This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer File: uCtyJxX5G-eSoew8Med-2doFy-E.cer (raw, json) Hash identifier: csCzUKd6G9yKD6fpPrvl6zMIDnKse4z0B/AS7HNQxD8= Subject key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA56780BCB249B20B4E3BFA6CB3CC87 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8301 IP: 178.208.192.0/19 IP: 185.74.72.0/22 IP: 195.244.192.0/19 IP: 212.120.224.0/19 IP: 217.65.48.0/20 IP: 2a01:8c40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:67:80:bc:b2:49:b2:0b:4e:3b:fa:6c:b3:cc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:70:d2:1d:dc:f7:51:93:ca:3e:14:87:8a: d2:6e:31:1c:1b:43:01:6a:10:13:4d:fc:d4:96:22: 77:43:5c:86:87:df:06:66:a7:90:4f:0b:7c:00:ed: 01:0d:0d:45:18:48:06:b3:c5:2b:2d:06:a7:3a:d2: e8:e0:42:78:cc:30:ba:89:9d:c2:18:c8:f8:e8:0a: 3c:14:7e:0a:f6:50:ed:d5:de:47:62:14:77:36:bf: b0:8a:c5:c7:74:a1:69:3a:31:a2:5d:ef:dd:c5:ca: 12:4a:94:3a:a3:23:be:77:90:fb:cc:4d:81:37:2a: 92:d1:62:b4:2d:76:d2:9d:ff:e5:a9:7b:f7:ce:06: 2b:86:0f:45:a7:d8:eb:fd:4e:8e:b3:98:fe:13:d1: 55:08:a3:45:49:11:af:3b:68:4b:06:63:34:28:45: 49:a2:ee:87:b1:df:f7:28:40:1e:cd:35:54:04:6e: 05:e9:5d:31:ce:91:99:39:8a:bd:78:55:75:5b:c2: 76:80:3c:df:75:3f:1e:44:66:15:2d:c3:0c:25:30: 30:8c:2a:05:38:74:da:82:6e:8c:25:a5:d1:54:df: df:3e:4a:1d:e4:4c:31:d9:90:f1:82:2e:e6:26:22: ca:60:a8:81:f9:fd:f5:74:71:71:a9:77:21:01:59: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.208.192.0/19 185.74.72.0/22 195.244.192.0/19 212.120.224.0/19 217.65.48.0/20 IPv6: 2a01:8c40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8301 Signature Algorithm: sha256WithRSAEncryption 22:91:84:ac:c8:38:d4:6e:56:46:15:ba:d3:16:bc:0b:e6:72: 69:3e:b7:ac:6b:08:d1:64:39:e6:09:2e:24:4e:24:d8:4b:bb: 71:81:49:9d:4b:59:9d:8f:34:02:c0:57:07:7c:2c:a8:0b:85: 40:69:72:45:a5:a3:6d:14:a1:37:4c:bd:2f:cc:c7:8a:13:ca: ac:68:9b:be:1b:d0:f0:38:b9:e6:0c:4c:67:56:d4:15:a0:98: d8:c4:0d:e0:0b:d1:46:21:f3:da:3d:71:2a:b6:99:5a:e4:71: a9:48:21:9d:b0:7b:54:1b:bd:f1:af:d3:3d:cf:e9:51:bb:b3: db:3d:5a:92:46:9e:2c:82:4a:53:2e:2a:c3:a6:ac:36:10:7d: e4:f4:7a:b6:f4:79:b2:0d:90:29:51:c7:81:6e:ec:26:d9:30: 16:c6:b5:4c:94:bb:3f:a5:4d:d8:4a:15:70:a7:b7:49:2a:f4: 3e:73:4e:9a:e2:79:01:1b:2e:64:66:ef:86:b7:9a:fc:cb:4d: 2d:17:85:af:ea:e2:96:90:d5:79:4a:6b:e9:6f:79:5e:d7:51: 40:6a:f9:d4:74:e9:9f:39:bd:c7:1e:ba:03:7a:92:b9:74:54: 28:c3:6e:a6:1e:a9:25:c0:93:49:65:f6:26:a3:d4:02:27:3f: 4a:fa:6e:65 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt+pWeAvLJJsgtOO/pss8yHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODJiNzIyNzE1ZjkxYmU3OTJhMWVjM2MzMWU3N2VkOWRhMDVjYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJVw0h3c91GTyj4Uh4rSbjEcG0MB ahATTfzUliJ3Q1yGh98GZqeQTwt8AO0BDQ1FGEgGs8UrLQanOtLo4EJ4zDC6iZ3C GMj46Ao8FH4K9lDt1d5HYhR3Nr+wisXHdKFpOjGiXe/dxcoSSpQ6oyO+d5D7zE2B NyqS0WK0LXbSnf/lqXv3zgYrhg9Fp9jr/U6Os5j+E9FVCKNFSRGvO2hLBmM0KEVJ ou6Hsd/3KEAezTVUBG4F6V0xzpGZOYq9eFV1W8J2gDzfdT8eRGYVLcMMJTAwjCoF OHTagm6MJaXRVN/fPkod5Ewx2ZDxgi7mJiLKYKiB+f31dHFxqXchAVmSGwIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFLgrcicV+RvnkqHsPDHnftnaBcvhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzM5Njc1 OS1iMGM2LTQ4ZWYtOTdiMy1hMTVhMTg2MTNkYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMzk2NzU5 LWIwYzYtNDhlZi05N2IzLWExNWExODYxM2RhNi8xL3VDdHlKeFg1Ry1lU29ldzhN ZWQtMmRvRnktRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQFstDAAwQCuUpIAwQFw/TAAwQF1HjgAwQE2UEw MA0EAgACMAcDBQAqAYxAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiBtMA0GCSqG SIb3DQEBCwUAA4IBAQAikYSsyDjUblZGFbrTFrwL5nJpPresawjRZDnmCS4kTiTY S7txgUmdS1mdjzQCwFcHfCyoC4VAaXJFpaNtFKE3TL0vzMeKE8qsaJu+G9DwOLnm DExnVtQVoJjYxA3gC9FGIfPaPXEqtpla5HGpSCGdsHtUG73xr9M9z+lRu7PbPVqS Rp4sgkpTLirDpqw2EH3k9Hq29HmyDZApUceBbuwm2TAWxrVMlLs/pU3YShVwp7dJ KvQ+c06a4nkBGy5kZu+Gt5r8y00tF4Wv6uKWkNV5Smvpb3le11FAavnUdOmfOb3H HroDepK5dFQow26mHqklwJNJZfYmo9QCJz9K+m5l -----END CERTIFICATE-----Generated at Sun Jan 11 18:15:43 2026 by rpki-client