This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer File: uybM-gcX259Wqji4aSzl3PooJec.cer (raw, json) Hash identifier: 9a2I4k7dbCjGj0gaHvIc7yVfZoYEsp0VmxIm/fWb9Q8= Subject key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E387B461A89E6D7735D261176A38C41 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 155.158.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7b:46:1a:89:e6:d7:73:5d:26:11:76:a3:8c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:46:90:2e:e2:7b:4c:a5:32:77:43:fd:68: 5f:c3:ed:12:cd:0b:30:ea:08:51:00:77:db:a5:34: 00:05:1b:3c:1b:60:2e:26:27:37:fe:7a:68:6d:89: 3f:46:1d:16:65:51:58:4a:ef:a4:7a:5e:d5:f4:7e: 59:19:31:d3:aa:61:9f:ff:18:25:83:c9:33:7f:09: 43:f2:9d:69:d5:54:d4:77:24:c5:68:e7:1f:6a:02: 38:b1:51:f9:26:25:40:0c:55:4d:49:6d:45:8e:e8: 61:50:4f:3a:a6:9d:b5:26:72:02:29:2c:3f:3c:9c: 3b:6e:41:e4:c8:f8:8a:37:e1:06:08:8c:a6:2b:17: c1:f0:e6:54:2b:96:09:6d:8e:f1:f0:15:10:24:cf: c2:8b:dd:08:f7:e9:37:72:a8:5e:23:e0:a8:78:2a: b5:bc:ac:b4:7f:b7:0e:ce:49:a2:85:c1:82:4c:fe: 5c:55:96:2f:60:ac:81:fa:7d:13:1d:e7:34:9b:48: 87:53:ed:9a:4e:39:c9:8a:eb:75:a1:a9:bd:99:66: b8:19:3b:72:e4:b1:32:f1:4c:f1:a0:f8:ad:7e:23: 58:5f:f9:00:71:38:1a:44:4e:a9:32:5f:51:bc:1b: 50:ea:64:db:94:fa:37:55:bd:25:cd:b1:15:ce:8e: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 72:ea:97:b2:ad:c8:31:88:bf:d5:d8:0c:5c:9f:f0:88:33:8e: 37:c9:2a:d7:a1:e4:18:2a:e9:6f:3d:13:5f:0b:38:a2:cc:4f: 47:4c:7e:9f:c2:64:36:d7:24:27:07:79:d5:fb:33:5d:68:4a: c8:b2:6c:71:b2:35:8f:f4:fa:8e:eb:fa:c2:c6:1b:53:5d:85: 57:ad:4e:08:b7:31:4e:14:42:c5:3e:c6:34:0c:ad:35:37:08: f3:ec:41:6c:c2:19:95:92:8e:a2:e4:11:55:d7:b2:bd:f9:db: 8e:70:7c:61:78:46:ea:91:a3:4c:4a:ec:88:ec:cc:cc:03:19: 8f:83:92:c8:32:6e:d8:0f:10:d3:f0:b0:06:35:92:51:3d:f8: 93:c0:e0:62:8b:15:1d:1f:26:d8:9f:ad:3b:b6:c7:19:1d:22: 79:e6:72:e3:f3:1b:e3:38:bc:41:a3:9e:c9:ab:46:97:72:ac: ba:fb:47:7d:94:82:39:75:f3:67:fb:2b:5c:9f:3d:a0:92:a6: c5:71:3e:af:15:c9:f4:d9:c3:1c:89:63:39:3d:10:8f:81:1b: e6:39:9d:e6:47:3f:fe:08:40:d5:68:0f:e2:b9:9f:99:11:87: 79:b1:78:23:ca:fa:66:78:6b:32:04:27:be:c7:03:c6:be:26: 01:e7:75:db -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt+OHtGGonm13NdJhF2o4xBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjI2Y2NmYTA3MTdkYjlmNTZhYTM4Yjg2OTJjZTVkY2ZhMjgyNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+9GkC7ie0ylMndD/Whfw+0SzQsw 6ghRAHfbpTQABRs8G2AuJic3/npobYk/Rh0WZVFYSu+kel7V9H5ZGTHTqmGf/xgl g8kzfwlD8p1p1VTUdyTFaOcfagI4sVH5JiVADFVNSW1FjuhhUE86pp21JnICKSw/ PJw7bkHkyPiKN+EGCIymKxfB8OZUK5YJbY7x8BUQJM/Ci90I9+k3cqheI+CoeCq1 vKy0f7cOzkmihcGCTP5cVZYvYKyB+n0THec0m0iHU+2aTjnJiut1oam9mWa4GTty 5LEy8UzxoPitfiNYX/kAcTgaRE6pMl9RvBtQ6mTblPo3Vb0lzbEVzo4JlwIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFLsmzPoHF9ufVqo4uGks5dz6KCXnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzU1MGMz OS00NGEyLTQzMWItOTMzZC1jY2JmMGU1YjJhZGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvNTUwYzM5 LTQ0YTItNDMxYi05MzNkLWNjYmYwZTViMmFkZC8xL3V5Yk0tZ2NYMjU5V3FqaTRh U3psM1Bvb0plYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAm54wDQYJKoZIhvcNAQELBQADggEBAHLql7Kt yDGIv9XYDFyf8IgzjjfJKteh5Bgq6W89E18LOKLMT0dMfp/CZDbXJCcHedX7M11o SsiybHGyNY/0+o7r+sLGG1NdhVetTgi3MU4UQsU+xjQMrTU3CPPsQWzCGZWSjqLk EVXXsr35245wfGF4RuqRo0xK7IjszMwDGY+DksgybtgPENPwsAY1klE9+JPA4GKL FR0fJtifrTu2xxkdInnmcuPzG+M4vEGjnsmrRpdyrLr7R32Ugjl182f7K1yfPaCS psVxPq8VyfTZwxyJYzk9EI+BG+Y5neZHP/4IQNVoD+K5n5kRh3mxeCPK+mZ4azIE J77HA8a+JgHndds= -----END CERTIFICATE-----Generated at Sun Jan 11 14:37:55 2026 by rpki-client