This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer File: UFbHUIQP5cAQOn9RAix87qj-lps.cer (raw, json) Hash identifier: YtPG/ls/czutZfn5WeUwLyBYMtcyJDvBpSyUM0uLIpQ= Subject key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F19774C45371BBEFB6AD62EF391D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.18.64.0/21 IP: 46.227.192.0/21 IP: 185.137.4.0/22 IP: 2a06:fa80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:19:77:4c:45:37:1b:be:fb:6a:d6:2e:f3:91:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:34:65:2e:70:4e:3f:92:72:e2:a1:ba:85:08: 88:b5:7a:48:da:b3:70:8d:3e:8d:91:b1:71:cb:9c: 3c:b2:d8:03:fd:c7:5f:cb:87:cd:eb:10:87:80:fc: 6d:d7:e3:45:d8:6f:d6:72:45:da:2f:ed:f4:2e:37: c8:2b:35:65:f9:4e:4f:74:08:16:91:2f:24:46:67: 09:ff:0e:dc:b4:d6:e1:a6:59:df:cd:d6:ef:b4:6c: cf:2e:9e:65:7e:40:48:e5:34:9c:e6:7d:6f:a7:f0: c2:58:83:c8:69:8d:9c:1c:7b:74:e4:98:ec:70:8c: fd:4d:9a:5f:c8:72:9f:7a:72:dd:2b:7c:fa:4e:59: ea:2e:2b:6f:0e:b0:ce:23:c8:55:2e:4b:92:74:b0: 43:69:64:93:14:6c:fd:b8:e0:62:39:bc:30:c4:25: ce:dc:cd:1f:79:65:f8:c5:11:fa:66:58:73:ac:9f: 78:00:54:09:3e:0a:64:74:4e:61:e2:1c:37:ad:72: 8d:3c:fd:2c:c1:4d:5d:65:ae:c4:e1:ff:e5:4c:3b: e2:42:9f:d9:aa:7e:4c:8f:6b:eb:a8:66:d0:cb:a4: a9:97:b8:a4:74:4d:17:6e:58:1a:e3:ff:a9:d6:a7: 09:d6:a7:e0:73:50:ea:2e:3a:2c:e6:e5:9c:a4:c7: 6e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.64.0/21 46.227.192.0/21 185.137.4.0/22 IPv6: 2a06:fa80::/29 Signature Algorithm: sha256WithRSAEncryption 23:c4:0b:48:8d:9a:3a:5a:75:b4:c9:6c:e7:a5:8f:8d:b4:36: e8:8d:e0:03:90:df:15:20:1e:1f:6c:ca:34:96:f6:46:b2:04: 2d:0d:9d:5e:e3:58:dc:23:85:8e:dc:3d:70:aa:17:e7:69:ac: ff:eb:8c:f1:dd:c0:fd:5e:9f:62:46:0f:68:cf:6f:b0:37:25: 4d:83:af:d5:14:d8:df:e2:65:44:8e:0a:24:db:c5:da:5e:5d: cd:c7:f9:d9:02:3c:eb:4c:7f:70:25:2c:60:dc:26:95:10:49: 94:ef:cb:60:98:e6:e2:44:6f:5a:ea:66:08:90:18:d7:c8:5d: 99:cb:3a:d0:2d:d2:2d:5f:87:29:19:51:35:ab:84:bd:75:38: 8e:15:c0:41:ea:fd:b6:59:d4:05:48:38:a8:c5:b7:7d:9c:14: 4c:97:0e:9a:b7:29:39:3c:11:d1:e2:82:62:21:33:34:c5:27: 09:62:54:43:21:aa:08:74:56:68:15:44:4d:8d:d0:dd:e1:af: 3f:0a:7f:e6:3b:8d:7c:fb:6e:2e:a2:97:b4:ed:77:12:63:f1: 26:0e:60:a8:dc:17:4f:87:93:92:0d:06:0a:a9:a0:32:8c:93: dd:3d:4a:6c:aa:1b:7c:d7:d3:bf:ca:81:4f:9b:b5:b4:37:5d: 3e:26:c2:bd -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5fxl3TEU3G777atYu85HWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDU2Yzc1MDg0MGZlNWMwMTAzYTdmNTEwMjJjN2NlZWE4ZmU5NjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDRlLnBOP5Jy4qG6hQiItXpI2rNw jT6NkbFxy5w8stgD/cdfy4fN6xCHgPxt1+NF2G/WckXaL+30LjfIKzVl+U5PdAgW kS8kRmcJ/w7ctNbhplnfzdbvtGzPLp5lfkBI5TSc5n1vp/DCWIPIaY2cHHt05Jjs cIz9TZpfyHKfenLdK3z6TlnqLitvDrDOI8hVLkuSdLBDaWSTFGz9uOBiObwwxCXO 3M0feWX4xRH6ZlhzrJ94AFQJPgpkdE5h4hw3rXKNPP0swU1dZa7E4f/lTDviQp/Z qn5Mj2vrqGbQy6Spl7ikdE0Xblga4/+p1qcJ1qfgc1DqLjos5uWcpMdu3QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFBWx1CED+XAEDp/UQIsfO6o/pabMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyLzI1Mjk2 OC1iOGJhLTRlMTktODRkNy0zMjI4Mjg2ZGE2MDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvMjUyOTY4 LWI4YmEtNGUxOS04NGQ3LTMyMjgyODZkYTYwMS8xL1VGYkhVSVFQNWNBUU9uOVJB aXg4N3FqLWxwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDJRJAAwQDLuPAAwQCuYkEMA0EAgACMAcDBQMq BvqAMA0GCSqGSIb3DQEBCwUAA4IBAQAjxAtIjZo6WnW0yWznpY+NtDbojeADkN8V IB4fbMo0lvZGsgQtDZ1e41jcI4WO3D1wqhfnaaz/64zx3cD9Xp9iRg9oz2+wNyVN g6/VFNjf4mVEjgok28XaXl3Nx/nZAjzrTH9wJSxg3CaVEEmU78tgmObiRG9a6mYI kBjXyF2ZyzrQLdItX4cpGVE1q4S9dTiOFcBB6v22WdQFSDioxbd9nBRMlw6atyk5 PBHR4oJiITM0xScJYlRDIaoIdFZoFURNjdDd4a8/Cn/mO418+24uope07XcSY/Em DmCo3BdPh5OSDQYKqaAyjJPdPUpsqht819O/yoFPm7W0N10+JsK9 -----END CERTIFICATE-----Generated at Mon Jan 26 07:21:23 2026 by rpki-client