This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer File: UFkuaIlccGi0ZVUIkXrVu929Cl8.cer (raw, json) Hash identifier: f5Lk+kiTXnN3AQkcV8iLjixz8QlsyBXxQbfVAaGb1yg= Subject key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BDC30DB8B59407DEDA76B9BCFED9C310C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 20 Jan 2026 16:15:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201086 AS: 210107 IP: 91.151.81.0/24 IP: 153.56.129.0/24 IP: 185.86.80.0/23 IP: 185.86.83.0/24 IP: 185.205.16.0/22 IP: 185.237.80.0/22 IP: 185.254.92.0/23 IP: 185.254.95.0/24 IP: 193.36.60.0/22 IP: 194.1.184.0/24 IP: 194.1.192.0/24 IP: 194.1.218.0/24 IP: 194.1.244.0/24 IP: 194.145.136.0/22 IP: 2a05:b700::/29 IP: 2a0a:fa40::/29 IP: 2a0c:580::/29 IP: 2a0c:4a40::/29 IP: 2a0d:d380::/29 IP: 2a0f:c940::/29 IP: 2a10:4b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:30:db:8b:59:40:7d:ed:a7:6b:9b:cf:ed:9c:31:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 20 16:15:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50592e68895c7068b4655508917ad5bbddbd0a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:5d:43:0f:6c:05:22:de:16:56:78:4d:3c: 33:23:33:f2:bc:62:1c:65:59:96:39:84:91:41:9e: 3c:43:7b:ac:6a:c3:67:26:6e:21:b8:42:b9:e1:9d: 00:42:2e:f0:7b:2b:43:2c:fb:88:88:b4:d1:78:ba: 78:36:5d:97:7d:c8:6e:4d:2e:00:d4:ab:e0:c2:c1: 21:a5:30:05:80:70:a9:07:e0:c3:e1:4e:c5:7a:56: 5e:cd:aa:e5:5e:f7:74:c9:97:e9:06:d8:17:dc:0f: 8f:b5:cd:b1:0d:ab:33:18:bd:74:12:7e:ad:9b:af: 6b:10:79:2b:28:f6:b8:a0:ce:62:87:7c:5a:61:ec: e5:e9:a1:01:e6:5c:ee:6e:a7:b9:40:47:53:91:99: 19:99:ac:96:06:22:8f:24:af:59:e0:1d:7a:53:d4: 20:c0:66:00:15:5d:ca:7a:72:0a:0d:70:fd:1a:d8: da:41:33:0c:a8:2f:bf:5e:de:de:f9:8b:d7:ff:d8: 3f:07:99:83:50:30:43:03:31:37:8e:45:61:26:42: 59:17:ba:8d:4f:94:50:38:98:ac:74:08:f2:0f:15: 33:12:0d:ad:4a:31:41:f7:79:3a:10:5a:80:dc:e2: ed:3a:2f:29:23:7c:e6:7d:6b:20:b5:0c:b0:5e:f1: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.81.0/24 153.56.129.0/24 185.86.80.0/23 185.86.83.0/24 185.205.16.0/22 185.237.80.0/22 185.254.92.0/23 185.254.95.0/24 193.36.60.0/22 194.1.184.0/24 194.1.192.0/24 194.1.218.0/24 194.1.244.0/24 194.145.136.0/22 IPv6: 2a05:b700::/29 2a0a:fa40::/29 2a0c:580::/29 2a0c:4a40::/29 2a0d:d380::/29 2a0f:c940::/29 2a10:4b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201086 210107 Signature Algorithm: sha256WithRSAEncryption 5e:9d:43:c8:76:f7:68:db:36:56:12:22:bd:d0:92:5c:25:4b: d2:a6:90:38:e9:62:be:0d:4b:8b:45:9d:ee:73:aa:75:2c:91: ef:43:eb:8e:a0:b8:52:80:01:38:35:f3:c6:01:d6:c4:c6:03: 94:40:71:7e:46:c5:aa:d9:d0:aa:08:2d:f5:e3:b5:55:89:c9: f0:63:3c:51:74:5b:04:2c:2e:81:0b:8a:4a:a7:aa:2d:e2:36: 50:9f:f7:d4:c2:78:3d:ce:9b:0b:f3:58:fa:fa:c9:82:44:4e: 1a:ec:3d:62:9c:e3:75:2b:19:0a:ef:d2:dd:49:da:93:bc:c7: be:8f:14:8d:fb:ff:b0:f9:5a:81:76:08:5d:44:ab:a4:90:2b: 11:53:1e:2f:80:bd:fd:0e:d8:be:62:3b:1b:2d:67:31:d6:30: 3d:88:35:23:b2:81:54:04:9f:0e:d1:c7:08:38:08:9f:7c:2e: 21:da:c8:2d:86:ec:8c:f1:d8:3f:85:d4:c2:bd:67:fa:98:c3: 1b:16:c8:bb:6f:07:fa:ed:ed:e4:c5:6d:53:06:8f:df:86:8a: ad:7d:c1:a5:fe:0b:b9:5a:2c:74:58:1a:9c:c7:c0:11:59:ca: 78:63:f3:c1:a2:df:64:0f:00:6c:db:08:48:3b:04:3c:f0:74: a1:b6:6c:db -----BEGIN CERTIFICATE----- MIIGIzCCBQugAwIBAgISAZvcMNuLWUB97adrm8/tnDEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIwMTYxNTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDU5MmU2ODg5NWM3MDY4YjQ2NTU1MDg5MTdhZDViYmRkYmQwYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrxdQw9sBSLeFlZ4TTwzIzPyvGIc ZVmWOYSRQZ48Q3usasNnJm4huEK54Z0AQi7weytDLPuIiLTReLp4Nl2XfchuTS4A 1KvgwsEhpTAFgHCpB+DD4U7FelZezarlXvd0yZfpBtgX3A+Ptc2xDaszGL10En6t m69rEHkrKPa4oM5ih3xaYezl6aEB5lzubqe5QEdTkZkZmayWBiKPJK9Z4B16U9Qg wGYAFV3KenIKDXD9GtjaQTMMqC+/Xt7e+YvX/9g/B5mDUDBDAzE3jkVhJkJZF7qN T5RQOJisdAjyDxUzEg2tSjFB93k6EFqA3OLtOi8pI3zmfWsgtQywXvF5ewIDAQAB o4IDLzCCAyswHQYDVR0OBBYEFFBZLmiJXHBotGVVCJF61bvdvQpfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzJhODEw MC0xNzJiLTQ4ZTMtYTMyYS03YmJkMjhjZTRhNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvMmE4MTAw LTE3MmItNDhlMy1hMzJhLTdiYmQyOGNlNGE3NS8xL1VGa3VhSWxjY0dpMFpWVUlr WHJWdTkyOUNsOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGoBggrBgEF BQcBBwEB/wSBmDCBlTBaBAIAATBUAwQAW5dRAwQAmTiBAwQBuVZQAwQAuVZTAwQC uc0QAwQCue1QAwQBuf5cAwQAuf5fAwQCwSQ8AwQAwgG4AwQAwgHAAwQAwgHaAwQA wgH0AwQCwpGIMDcEAgACMDEDBQMqBbcAAwUDKgr6QAMFAyoMBYADBQMqDEpAAwUD Kg3TgAMFAyoPyUADBQMqEEtAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMRfgID AzS7MA0GCSqGSIb3DQEBCwUAA4IBAQBenUPIdvdo2zZWEiK90JJcJUvSppA46WK+ DUuLRZ3uc6p1LJHvQ+uOoLhSgAE4NfPGAdbExgOUQHF+RsWq2dCqCC3147VVicnw YzxRdFsELC6BC4pKp6ot4jZQn/fUwng9zpsL81j6+smCRE4a7D1inON1KxkK79Ld SdqTvMe+jxSN+/+w+VqBdghdRKukkCsRUx4vgL39Dti+YjsbLWcx1jA9iDUjsoFU BJ8O0ccIOAiffC4h2sgthuyM8dg/hdTCvWf6mMMbFsi7bwf67e3kxW1TBo/fhoqt fcGl/gu5Wix0WBqcx8ARWcp4Y/PBot9kDwBs2whIOwQ88HShtmzb -----END CERTIFICATE-----Generated at Sun Jan 25 20:05:05 2026 by rpki-client