This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer File: UJSiarpxAHYh_VmdU3u3rqreizM.cer (raw, json) Hash identifier: z/OQWHny4S3UuAAfBoZRcC+eQ6/TKFDiETqVI/4YAY4= Subject key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C766B30D8766C9002C5DC3DBC4BF88 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.66.152.0/21 IP: 155.133.224.0/19 IP: 185.25.180.0/22 IP: 2a01:bc80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:66:b3:0d:87:66:c9:00:2c:5d:c3:db:c4:bf:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5094a26aba71007621fd599d537bb7aeaade8b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:1b:73:ac:94:84:41:99:38:a8:39:fd:3a: ec:21:9a:eb:d1:d9:a3:43:10:98:1c:ee:05:fc:da: 12:0c:0a:92:03:f6:e1:71:8b:71:b2:33:b6:5e:7c: fd:47:3d:a9:2d:79:18:d1:ef:6f:4b:87:8e:10:59: 0d:e0:04:ca:a0:35:10:61:9a:c7:7e:94:3f:0e:4f: 90:a7:0a:6c:36:2c:7a:05:5c:00:1e:02:8c:80:b4: ae:2b:de:1d:f2:99:61:9c:91:6f:04:2c:60:72:0a: a5:fd:f5:f0:48:3a:c9:df:19:55:bb:a0:8d:0e:31: 45:17:5f:63:1a:e0:04:84:39:1d:29:e1:3e:c6:12: e6:24:fd:3c:9b:4b:71:94:06:e7:1c:f6:8b:79:95: c6:94:1a:12:28:77:a2:06:84:41:07:55:07:d2:3d: 4c:dd:77:77:4b:c3:ff:3c:12:ca:33:3e:38:8e:8d: 7b:45:15:de:3e:07:8a:d6:c8:51:27:18:ed:7c:e6: 3d:12:5f:30:1d:69:8f:dc:7d:92:19:fc:04:6d:ee: cd:3f:05:9f:e4:3a:c6:d8:94:60:ad:49:83:49:ae: ca:6f:75:71:60:d1:43:86:5d:09:e2:33:d6:99:bf: a7:38:bb:fb:f8:7d:5e:b3:ca:25:1e:c2:45:f4:ed: 3e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.66.152.0/21 155.133.224.0/19 185.25.180.0/22 IPv6: 2a01:bc80::/32 Signature Algorithm: sha256WithRSAEncryption 48:2f:77:84:4d:50:cf:93:57:ff:13:c0:ab:ba:a4:d6:ec:c0: f1:f6:f8:ac:77:14:43:9b:03:91:66:45:05:df:64:5c:4e:bf: 91:05:de:ec:2c:4d:fc:56:fa:c4:ee:76:14:d1:9d:10:95:51: 2d:30:b2:4a:71:f6:be:be:a3:4d:40:a4:d3:79:72:30:7b:b0: a6:25:f6:d1:91:fa:eb:37:57:52:09:20:7a:f8:ed:1c:75:b4: 7a:a4:1a:28:2b:97:f8:3d:50:b8:06:02:56:bc:2c:ba:54:ba: 55:67:bd:74:2e:3d:16:42:8e:89:9e:47:02:27:9a:7f:7a:3c: ba:ed:ec:e9:03:d2:02:72:08:26:b5:84:fd:a6:50:3c:fe:64: 1b:7d:7f:eb:5a:bc:62:b1:8c:11:58:47:e3:6d:6b:fc:fc:3f: 42:f2:38:7b:b6:49:1a:a7:f0:97:21:80:e8:e6:99:1a:7a:b9: c0:ed:ac:b4:e0:9c:4e:03:3d:f4:f2:9e:9f:30:1b:16:1a:39: f6:16:f5:f6:e6:73:61:a1:56:10:bb:d2:2b:4a:ab:6a:c6:4d: 9c:b6:32:94:b6:d8:01:c7:7e:4e:ba:5b:9c:ac:e1:12:32:f7: 74:15:d9:f6:2b:a3:7f:fa:3a:ab:bf:8a:19:67:b9:f3:d0:7e: 48:6c:e8:7f -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3x2azDYdmyQAsXcPbxL+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDk0YTI2YWJhNzEwMDc2MjFmZDU5OWQ1MzdiYjdhZWFhZGU4YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsscbc6yUhEGZOKg5/TrsIZrr0dmj QxCYHO4F/NoSDAqSA/bhcYtxsjO2Xnz9Rz2pLXkY0e9vS4eOEFkN4ATKoDUQYZrH fpQ/Dk+QpwpsNix6BVwAHgKMgLSuK94d8plhnJFvBCxgcgql/fXwSDrJ3xlVu6CN DjFFF19jGuAEhDkdKeE+xhLmJP08m0txlAbnHPaLeZXGlBoSKHeiBoRBB1UH0j1M 3Xd3S8P/PBLKMz44jo17RRXePgeK1shRJxjtfOY9El8wHWmP3H2SGfwEbe7NPwWf 5DrG2JRgrUmDSa7Kb3VxYNFDhl0J4jPWmb+nOLv7+H1es8olHsJF9O0+QwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFCUomq6cQB2If1ZnVN7t66q3oszMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzlmY2U3 OC00ZjlkLTQ4NDctYjc1OS1iNDUxZTQ3N2I5YzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOWZjZTc4 LTRmOWQtNDg0Ny1iNzU5LWI0NTFlNDc3YjljMi8xL1VKU2lhcnB4QUhZaF9WbWRV M3UzcnFyZWl6TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDkkKYAwQFm4XgAwQCuRm0MA0EAgACMAcDBQAq AbyAMA0GCSqGSIb3DQEBCwUAA4IBAQBIL3eETVDPk1f/E8CruqTW7MDx9visdxRD mwORZkUF32RcTr+RBd7sLE38VvrE7nYU0Z0QlVEtMLJKcfa+vqNNQKTTeXIwe7Cm JfbRkfrrN1dSCSB6+O0cdbR6pBooK5f4PVC4BgJWvCy6VLpVZ710Lj0WQo6JnkcC J5p/ejy67ezpA9ICcggmtYT9plA8/mQbfX/rWrxisYwRWEfjbWv8/D9C8jh7tkka p/CXIYDo5pkaernA7ay04JxOAz308p6fMBsWGjn2FvX25nNhoVYQu9IrSqtqxk2c tjKUttgBx35OulucrOESMvd0Fdn2K6N/+jqrv4oZZ7nz0H5IbOh/ -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:44 2026 by rpki-client