This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer File: uqDyWO70sr9LuqhDDB5YyowYjqc.cer (raw, json) Hash identifier: Hdrgxlt+ECohMojztLNKm2T6HjuP7PD+53N+EgxiKKY= Subject key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B3139B4228EF505134F4B4F9BB4E6A6C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 11:30:23 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 91.226.30.0/23 IP: 2a01:48a0::/32 IP: 2a04:fa00::/29 IP: 2a05:1e40::/29 IP: 2a06:1300::/29 IP: 2a06:4380::/29 IP: 2a06:d640::/29 IP: 2a09:2980::/29 IP: 2a09:9440::/29 IP: 2a09:a200::/29 IP: 2a09:a500::/29 IP: 2a09:a800::/29 IP: 2a09:af80::/29 IP: 2a09:bc00::/29 IP: 2a09:c700::/29 IP: 2a09:cf00::/29 IP: 2a09:d700::/29 IP: 2a09:dd00::/29 IP: 2a09:e300::/29 IP: 2a09:e700::/29 IP: 2a09:ef00::/29 IP: 2a0a:b380::/29 IP: 2a0a:c0c0::/29 IP: 2a0b:9000::/29 IP: 2a0c:72c0::/29 IP: 2a0c:9480::/29 IP: 2a0d:3c40::/29 IP: 2a0d:95c0::/29 IP: 2a0d:afc0::/29 IP: 2a0d:c100::/29 IP: 2a0d:cdc0::/29 IP: 2a0d:f840::/29 IP: 2a0d:fcc0::/29 IP: 2a0e:3f40::/29 IP: 2a0e:5880::/29 IP: 2a0e:7f00::/29 IP: 2a0e:b200::/29 IP: 2a0e:c4c0::/29 IP: 2a0e:eec0::/29 IP: 2a0f:1800::/29 IP: 2a0f:3100::/29 IP: 2a0f:9c00::/29 IP: 2a0f:9d00::/29 IP: 2a11:f40::/29 IP: 2a11:1480::/29 IP: 2a11:1540::/29 IP: 2a11:1a80::/29 IP: 2a11:1f00::/29 IP: 2a11:2140::/29 IP: 2a11:3440::/29 IP: 2a11:3c40::/29 IP: 2a11:3fc0::/29 IP: 2a11:4040::/29 IP: 2a11:45c0::/29 IP: 2a11:4a80::/29 IP: 2a11:5180::/29 IP: 2a11:6300::/29 IP: 2a11:6540::/29 IP: 2a11:6580::/29 IP: 2a11:68c0::/29 IP: 2a11:6bc0::/29 IP: 2a11:6d00::/29 IP: 2a11:84c0::/29 IP: 2a11:8940::/29 IP: 2a11:9380::/29 IP: 2a11:9f40::/29 IP: 2a11:a180::/29 IP: 2a12:1c40::/29 IP: 2a12:2040::/29 IP: 2a12:2ec0::/29 IP: 2a12:2fc0::/29 IP: 2a12:3040::/29 IP: 2a12:38c0::/29 IP: 2a12:39c0::/29 IP: 2a12:3d40::/29 IP: 2a12:3dc0::/29 IP: 2a14:a400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:39:b4:22:8e:f5:05:13:4f:4b:4f:9b:b4:e6:a6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 11:30:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:cb:ed:15:2c:da:99:cc:4f:8a:74:fa:a3: 13:0e:71:a7:8a:0c:03:8e:7f:7e:1c:ae:69:7f:75: 93:1d:ce:17:92:80:3d:27:42:28:b1:72:c8:81:75: 04:43:a8:e7:3c:f5:09:bb:59:83:35:2b:51:5a:eb: ca:f6:69:fa:7c:9a:ff:9d:24:06:92:b4:87:2f:6e: 2c:6a:86:66:85:7a:e5:1d:99:e2:15:dc:f6:03:84: a8:cb:71:56:97:6f:0c:66:19:71:0d:5a:4c:d4:cb: 41:24:49:75:1b:d7:1b:8a:1e:22:f8:18:3a:20:a2: ff:60:3f:24:64:36:55:45:25:c0:ae:16:bc:da:77: c8:d0:36:27:2d:f0:60:c7:1e:1c:5b:6e:db:41:fe: e8:22:c3:9f:e8:ec:04:ef:c2:b2:40:e9:9d:9b:37: 6c:13:9c:06:dd:ef:a1:19:de:f5:32:85:04:5d:1e: c8:87:ee:bb:e1:20:e8:6d:31:84:41:a8:26:9d:a4: a7:c8:ce:5b:55:33:fd:ce:cf:34:7d:b3:1f:1c:fb: eb:3d:dd:56:48:6f:90:cc:ef:8e:d8:fa:29:98:62: 17:7b:19:25:fe:f6:fe:6d:1e:d7:c1:2e:97:48:58: a1:77:53:6a:2f:a2:49:ef:50:bf:86:27:75:bb:ef: d3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.30.0/23 IPv6: 2a01:48a0::/32 2a04:fa00::/29 2a05:1e40::/29 2a06:1300::/29 2a06:4380::/29 2a06:d640::/29 2a09:2980::/29 2a09:9440::/29 2a09:a200::/29 2a09:a500::/29 2a09:a800::/29 2a09:af80::/29 2a09:bc00::/29 2a09:c700::/29 2a09:cf00::/29 2a09:d700::/29 2a09:dd00::/29 2a09:e300::/29 2a09:e700::/29 2a09:ef00::/29 2a0a:b380::/29 2a0a:c0c0::/29 2a0b:9000::/29 2a0c:72c0::/29 2a0c:9480::/29 2a0d:3c40::/29 2a0d:95c0::/29 2a0d:afc0::/29 2a0d:c100::/29 2a0d:cdc0::/29 2a0d:f840::/29 2a0d:fcc0::/29 2a0e:3f40::/29 2a0e:5880::/29 2a0e:7f00::/29 2a0e:b200::/29 2a0e:c4c0::/29 2a0e:eec0::/29 2a0f:1800::/29 2a0f:3100::/29 2a0f:9c00::/29 2a0f:9d00::/29 2a11:f40::/29 2a11:1480::/29 2a11:1540::/29 2a11:1a80::/29 2a11:1f00::/29 2a11:2140::/29 2a11:3440::/29 2a11:3c40::/29 2a11:3fc0::/29 2a11:4040::/29 2a11:45c0::/29 2a11:4a80::/29 2a11:5180::/29 2a11:6300::/29 2a11:6540::/29 2a11:6580::/29 2a11:68c0::/29 2a11:6bc0::/29 2a11:6d00::/29 2a11:84c0::/29 2a11:8940::/29 2a11:9380::/29 2a11:9f40::/29 2a11:a180::/29 2a12:1c40::/29 2a12:2040::/29 2a12:2ec0::/29 2a12:2fc0::/29 2a12:3040::/29 2a12:38c0::/29 2a12:39c0::/29 2a12:3d40::/29 2a12:3dc0::/29 2a14:a400::/29 Signature Algorithm: sha256WithRSAEncryption 20:8c:8b:f5:87:80:a8:8d:ff:b1:1e:9f:62:b4:b0:3b:5a:d1: 7f:ce:aa:c1:9a:78:1b:45:09:e1:7e:be:23:96:c3:ff:28:64: 2b:68:aa:d2:6c:d6:26:8e:66:31:87:84:5d:5c:5c:ad:ff:a4: 05:1f:07:58:83:7d:0e:86:b3:5e:18:07:42:e3:6c:9c:7c:17: 8e:f3:5d:03:d7:e3:77:0c:ca:18:c7:87:02:b0:52:33:34:ba: 81:d7:7e:b0:bd:3a:dd:40:fb:be:99:b8:cf:63:5f:fc:5e:c4: 6e:a1:10:d8:07:b4:6b:83:9f:fe:f7:fd:88:bd:03:01:33:73: f7:ec:0e:2a:e3:14:25:00:a1:5e:2a:79:25:74:2f:f8:cb:b2: 8c:5b:1d:a8:b2:50:66:b9:cb:da:eb:e2:eb:8a:62:89:82:13: e2:0e:c1:88:24:d2:5b:d2:73:78:33:88:58:c5:23:6d:d3:34: a7:1a:b7:55:69:44:62:4a:79:09:7f:80:21:7a:de:0a:dc:4f: 70:f7:3f:1a:83:f1:d9:47:00:fb:b7:1b:84:30:8d:7a:b7:23: f7:0c:40:98:ff:74:c8:5e:ac:60:77:5c:e8:5d:c0:e1:24:0a: 90:b6:21:9b:ab:97:4f:ab:75:ce:a3:7d:dd:37:ae:7b:c7:03: b5:99:22:76 -----BEGIN CERTIFICATE----- MIIHnjCCBoagAwIBAgISAZsxObQijvUFE09LT5u05qbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTEzMDIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWEwZjI1OGVlZjRiMmJmNGJiYWE4NDMwYzFlNThjYThjMTg4ZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM3L7RUs2pnMT4p0+qMTDnGnigwD jn9+HK5pf3WTHc4XkoA9J0IosXLIgXUEQ6jnPPUJu1mDNStRWuvK9mn6fJr/nSQG krSHL24saoZmhXrlHZniFdz2A4Soy3FWl28MZhlxDVpM1MtBJEl1G9cbih4i+Bg6 IKL/YD8kZDZVRSXArha82nfI0DYnLfBgxx4cW27bQf7oIsOf6OwE78KyQOmdmzds E5wG3e+hGd71MoUEXR7Ih+674SDobTGEQagmnaSnyM5bVTP9zs80fbMfHPvrPd1W SG+QzO+O2PopmGIXexkl/vb+bR7XwS6XSFihd1NqL6JJ71C/hid1u+/TVwIDAQAB o4IEqjCCBKYwHQYDVR0OBBYEFLqg8lju9LK/S7qoQwweWMqMGI6nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzVlMGVl MS1jODMzLTQyNDEtOTYwYS1lNTc2OGQ2YjE4MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNWUwZWUx LWM4MzMtNDI0MS05NjBhLWU1NzY4ZDZiMTgyYy8xL3VxRHlXTzcwc3I5THVxaERE QjVZeW93WWpxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIICQwYIKwYB BQUHAQcBAf8EggIyMIICLjAMBAIAATAGAwQBW+IeMIICHAQCAAIwggIUAwUAKgFI oAMFAyoE+gADBQMqBR5AAwUDKgYTAAMFAyoGQ4ADBQMqBtZAAwUDKgkpgAMFAyoJ lEADBQMqCaIAAwUDKgmlAAMFAyoJqAADBQMqCa+AAwUDKgm8AAMFAyoJxwADBQMq Cc8AAwUDKgnXAAMFAyoJ3QADBQMqCeMAAwUDKgnnAAMFAyoJ7wADBQMqCrOAAwUD KgrAwAMFAyoLkAADBQMqDHLAAwUDKgyUgAMFAyoNPEADBQMqDZXAAwUDKg2vwAMF AyoNwQADBQMqDc3AAwUDKg34QAMFAyoN/MADBQMqDj9AAwUDKg5YgAMFAyoOfwAD BQMqDrIAAwUDKg7EwAMFAyoO7sADBQMqDxgAAwUDKg8xAAMFAyoPnAADBQMqD50A AwUDKhEPQAMFAyoRFIADBQMqERVAAwUDKhEagAMFAyoRHwADBQMqESFAAwUDKhE0 QAMFAyoRPEADBQMqET/AAwUDKhFAQAMFAyoRRcADBQMqEUqAAwUDKhFRgAMFAyoR YwADBQMqEWVAAwUDKhFlgAMFAyoRaMADBQMqEWvAAwUDKhFtAAMFAyoRhMADBQMq EYlAAwUDKhGTgAMFAyoRn0ADBQMqEaGAAwUDKhIcQAMFAyoSIEADBQMqEi7AAwUD KhIvwAMFAyoSMEADBQMqEjjAAwUDKhI5wAMFAyoSPUADBQMqEj3AAwUDKhSkADAN BgkqhkiG9w0BAQsFAAOCAQEAIIyL9YeAqI3/sR6fYrSwO1rRf86qwZp4G0UJ4X6+ I5bD/yhkK2iq0mzWJo5mMYeEXVxcrf+kBR8HWIN9DoazXhgHQuNsnHwXjvNdA9fj dwzKGMeHArBSMzS6gdd+sL063UD7vpm4z2Nf/F7EbqEQ2Ae0a4Of/vf9iL0DATNz 9+wOKuMUJQChXip5JXQv+MuyjFsdqLJQZrnL2uvi64piiYIT4g7BiCTSW9JzeDOI WMUjbdM0pxq3VWlEYkp5CX+AIXreCtxPcPc/GoPx2UcA+7cbhDCNercj9wxAmP90 yF6sYHdc6F3A4SQKkLYhm6uXT6t1zqN93Teue8cDtZkidg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:13:02 2025 by rpki-client