This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer File: uHLaD5xsVoaj257hJKmQQrCogtE.cer (raw, json) Hash identifier: Eq0xSLXnrgjuFoys7X7Yiqt/hK8SIoOrbMbLIWQEPKQ= Subject key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834A7F6AD183415DA0A6D1472C697BE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12854 IP: 185.31.144.0/22 IP: 185.102.68.0/22 IP: 193.200.198.0/24 IP: 213.156.16.0/20 IP: 2a00:bd20::/32 IP: 2a01:4c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a7:f6:ad:18:34:15:da:0a:6d:14:72:c6:97:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:81:e7:b3:cb:d1:91:5b:81:dc:c2:2a:d9:eb: 69:52:a7:94:51:93:cc:69:c4:45:98:5f:cc:15:6c: 26:ce:b6:58:16:e5:e9:47:e5:4c:33:12:8a:f0:2c: d0:72:6a:e0:46:61:e2:6d:d8:46:5f:ad:aa:9b:f1: dc:c4:12:6d:bc:2a:d1:14:45:86:21:6f:52:3a:2a: 6c:25:f5:97:ab:3a:24:0e:20:e0:c5:d0:59:3a:e3: 7a:1e:29:29:67:32:5b:ed:68:2c:9a:08:03:8b:5f: 84:22:a8:d3:6f:dc:2f:b0:9d:00:fd:85:3d:ad:cc: b6:62:43:3d:e4:ef:ac:eb:43:b3:bc:08:95:bf:a8: bc:b1:ff:38:7a:26:a8:b1:8a:9d:4c:9b:e4:88:5e: 8b:15:66:d7:3a:79:29:c7:d8:58:9b:23:22:64:42: b3:e7:f9:a9:0d:69:da:a4:75:2a:cd:35:ef:e7:58: 89:e6:c9:3c:1e:2b:0e:19:55:8c:c1:b8:a6:d9:fd: 5d:c9:f9:87:7c:d1:56:ce:7e:e3:16:52:63:e1:13: 71:cb:bd:a3:b6:0d:a1:93:2c:39:4b:29:8a:4e:12: c6:a6:9b:04:8a:87:89:c9:46:14:c8:7d:32:2e:e0: a2:df:b6:d2:24:60:2f:47:2e:b9:72:e5:32:e3:eb: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.144.0/22 185.102.68.0/22 193.200.198.0/24 213.156.16.0/20 IPv6: 2a00:bd20::/32 2a01:4c00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12854 Signature Algorithm: sha256WithRSAEncryption 03:da:f0:1a:29:ae:19:eb:75:e6:5c:41:41:a5:6b:0e:d7:c9: dd:15:79:38:45:c1:84:06:22:85:96:58:79:47:92:df:af:f7: 6a:75:1a:99:64:15:83:e6:45:38:27:fa:89:07:a7:b9:75:0b: e5:68:4c:55:df:4e:55:ac:a3:e4:65:80:98:71:9f:d6:4c:e0: 7a:24:56:a3:45:dd:e0:8f:c8:14:49:37:b7:79:7b:62:d0:6e: 4b:da:4d:a7:11:97:33:c3:cd:b7:be:2e:55:f6:8a:84:8e:e0: e5:ee:94:84:8f:ce:fc:f9:93:d3:ce:70:02:59:0e:82:58:99: 5f:85:84:51:bd:70:f9:df:04:b1:e1:ff:c8:1e:98:7c:83:c9: 37:67:2b:79:c1:c7:4a:c0:ac:3a:74:6f:9b:55:c6:2f:d8:29: bc:25:5b:6c:0d:31:3f:af:61:40:09:74:37:03:65:7e:71:ad: 97:d8:98:81:4c:ee:d8:01:8b:0e:81:82:73:a6:3a:8d:a8:95: 6b:9f:eb:2c:df:11:ad:9d:6c:19:e5:66:c0:f3:06:2d:f3:2f: 55:04:b1:1c:33:fc:8a:a7:9a:1b:93:d4:27:4e:34:dc:d6:00: 55:b9:3e:a0:d2:6e:75:29:8e:42:1e:12:cd:21:03:df:74:06: be:c9:fc:79 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt4NKf2rRg0FdoKbRRyxpe+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODcyZGEwZjljNmM1Njg2YTNkYjllZTEyNGE5OTA0MmIwYTg4MmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoHns8vRkVuB3MIq2etpUqeUUZPM acRFmF/MFWwmzrZYFuXpR+VMMxKK8CzQcmrgRmHibdhGX62qm/HcxBJtvCrRFEWG IW9SOipsJfWXqzokDiDgxdBZOuN6HikpZzJb7WgsmggDi1+EIqjTb9wvsJ0A/YU9 rcy2YkM95O+s60OzvAiVv6i8sf84eiaosYqdTJvkiF6LFWbXOnkpx9hYmyMiZEKz 5/mpDWnapHUqzTXv51iJ5sk8HisOGVWMwbim2f1dyfmHfNFWzn7jFlJj4RNxy72j tg2hkyw5SymKThLGppsEioeJyUYUyH0yLuCi37bSJGAvRy65cuUy4+vhRQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFLhy2g+cbFaGo9ue4SSpkEKwqILRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdjLzI3MTZl Yy01NjU3LTRmNTYtOGY0My1lMjMxMDNhODgwNTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvMjcxNmVj LTU2NTctNGY1Ni04ZjQzLWUyMzEwM2E4ODA1Mi8xL3VITGFENXhzVm9hajI1N2hK S21RUXJDb2d0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQCuR+QAwQCuWZEAwQAwcjGAwQE1ZwQMBQEAgAC MA4DBQAqAL0gAwUDKgFMADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIyNjANBgkq hkiG9w0BAQsFAAOCAQEAA9rwGimuGet15lxBQaVrDtfJ3RV5OEXBhAYihZZYeUeS 36/3anUamWQVg+ZFOCf6iQenuXUL5WhMVd9OVayj5GWAmHGf1kzgeiRWo0Xd4I/I FEk3t3l7YtBuS9pNpxGXM8PNt74uVfaKhI7g5e6UhI/O/PmT085wAlkOgliZX4WE Ub1w+d8EseH/yB6YfIPJN2crecHHSsCsOnRvm1XGL9gpvCVbbA0xP69hQAl0NwNl fnGtl9iYgUzu2AGLDoGCc6Y6jaiVa5/rLN8RrZ1sGeVmwPMGLfMvVQSxHDP8iqea G5PUJ0403NYAVbk+oNJudSmOQh4SzSED33QGvsn8eQ== -----END CERTIFICATE-----Generated at Sun Jan 11 20:04:42 2026 by rpki-client