHEwYAQCAAEwWgMEAi0OXAMEAi2SAAMEBFEQwAMEAo1i+AMEArkF 5AMEArlqcAMEArmCsAMEArmuEAMEArm0WAMEArm21AMEArnN+AMEArndjAMEArno UAMEAcIwrgMEAcIwvDANBAIAAjAHAwUDKgcRADAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMA4C0wDQYJKoZIhvcNAQELBQADggEBABkGIhtN4TQDe3IKWC1UfnrEoUGh 6Eg4LpWLFRb+VnAeVU3xdmBQijiLT2wz9F/X50gLcFG2dEMB3Pwd+fi+9iiANjoY JPF6sqEM3uSUu5Swx+dbhCG5jMt9viGrLOEjfKtp7F7Lb4oAzmPmOJQoLWPRn0CH htpi17KhzWRAZwqdivFI4Hche15+7XpAsxI7IRj7L2rfrOUOG8FKYuZgaUXPohlu /A4sgbiFESpG1NGrIXtqe6m3wNG67AWS1bDlNbz7XamGxMjkU+p532kh62AfFI2Q zYKcl9NG6Oemh0jywty9PpJ5Nh5D66hWjluC11QM7hmIlSWsqYsa4YAmmZ8= -----END CERTIFICATE-----Generated at Tue Feb 3 04:56:48 2026 by rpki-client