This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer File: K21-UZH4H_ChnxArFxirT54Oo6A.cer (raw, json) Hash identifier: 6OgkokAQ3O9kEyLxFnpW6aVm2uGlVjpsL/TbeB2X4As= Subject key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C668DE761C907EA6D442111FCB4792 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21416 AS: 199009 AS: 204582 IP: 45.144.44.0/22 IP: 2a0e:eac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:68:de:76:1c:90:7e:a6:d4:42:11:1f:cb:47:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:63:57:c0:32:5e:64:bc:9d:35:09:ce:59: 01:dc:77:5b:c6:ff:38:a4:f4:eb:1a:1f:e9:c2:9e: 8f:b6:9a:53:68:aa:3b:ce:19:8d:bd:aa:97:9b:e9: 46:c4:db:67:08:2d:30:bb:e7:2a:65:9e:43:82:da: 41:45:9b:9a:0f:4f:67:a4:ad:b9:64:97:b5:a9:1a: c3:d8:20:dd:1d:aa:aa:23:9d:03:72:cf:c6:8d:30: 18:81:cf:be:02:76:38:9f:c3:2b:55:61:47:c7:ae: 0b:72:f8:d2:72:f9:df:85:d7:47:6e:7f:d5:50:6c: 54:c6:4f:67:b0:0b:30:9f:0a:c2:20:42:a8:bd:80: 28:92:29:34:d8:99:62:57:6c:7e:3b:64:e9:2b:af: 2d:b6:02:4c:45:3e:c1:bf:cb:fe:7f:cb:4b:ab:49: 3d:56:c3:b0:cb:f3:53:6d:ed:d5:0a:96:60:c5:e3: 9e:65:36:a5:c6:3a:e7:45:4b:f0:16:55:05:89:fa: 97:e8:78:18:41:b9:6e:ca:76:59:d7:b8:84:6d:0f: 71:38:3c:bd:f3:45:65:c0:b6:31:46:06:30:fa:f2: 61:56:54:f3:41:5c:fb:89:d6:c4:b4:92:c8:d3:21: d8:cf:25:35:aa:e5:01:ae:fb:11:a9:b1:b1:dc:0d: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.44.0/22 IPv6: 2a0e:eac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21416 199009 204582 Signature Algorithm: sha256WithRSAEncryption 43:79:9a:29:85:9a:a9:e8:ac:26:1c:28:b4:b8:36:61:e1:6e: c5:02:8f:ee:f8:06:3f:be:05:c7:9a:d6:2c:40:d2:ba:c0:2c: aa:72:a7:a9:02:cd:ca:34:84:66:05:6f:e2:a7:47:6e:87:ef: 81:f3:2b:9d:05:9f:b7:d9:ce:3e:16:b1:e2:77:ec:5b:61:e4: 84:d0:9d:31:32:5c:60:16:bd:44:71:97:73:90:be:99:bc:5b: f4:c7:72:1a:97:5b:c7:e6:c7:94:a2:54:47:de:ca:66:e2:ee: 55:60:9d:67:16:d1:0f:7e:16:42:be:3d:fd:ef:6e:65:74:0d: 55:d6:2c:46:5a:d6:8f:88:b3:91:4a:51:99:23:b5:5b:0b:0f: e4:a8:14:95:77:e4:21:37:25:a4:f5:86:31:e8:57:e7:61:2b: 0b:19:e4:d0:17:e2:ce:8d:05:82:07:e2:88:e0:70:e0:55:97: 79:13:8f:41:e2:cd:6d:43:15:d6:d3:8f:4a:9d:ed:8d:4d:a6: f3:b3:51:98:02:3a:3b:36:e5:4c:02:ff:4f:5c:a9:db:bf:6d: 59:24:66:87:a6:9a:a3:07:32:ef:60:63:e3:a1:e8:91:a7:eb: 67:8f:ed:82:52:6b:bd:eb:9f:d0:11:3a:25:b3:2b:ae:08:db: 88:ea:f3:78 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt3xmjedhyQfqbUQhEfy0eSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjZkN2U1MTkxZjgxZmYwYTE5ZjEwMmIxNzE4YWI0ZjllMGVhM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAretjV8AyXmS8nTUJzlkB3Hdbxv84 pPTrGh/pwp6PtppTaKo7zhmNvaqXm+lGxNtnCC0wu+cqZZ5DgtpBRZuaD09npK25 ZJe1qRrD2CDdHaqqI50Dcs/GjTAYgc++AnY4n8MrVWFHx64LcvjScvnfhddHbn/V UGxUxk9nsAswnwrCIEKovYAokik02JliV2x+O2TpK68ttgJMRT7Bv8v+f8tLq0k9 VsOwy/NTbe3VCpZgxeOeZTalxjrnRUvwFlUFifqX6HgYQbluynZZ17iEbQ9xODy9 80VlwLYxRgYw+vJhVlTzQVz7idbEtJLI0yHYzyU1quUBrvsRqbGx3A3bNQIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFCttflGR+B/woZ8QKxcYq0+eDqOgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2FiMzE1 Ni1iMDYxLTQ5ZmMtYjFmMC0wMGNhMzEyNmIzZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvYWIzMTU2 LWIwNjEtNDlmYy1iMWYwLTAwY2EzMTI2YjNmZS8xL0syMS1VWkg0SF9DaG54QXJG eGlyVDU0T282QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZAsMA0EAgACMAcDBQMqDurAMCMGCCsGAQUF BwEIAQH/BBQwEqAQMA4CAlOoAgMDCWECAwMfJjANBgkqhkiG9w0BAQsFAAOCAQEA Q3maKYWaqeisJhwotLg2YeFuxQKP7vgGP74Fx5rWLEDSusAsqnKnqQLNyjSEZgVv 4qdHbofvgfMrnQWft9nOPhax4nfsW2HkhNCdMTJcYBa9RHGXc5C+mbxb9MdyGpdb x+bHlKJUR97KZuLuVWCdZxbRD34WQr49/e9uZXQNVdYsRlrWj4izkUpRmSO1WwsP 5KgUlXfkITclpPWGMehX52ErCxnk0Bfizo0FggfiiOBw4FWXeROPQeLNbUMV1tOP Sp3tjU2m87NRmAI6OzblTAL/T1yp279tWSRmh6aaowcy72Bj46HokafrZ4/tglJr veuf0BE6JbMrrgjbiOrzeA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:05 2026 by rpki-client