This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer File: uqI_dArVZMVpO3cJHHGzwDE2pYA.cer (raw, json) Hash identifier: /ngRHUlXA0GGJWOn4QDQFvUj+F+TGaTz9eEZ6VO6XF4= Subject key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A289F05297CCD5DA66164AA5184F7A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49040 IP: 185.242.88.0/22 IP: 2a0c:c680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:89:f0:52:97:cc:d5:da:66:16:4a:a5:18:4f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=baa23f740ad564c5693b77091c71b3c03136a580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:40:2d:f3:4b:0e:15:e7:be:08:d0:74:46: 99:ec:ff:f2:7d:20:b9:8d:4a:14:88:56:fd:cd:73: 28:f4:bc:8a:f0:6e:8b:63:c3:60:58:46:4f:24:16: 52:96:29:93:2c:b8:a8:0c:89:49:c2:2c:99:ee:69: 35:74:9f:e7:bf:fc:bb:a9:a0:fa:0b:51:f4:7e:b2: af:a9:5c:28:a5:20:9b:86:68:85:02:f0:29:d2:c9: ba:ae:ad:81:7d:aa:7c:4b:bc:bb:42:a7:bf:45:64: ee:72:d6:e7:fb:98:08:4c:40:6c:c4:ae:1c:9e:76: ea:27:6f:71:f9:a2:78:2e:97:cb:06:fc:cb:2c:01: 7d:83:02:ec:d6:3d:4e:91:65:d2:af:b6:50:ce:b2: c1:24:d4:27:8d:e1:a8:e8:18:58:c8:d4:95:ac:e7: a1:d4:0f:a1:7d:d9:ca:a8:4d:12:75:6a:8b:91:e7: 96:41:2c:17:62:ce:ca:86:71:48:db:fc:d6:e9:9d: bf:77:f9:42:25:9b:2e:b8:d2:86:09:0d:1d:bb:71: 4c:ed:08:9b:81:a7:4b:4c:5b:a1:85:d7:46:d3:bd: a9:3f:68:4f:33:52:dc:37:a3:31:5a:aa:76:22:70: 36:04:44:4d:68:5d:6a:bb:fd:64:c4:5e:43:1b:0f: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.88.0/22 IPv6: 2a0c:c680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49040 Signature Algorithm: sha256WithRSAEncryption 73:8d:e8:e1:44:1e:66:d9:df:cd:c9:85:94:8e:e8:20:9e:fb: 72:b9:8a:ed:e9:76:db:e9:94:39:7e:2a:9f:c8:8a:62:30:e1: 39:e1:7d:ee:58:92:25:8d:ae:0f:8d:a2:47:5d:e3:08:e5:e6: 42:71:cc:94:58:44:ab:7f:3f:6c:a5:80:b2:a7:37:21:3b:bf: 0a:cd:41:03:d1:41:15:85:d9:ce:b4:88:20:fc:f2:c8:ce:d6: 3d:cb:e6:7a:48:ae:c2:b6:e7:cc:65:1c:bf:15:2a:8d:cb:3d: f4:1c:b9:85:47:94:57:22:e4:e5:3f:90:15:4a:47:07:7b:61: 6b:db:9a:42:cb:08:fd:80:74:63:9c:2a:24:aa:b5:2a:8a:0c: 1a:8a:e3:90:35:5f:61:3b:ce:46:00:14:cf:83:7b:75:94:1a: 0f:ba:aa:4d:ed:48:cb:cd:a2:9e:71:de:e4:47:4e:de:c4:63: 10:de:f8:4e:96:3d:36:be:99:db:66:68:37:67:07:e0:66:12: 33:47:52:5c:72:0b:70:cd:b2:5f:30:11:a2:d6:b8:7b:71:a6: c2:95:e5:6d:a9:5f:a1:e3:6e:ee:36:9a:44:3b:5c:87:91:51: f1:46:42:06:6a:2f:03:3d:69:d2:54:dd:da:1b:20:d6:bf:fa: 59:1e:74:b2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4oonwUpfM1dpmFkqlGE96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWEyM2Y3NDBhZDU2NGM1NjkzYjc3MDkxYzcxYjNjMDMxMzZhNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYRALfNLDhXnvgjQdEaZ7P/yfSC5 jUoUiFb9zXMo9LyK8G6LY8NgWEZPJBZSlimTLLioDIlJwiyZ7mk1dJ/nv/y7qaD6 C1H0frKvqVwopSCbhmiFAvAp0sm6rq2Bfap8S7y7Qqe/RWTuctbn+5gITEBsxK4c nnbqJ29x+aJ4LpfLBvzLLAF9gwLs1j1OkWXSr7ZQzrLBJNQnjeGo6BhYyNSVrOeh 1A+hfdnKqE0SdWqLkeeWQSwXYs7KhnFI2/zW6Z2/d/lCJZsuuNKGCQ0du3FM7Qib gadLTFuhhddG072pP2hPM1LcN6MxWqp2InA2BERNaF1qu/1kxF5DGw+lLwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLqiP3QK1WTFaTt3CRxxs8AxNqWAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzhjMDli My1mNmQ4LTRjOWEtOTY0Yy04NTI3YzliM2U3NWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvOGMwOWIz LWY2ZDgtNGM5YS05NjRjLTg1MjdjOWIzZTc1Zi8xL3VxSV9kQXJWWk1WcE8zY0pI SEd6d0RFMnBZQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufJYMA0EAgACMAcDBQMqDMaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC/kDANBgkqhkiG9w0BAQsFAAOCAQEAc43o4UQeZtnf zcmFlI7oIJ77crmK7el22+mUOX4qn8iKYjDhOeF97liSJY2uD42iR13jCOXmQnHM lFhEq38/bKWAsqc3ITu/Cs1BA9FBFYXZzrSIIPzyyM7WPcvmekiuwrbnzGUcvxUq jcs99By5hUeUVyLk5T+QFUpHB3tha9uaQssI/YB0Y5wqJKq1KooMGorjkDVfYTvO RgAUz4N7dZQaD7qqTe1Iy82innHe5EdO3sRjEN74TpY9Nr6Z22ZoN2cH4GYSM0dS XHILcM2yXzARota4e3GmwpXlbalfoeNu7jaaRDtch5FR8UZCBmovAz1p0lTd2hsg 1r/6WR50sg== -----END CERTIFICATE-----Generated at Sun Jan 11 23:23:33 2026 by rpki-client