This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.cer (raw, json) Hash identifier: DL4bN31wR0Dg5OYf/UfwoParYbsRFjFr5/ucOQYf7m4= Subject key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3E1DE02109D2A79A99B2FEBA6EAD6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209140 IP: 193.105.84.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e1:de:02:10:9d:2a:79:a9:9b:2f:eb:a6:ea:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:99:45:6b:c5:7e:65:5a:e3:d8:4e:a6:b5: ce:c3:bb:f3:e4:97:2b:46:21:3b:8b:42:fc:6d:b3: d3:8a:93:41:d6:ea:69:91:b1:ec:9f:70:2e:e1:ed: 7b:28:76:61:44:72:2c:c4:c2:74:44:46:f6:64:51: 35:84:ec:4d:2d:56:65:75:9e:81:1f:8c:cd:4b:f0: d3:d5:06:68:e6:42:9a:7b:08:4b:79:7f:6c:5b:65: 54:76:69:89:53:8f:17:60:ea:2d:d3:64:ab:71:c1: ca:fc:ec:0b:e5:44:14:66:4f:1b:f3:0b:2e:06:aa: a0:6d:f3:c1:00:4f:42:d1:9c:1d:6b:d5:8c:d8:3c: 24:9c:19:33:79:41:e8:b2:35:1f:1b:38:41:af:78: 79:e4:d9:c2:9d:d1:ac:7a:27:6a:3b:87:d4:00:48: af:71:87:c3:c8:74:36:82:7d:93:33:03:0b:86:43: a9:af:31:5f:e8:59:b6:54:e4:cb:dd:16:83:1b:04: 3b:c7:35:3b:44:4a:5b:9b:73:e2:5e:44:08:d1:cf: a9:82:00:d5:85:30:8d:e4:4c:98:a3:69:db:05:dd: 4e:06:e7:da:a1:ae:f5:bf:e4:f8:67:1b:11:6e:86: 8e:32:c5:b0:49:7a:c8:da:1e:a8:79:03:d1:ac:c4: 02:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.84.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209140 Signature Algorithm: sha256WithRSAEncryption 7e:0a:e8:ff:76:6f:a3:a6:27:37:65:38:0e:4a:4c:ed:c4:03: 12:a4:dd:a2:37:88:34:5f:64:dd:84:f2:22:91:c5:70:ce:b9: 72:b7:b4:54:32:ee:c2:6e:5f:ed:90:54:d5:cb:4b:65:ac:e4: 0a:0b:6b:af:dd:cb:ec:db:a7:c8:c6:c6:00:7f:5a:be:25:45: 10:65:c8:0a:77:e7:70:ad:88:68:4f:8a:71:9a:fd:24:cc:fd: 39:b0:ce:60:f7:a9:6a:e5:3b:18:15:5b:82:57:be:85:3a:27: 90:be:4e:5b:e4:9e:df:0f:1f:61:f0:98:1f:7f:82:ae:ea:86: 20:ba:6e:1b:1c:62:0f:41:42:df:86:b9:67:33:46:82:c5:2c: 7f:7e:01:9d:c7:78:e1:b6:62:f4:db:f4:b4:53:6a:ca:ba:33: 3a:0d:e3:41:57:2d:32:e5:ed:4e:e2:87:9d:87:45:87:90:e7: 1f:aa:30:5d:b1:70:d6:72:5e:cc:ee:f8:26:44:77:90:c3:b8: 0d:42:9a:3a:9b:27:79:f9:ba:26:ed:03:f9:a4:55:a2:4e:51: 94:11:60:48:a9:7c:5a:4b:5e:fc:86:4d:c4:71:2b:c4:c0:6c: aa:68:76:71:52:61:28:24:c0:61:3d:9c:0e:89:a4:b8:f6:77: 5e:52:4c:b7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7o+HeAhCdKnmpmy/rpurWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmU0MmE1ODNmYTI1MWI0MzJjZmMxZGNhOGJkMzQxZDUwNjYwYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGaZRWvFfmVa49hOprXOw7vz5Jcr RiE7i0L8bbPTipNB1uppkbHsn3Au4e17KHZhRHIsxMJ0REb2ZFE1hOxNLVZldZ6B H4zNS/DT1QZo5kKaewhLeX9sW2VUdmmJU48XYOot02SrccHK/OwL5UQUZk8b8wsu BqqgbfPBAE9C0Zwda9WM2DwknBkzeUHosjUfGzhBr3h55NnCndGseidqO4fUAEiv cYfDyHQ2gn2TMwMLhkOprzFf6Fm2VOTL3RaDGwQ7xzU7REpbm3PiXkQI0c+pggDV hTCN5EyYo2nbBd1OBufaoa71v+T4ZxsRboaOMsWwSXrI2h6oeQPRrMQC0wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNLkKlg/olG0Ms/B3Ki9NB1QZguVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzNhYjdm Yy1iYWVmLTRhOTYtYmRkMy1mZGMxZGNkYTI5NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvM2FiN2Zj LWJhZWYtNGE5Ni1iZGQzLWZkYzFkY2RhMjk2MS8xLzB1UXFXRC1pVWJReXo4SGNx TDAwSFZCbUM1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWlUMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMw9DANBgkqhkiG9w0BAQsFAAOCAQEAfgro/3Zvo6YnN2U4DkpM7cQDEqTdojeI NF9k3YTyIpHFcM65cre0VDLuwm5f7ZBU1ctLZazkCgtrr93L7NunyMbGAH9aviVF EGXICnfncK2IaE+KcZr9JMz9ObDOYPepauU7GBVbgle+hTonkL5OW+Se3w8fYfCY H3+CruqGILpuGxxiD0FC34a5ZzNGgsUsf34Bncd44bZi9Nv0tFNqyrozOg3jQVct MuXtTuKHnYdFh5DnH6owXbFw1nJezO74JkR3kMO4DUKaOpsnefm6Ju0D+aRVok5R lBFgSKl8Wkte/IZNxHErxMBsqmh2cVJhKCTAYT2cDomkuPZ3XlJMtw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:51 2026 by rpki-client