This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer File: uIazyxP9IWfYnRIYXpNQbdRcmvk.cer (raw, json) Hash identifier: KJE2YNUt9/TOc0eD1XNV+OjynnfeuQTkeMituAmBJj4= Subject key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA715F87D14F4416589109DE22CA24A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49222 IP: 185.166.244.0/22 IP: 188.92.168.0/21 IP: 2a06:c240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:15:f8:7d:14:f4:41:65:89:10:9d:e2:2c:a2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:e0:f1:af:e4:13:04:11:ac:5a:0b:37:47: a8:cd:9b:94:f3:5a:b7:d6:3d:30:06:d6:9f:e2:83: 9a:3d:08:01:d7:dc:26:12:cb:63:6b:e3:2f:85:82: ab:13:1b:8f:99:26:41:1d:fd:ee:e7:8b:48:c8:b4: ee:eb:7e:d3:8b:80:7c:84:0a:6a:6c:71:d2:93:cb: 50:6d:ff:f8:15:fb:1b:49:82:47:33:4a:41:ec:fc: 12:cd:b9:45:5c:0a:ab:56:3c:2f:93:ed:67:6b:55: cc:fd:a8:9d:92:1d:e2:61:60:95:4b:5c:d5:87:38: e9:9f:a8:5c:c0:dc:2b:63:c5:d1:48:2a:25:54:d2: 54:ea:21:54:8a:66:91:61:d3:b7:54:7d:01:45:98: a1:80:0e:1f:47:7f:52:05:71:bc:ab:50:65:08:bd: 5a:ff:f9:c9:69:b1:be:40:4e:ff:77:1f:9e:19:e6: cd:da:5c:ab:e6:6f:d1:ba:5c:02:33:54:bb:b4:6b: 68:b8:7d:57:57:9b:de:ed:e3:ce:4e:de:c8:29:b4: 3c:8c:0c:ff:9c:6b:c1:59:e1:cc:49:f2:c5:ac:f3: e0:50:d0:d8:e0:5e:56:16:78:6a:9a:aa:e9:f6:f5: d1:c1:f5:e3:39:8c:72:7d:d8:dd:0b:ec:ea:94:a8: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.244.0/22 188.92.168.0/21 IPv6: 2a06:c240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49222 Signature Algorithm: sha256WithRSAEncryption b1:42:fc:7d:ab:ca:f4:72:9c:ed:a9:af:c1:bf:0f:6c:54:3b: 1e:c0:d6:67:33:b0:83:df:01:4a:0b:fe:a7:a7:64:5e:30:c7: ca:b6:53:c7:fe:a4:39:d0:77:10:91:6a:ec:a5:37:d9:a6:22: c2:cb:40:bf:a7:b9:0b:e4:fe:f2:14:88:6e:64:3c:bf:4c:5a: c5:62:22:6d:f4:99:6d:f0:29:a2:d9:08:6b:49:33:e4:06:b4: 79:3b:d5:bc:5b:cc:d8:74:86:a0:7c:e3:b7:ee:3e:4b:13:cb: 67:fa:ca:b6:df:e1:b0:c3:64:10:54:6a:1e:30:e4:f7:20:f8: b0:95:2e:a1:f0:e2:78:ff:53:79:97:63:7b:b7:46:b4:bb:e0: b0:e9:e0:d6:e8:54:ba:b0:0d:53:97:b4:74:b5:ec:62:39:c3: 94:c0:13:29:c5:bc:b6:24:02:44:c0:3a:c0:14:5f:71:6a:19: 6e:47:f5:52:89:fb:e6:ea:8a:fb:6e:ee:ea:b2:77:72:66:2b: f3:b9:72:78:40:5a:ee:8f:f1:e8:6b:f2:bf:68:b6:e2:f9:d6: d5:24:76:0b:d3:dc:fa:a9:5a:47:a3:0a:37:f1:91:5c:de:71: 60:3e:58:4c:f6:23:bb:e4:d0:73:91:ee:8c:e1:ed:d9:55:fe: ae:c6:f9:41 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+pxX4fRT0QWWJEJ3iLKJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODg2YjNjYjEzZmQyMTY3ZDg5ZDEyMTg1ZTkzNTA2ZGQ0NWM5YWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZng8a/kEwQRrFoLN0eozZuU81q3 1j0wBtaf4oOaPQgB19wmEstja+MvhYKrExuPmSZBHf3u54tIyLTu637Ti4B8hApq bHHSk8tQbf/4FfsbSYJHM0pB7PwSzblFXAqrVjwvk+1na1XM/aidkh3iYWCVS1zV hzjpn6hcwNwrY8XRSColVNJU6iFUimaRYdO3VH0BRZihgA4fR39SBXG8q1BlCL1a //nJabG+QE7/dx+eGebN2lyr5m/RulwCM1S7tGtouH1XV5ve7ePOTt7IKbQ8jAz/ nGvBWeHMSfLFrPPgUNDY4F5WFnhqmqrp9vXRwfXjOYxyfdjdC+zqlKjRtQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLiGs8sT/SFn2J0SGF6TUG3UXJr5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzQyYWMz Yy1jNTgzLTRiODItYmNiNy0wNDczOTQwMmUyN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvNDJhYzNj LWM1ODMtNGI4Mi1iY2I3LTA0NzM5NDAyZTI3Yi8xL3VJYXp5eFA5SVdmWW5SSVlY cE5RYmRSY212ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuab0AwQDvFyoMA0EAgACMAcDBQMqBsJAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDARjANBgkqhkiG9w0BAQsFAAOCAQEAsUL8 favK9HKc7amvwb8PbFQ7HsDWZzOwg98BSgv+p6dkXjDHyrZTx/6kOdB3EJFq7KU3 2aYiwstAv6e5C+T+8hSIbmQ8v0xaxWIibfSZbfApotkIa0kz5Aa0eTvVvFvM2HSG oHzjt+4+SxPLZ/rKtt/hsMNkEFRqHjDk9yD4sJUuofDieP9TeZdje7dGtLvgsOng 1uhUurANU5e0dLXsYjnDlMATKcW8tiQCRMA6wBRfcWoZbkf1Uon75uqK+27u6rJ3 cmYr87lyeEBa7o/x6Gvyv2i24vnW1SR2C9Pc+qlaR6MKN/GRXN5xYD5YTPYju+TQ c5HujOHt2VX+rsb5QQ== -----END CERTIFICATE-----Generated at Sun Jan 11 18:15:41 2026 by rpki-client