This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer File: uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer (raw, json) Hash identifier: 3lFOB/7jUK6TEUKL9SVliFbw0VNQdWvGZfGcFoTRLUE= Subject key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77592C991006A51824BE39D35144F49C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197641 IP: 45.144.104.0/22 IP: 2a0e:ec40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2c:99:10:06:a5:18:24:be:39:d3:51:44:f4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b814345affd1506af9af32ec0d77399b7664aa3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:ec:86:5a:73:75:2b:b2:05:60:b3:8b:71: 0c:9b:fd:6a:dd:ab:e8:ed:8e:ac:6c:ad:19:36:96: b4:c7:de:13:f1:29:e2:da:24:9a:75:10:0b:d1:fd: 33:b0:d4:46:5b:8d:7b:88:06:da:a3:d5:b2:0a:22: 33:fc:5b:53:df:4f:4d:48:5b:d8:34:73:0f:79:36: 48:fc:89:95:af:90:4a:24:ff:12:0a:f5:13:12:1c: 60:1d:68:80:dc:04:b0:92:a7:ad:01:42:cf:4e:ab: 9c:c0:e7:4d:5a:99:2d:78:c7:a3:9a:07:c5:47:dd: 2b:5d:4a:d3:16:f3:9d:cd:2b:1d:d8:8f:52:2f:7d: 7f:5d:25:14:b2:f0:5d:6b:ca:b3:fd:84:a4:d4:c9: 56:f1:84:bb:1f:33:ca:e9:86:cb:05:3f:2a:20:61: 42:bc:17:ba:7d:0b:40:91:47:2f:95:ec:32:84:12: 73:0f:02:07:c5:92:d4:90:ce:dd:e0:cd:3d:e2:d3: 3f:05:0a:c4:68:43:a7:6d:ea:87:2e:9e:90:75:af: ac:5a:89:26:91:ce:ec:4e:17:38:f0:af:25:14:c3: 47:e5:6c:51:bf:d6:d0:3a:af:70:d8:ef:e1:97:c6: 3f:8b:3a:77:2e:01:b3:23:a3:5a:80:18:b5:86:e3: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.104.0/22 IPv6: 2a0e:ec40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197641 Signature Algorithm: sha256WithRSAEncryption 02:e3:25:c6:92:d2:62:85:75:92:ad:d3:e2:75:5f:f0:09:de: ab:e7:2d:b6:6d:0c:f8:a4:3a:69:03:97:4c:a3:ae:3e:55:b1: 82:06:e2:bd:db:8e:c7:fe:6b:1d:dc:15:1d:f9:9f:fe:70:9d: 32:cb:79:9a:9e:28:77:6f:3a:6b:c8:e9:73:41:51:2d:14:99: fc:9c:6e:4c:f1:cf:75:f6:d5:52:aa:34:12:e4:cc:29:10:eb: 84:d8:bc:7a:c6:86:14:75:3f:5e:30:1b:de:00:4a:7e:e5:02: 25:5f:05:e0:19:07:28:1c:a6:83:ed:29:8f:36:a9:6b:58:4e: 06:e7:a4:eb:57:dc:ec:d7:6b:73:bc:db:6d:28:f9:cc:06:a6: 17:6c:98:68:22:65:01:b7:e3:12:0d:d4:14:83:38:ed:f2:f4: 25:cf:f7:00:48:80:2a:54:6b:ea:9b:69:cb:49:fb:f9:22:e3: 4a:b5:59:f7:00:1f:bc:15:70:9e:0e:77:73:62:87:1b:6b:4b: f1:11:e2:6b:8b:8e:a9:9e:fc:d1:49:a0:2c:f9:4a:c2:68:3e: 44:71:5a:45:12:18:45:13:97:14:e5:bf:7e:49:42:87:22:1a: 05:32:99:14:cd:f8:39:91:c1:39:28:08:57:5c:73:8f:c5:e5: 2b:15:99:65 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WSyZEAalGCS+OdNRRPScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODE0MzQ1YWZmZDE1MDZhZjlhZjMyZWMwZDc3Mzk5Yjc2NjRhYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14bshlpzdSuyBWCzi3EMm/1q3avo 7Y6sbK0ZNpa0x94T8Sni2iSadRAL0f0zsNRGW417iAbao9WyCiIz/FtT309NSFvY NHMPeTZI/ImVr5BKJP8SCvUTEhxgHWiA3ASwkqetAULPTqucwOdNWpkteMejmgfF R90rXUrTFvOdzSsd2I9SL31/XSUUsvBda8qz/YSk1MlW8YS7HzPK6YbLBT8qIGFC vBe6fQtAkUcvlewyhBJzDwIHxZLUkM7d4M094tM/BQrEaEOnbeqHLp6Qda+sWokm kc7sThc48K8lFMNH5WxRv9bQOq9w2O/hl8Y/izp3LgGzI6NagBi1huP3MwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLgUNFr/0VBq+a8y7A13OZt2ZKo/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzUwYjE4 Zi05YTdkLTQ1MmMtYTZkNS05ZGU3NTI1YmE3MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvNTBiMThm LTlhN2QtNDUyYy1hNmQ1LTlkZTc1MjViYTcxMi8xL3VCUTBXdl9SVUdyNXJ6THNE WGM1bTNaa3FqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZBoMA0EAgACMAcDBQMqDuxAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMECTANBgkqhkiG9w0BAQsFAAOCAQEAAuMlxpLSYoV1 kq3T4nVf8Aneq+cttm0M+KQ6aQOXTKOuPlWxggbivduOx/5rHdwVHfmf/nCdMst5 mp4od286a8jpc0FRLRSZ/JxuTPHPdfbVUqo0EuTMKRDrhNi8esaGFHU/XjAb3gBK fuUCJV8F4BkHKBymg+0pjzapa1hOBuek61fc7Ndrc7zbbSj5zAamF2yYaCJlAbfj Eg3UFIM47fL0Jc/3AEiAKlRr6ptpy0n7+SLjSrVZ9wAfvBVwng53c2KHG2tL8RHi a4uOqZ780UmgLPlKwmg+RHFaRRIYRROXFOW/fklChyIaBTKZFM34OZHBOSgIV1xz j8XlKxWZZQ== -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:52 2026 by rpki-client