This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer File: UzXKxwoZioXzJL_toPNe15kcKus.cer (raw, json) Hash identifier: 3XB4DoeC0gw1IqanhSFuN7O1GGJ1/IS5NmngVzbs1i8= Subject key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A24434D8C1064FB8796D34CEB34181 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29085 IP: 185.116.28.0/22 IP: 193.109.74.0/23 IP: 2a06:7040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:44:34:d8:c1:06:4f:b8:79:6d:34:ce:b3:41:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:0d:c0:cd:a0:88:8d:08:dd:63:eb:d0:79: 9a:e2:1d:be:6d:54:7b:0a:8f:8f:c0:e5:28:d4:09: c4:ad:2e:a9:d1:d0:07:ec:c4:6b:f4:d6:fa:7a:2f: 48:d0:fc:a0:ba:26:8d:c8:16:50:7b:09:a3:7b:c7: 6c:91:4a:f4:6b:0f:fd:e1:c4:49:8a:ee:0c:e1:99: 0e:ed:ba:91:2d:01:35:e6:aa:29:be:3e:bd:96:dd: 40:b0:57:21:06:7e:37:3c:c4:ae:f3:7c:0b:d0:39: b2:66:6f:bf:c2:bc:7f:29:73:63:7c:11:3b:6b:c4: 0a:3c:40:99:27:30:5f:b6:f1:6a:29:66:26:29:7d: a0:85:8d:49:28:1b:f2:9c:5c:e3:7b:6b:a3:27:aa: 5f:72:06:d9:ca:89:e4:28:6f:e0:6e:5e:4e:fb:d5: 00:00:c9:b5:83:ab:fe:73:fe:28:3f:0d:9d:cb:b8: 55:30:70:cf:06:71:0a:62:ec:4c:28:c4:2d:3c:95: 68:12:67:ca:a3:a1:ac:02:8b:ab:b3:1d:d1:6e:49: 62:1e:72:16:5f:66:0c:ef:c5:e3:fd:3f:7d:f5:d6: 71:d7:d4:dd:f5:fd:07:27:f2:ba:0c:1a:b2:13:da: 6a:38:62:f2:3f:50:13:24:dc:cf:f8:fe:db:69:73: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.28.0/22 193.109.74.0/23 IPv6: 2a06:7040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29085 Signature Algorithm: sha256WithRSAEncryption 97:60:85:af:fa:09:ff:56:40:1d:10:ba:18:ab:40:6d:1f:50: ae:f5:b7:37:6f:f7:d7:c4:3d:24:81:84:a2:6d:42:c5:29:95: 29:6b:04:10:08:fc:72:9f:60:a6:2d:d6:3c:5d:c3:f5:a8:38: 92:f0:12:53:e4:5f:3a:2f:a3:eb:cc:ac:6c:f1:b1:6a:ca:d3: db:8a:f2:e3:c8:4f:b5:96:21:e6:92:ce:41:fe:53:5d:df:e7: 2b:b8:60:8c:1a:0a:57:a8:91:50:aa:a9:bd:53:4e:88:9a:ef: 4b:08:b7:d8:07:43:24:5c:5b:a4:ba:2d:b1:bb:e4:46:ba:e9: 39:c9:85:ca:a9:53:1d:ab:77:28:a5:3d:17:e6:f0:22:8f:46: 11:19:52:bc:40:69:cf:d1:7e:04:c0:04:6d:46:ac:da:7f:6f: cb:9d:0c:b7:5a:9b:4e:b6:a0:2d:51:0d:41:08:a9:ce:fd:a5: 0d:9c:34:f0:e3:85:9c:19:92:55:07:37:0b:1e:44:55:26:97: d1:23:db:f1:f5:3d:8a:ec:c5:73:e6:35:dd:93:51:56:d0:14: 34:87:56:aa:be:16:33:d8:30:73:da:97:d2:c2:68:41:62:0a: 8f:34:0f:a2:19:58:2d:b7:73:05:66:eb:cd:18:a1:68:c3:bf: 31:f9:79:e5 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt4okQ02MEGT7h5bTTOs0GBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzM1Y2FjNzBhMTk4YTg1ZjMyNGJmZWRhMGYzNWVkNzk5MWMyYWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDANwM2giI0I3WPr0Hma4h2+bVR7 Co+PwOUo1AnErS6p0dAH7MRr9Nb6ei9I0PyguiaNyBZQewmje8dskUr0aw/94cRJ iu4M4ZkO7bqRLQE15qopvj69lt1AsFchBn43PMSu83wL0DmyZm+/wrx/KXNjfBE7 a8QKPECZJzBftvFqKWYmKX2ghY1JKBvynFzje2ujJ6pfcgbZyonkKG/gbl5O+9UA AMm1g6v+c/4oPw2dy7hVMHDPBnEKYuxMKMQtPJVoEmfKo6GsAoursx3RbkliHnIW X2YM78Xj/T999dZx19Td9f0HJ/K6DBqyE9pqOGLyP1ATJNzP+P7baXNRCQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFFM1yscKGYqF8yS/7aDzXteZHCrrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzkwY2Yz ZS1kNDY4LTQ0M2MtYWZhNC1mMzRhOGY3MmVlYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvOTBjZjNl LWQ0NjgtNDQzYy1hZmE0LWYzNGE4ZjcyZWVjNC8xL1V6WEt4d29aaW9YekpMX3Rv UE5lMTVrY0t1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuXQcAwQBwW1KMA0EAgACMAcDBQMqBnBAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnGdMA0GCSqGSIb3DQEBCwUAA4IBAQCXYIWv +gn/VkAdELoYq0BtH1Cu9bc3b/fXxD0kgYSibULFKZUpawQQCPxyn2CmLdY8XcP1 qDiS8BJT5F86L6PrzKxs8bFqytPbivLjyE+1liHmks5B/lNd3+cruGCMGgpXqJFQ qqm9U06Imu9LCLfYB0MkXFukui2xu+RGuuk5yYXKqVMdq3copT0X5vAij0YRGVK8 QGnP0X4EwARtRqzaf2/LnQy3WptOtqAtUQ1BCKnO/aUNnDTw44WcGZJVBzcLHkRV JpfRI9vx9T2K7MVz5jXdk1FW0BQ0h1aqvhYz2DBz2pfSwmhBYgqPNA+iGVgtt3MF ZuvNGKFow78x+Xnl -----END CERTIFICATE-----Generated at Fri Jan 2 16:58:43 2026 by rpki-client