This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer File: uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer (raw, json) Hash identifier: Gc5EWy2f/3c+CmPmu27kQWVTH8jt82pSaEgrOtmlZM4= Subject key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F6DA2BFB5F3EBB878A5428EC9C210 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.139.32.0/22 IP: 2a07:12c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:6d:a2:bf:b5:f3:eb:b8:78:a5:42:8e:c9:c2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9762db1282ffd084761232038f81f5d29e640d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:c4:3f:f1:75:04:2e:f9:8c:72:86:6f:02: e2:d6:9e:2a:5f:0d:75:2f:0d:a5:30:21:a9:1f:19: 7d:3c:78:07:0b:f9:ac:ac:5d:d9:38:85:c1:88:c8: 66:26:76:77:1f:c7:c2:87:26:4a:5a:d8:b1:fd:af: d7:cd:cf:f8:a6:a3:77:48:a8:8d:9d:92:ea:48:b7: f6:35:37:27:ce:bf:74:e2:f2:b5:aa:50:5b:b6:24: 2e:1d:06:2d:ae:56:ed:9f:d6:03:00:67:77:36:e4: 9c:cc:73:5d:6f:e0:f2:56:21:f1:01:9c:ca:9b:24: 72:1d:f0:55:65:46:63:cf:10:66:05:27:97:ef:81: dc:d2:2f:f4:86:06:51:d3:df:32:90:e9:fa:95:fd: 0d:22:c4:fc:54:e8:20:ff:51:20:bc:81:a6:86:6c: 9a:2c:0b:fe:e9:1f:73:95:ac:9f:46:07:d5:4e:71: 82:b6:3a:e1:e1:b5:fa:fe:5b:fd:ff:5f:de:95:0e: b8:00:0e:87:ed:ff:01:fe:d8:c2:1b:c5:cf:eb:6d: e9:fd:82:a7:cc:ff:fe:39:67:d3:dd:d4:64:1a:5e: 8d:0c:35:67:14:11:37:fb:6c:1d:f1:2b:57:06:a0: 26:8d:23:78:e7:5f:d4:46:b5:60:e6:b7:8e:e4:b7: e9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.32.0/22 IPv6: 2a07:12c0::/29 Signature Algorithm: sha256WithRSAEncryption 9f:45:9f:02:3a:17:68:d3:9e:0a:81:dc:70:1c:d1:f9:df:7b: ff:0f:60:98:3e:b3:5c:3c:50:92:14:2b:e5:28:4c:fd:ea:89: d4:f1:83:e2:1d:4c:0b:a3:83:f0:b9:94:0b:fe:8e:20:eb:51: 62:47:bf:d7:15:60:a1:01:6d:68:43:ac:18:c8:8e:16:84:87: 22:4c:0b:03:a0:f2:07:86:37:8f:80:77:96:3c:9f:2e:c1:fd: 97:be:87:9d:e2:4c:72:63:ed:69:e0:da:24:54:89:ef:a5:d6: a7:79:c1:e3:a1:8d:8e:31:17:1e:0c:12:52:c8:7a:6a:ed:e9: 22:01:04:98:92:26:4a:76:6a:eb:55:fc:78:a5:ac:f2:a1:43: 73:61:44:d5:1a:a3:e7:00:7e:09:e0:56:d4:54:89:d5:6d:f2: 9f:17:80:1d:cc:5e:29:77:16:52:43:8a:22:bd:5f:64:73:32: 18:aa:81:d6:85:c2:c0:27:6a:36:b5:a0:14:44:53:85:22:7b: a5:71:96:a8:04:a9:2d:6b:78:f2:b3:02:a3:7c:2d:a0:9b:9f: 56:17:ec:6f:84:32:bc:26:8d:88:ae:d7:4d:ab:20:0b:3f:3a: e7:f8:15:9d:45:57:1a:b8:7a:6e:d0:56:fb:6c:49:3d:d4:a3: e4:95:e1:0d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt8f22iv7Xz67h4pUKOycIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTc2MmRiMTI4MmZmZDA4NDc2MTIzMjAzOGY4MWY1ZDI5ZTY0MGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1fEP/F1BC75jHKGbwLi1p4qXw11 Lw2lMCGpHxl9PHgHC/msrF3ZOIXBiMhmJnZ3H8fChyZKWtix/a/Xzc/4pqN3SKiN nZLqSLf2NTcnzr904vK1qlBbtiQuHQYtrlbtn9YDAGd3NuSczHNdb+DyViHxAZzK myRyHfBVZUZjzxBmBSeX74Hc0i/0hgZR098ykOn6lf0NIsT8VOgg/1EgvIGmhmya LAv+6R9zlayfRgfVTnGCtjrh4bX6/lv9/1/elQ64AA6H7f8B/tjCG8XP623p/YKn zP/+OWfT3dRkGl6NDDVnFBE3+2wd8StXBqAmjSN451/URrVg5reO5LfpnQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLl2LbEoL/0IR2EjIDj4H10p5kDVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxL2Y4MTkx NS00MDVlLTRiNTQtOWNiNC03MGE1NTZiYThhMTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZjgxOTE1 LTQwNWUtNGI1NC05Y2I0LTcwYTU1NmJhOGExMS8xL3VYWXRzU2d2X1FoSFlTTWdP UGdmWFNubVFOVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYsgMA0EAgACMAcDBQMqBxLAMA0GCSqGSIb3 DQEBCwUAA4IBAQCfRZ8COhdo054KgdxwHNH533v/D2CYPrNcPFCSFCvlKEz96onU 8YPiHUwLo4PwuZQL/o4g61FiR7/XFWChAW1oQ6wYyI4WhIciTAsDoPIHhjePgHeW PJ8uwf2Xvoed4kxyY+1p4NokVInvpdanecHjoY2OMRceDBJSyHpq7ekiAQSYkiZK dmrrVfx4pazyoUNzYUTVGqPnAH4J4FbUVInVbfKfF4AdzF4pdxZSQ4oivV9kczIY qoHWhcLAJ2o2taAURFOFInulcZaoBKkta3jyswKjfC2gm59WF+xvhDK8Jo2IrtdN qyALPzrn+BWdRVcauHpu0Fb7bEk91KPkleEN -----END CERTIFICATE-----Generated at Sun Jan 11 23:39:31 2026 by rpki-client