This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer File: UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer (raw, json) Hash identifier: SVVqmaSzouaIf1MP01KDJtohe2F8ipoH0pAbktyW9Mk= Subject key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15E3582CC3FFD0539B61B550E9BA97 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.122.180.0/22 IP: 2a03:9160::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e3:58:2c:c3:ff:d0:53:9b:61:b5:50:e9:ba:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c0:88:bc:2f:2b:bd:8d:f4:9b:bc:b9:82:b0: a9:7f:33:7e:13:77:7a:ca:85:28:98:27:20:ae:f5: 2c:d1:b2:d5:17:bf:38:0e:52:19:6f:c2:1c:d9:ed: 75:59:fc:e9:63:e4:ef:ee:e8:07:6f:ee:fe:c9:5c: f9:1b:54:5c:43:90:31:a2:ab:19:03:2c:59:9e:25: c0:c2:53:ce:53:06:72:d8:8f:d9:4a:17:6d:f1:aa: d0:46:e9:a0:d4:6b:c7:af:95:e6:39:aa:de:0f:cd: 44:ea:82:82:65:e7:45:14:60:4d:ff:02:ce:c7:75: 74:52:60:0c:58:40:52:43:e8:c0:7b:0c:dd:31:a4: b1:62:7f:0d:e3:89:73:50:0f:80:4c:14:8d:41:8b: 67:55:3d:5e:6b:bf:31:b2:68:62:0f:e1:87:b2:7c: c2:6c:75:08:c9:b5:8b:97:a1:5b:48:20:1c:5d:0c: c4:5f:51:2c:ef:f4:e9:21:33:d7:a9:5f:c7:fb:04: 93:d0:1b:eb:ce:aa:b8:fe:74:ba:d3:e6:51:29:ad: 33:fd:17:18:04:89:09:24:60:4e:7a:4a:24:5f:a3: cb:1e:98:cc:15:9e:be:a9:53:53:80:50:a2:5f:11: e1:38:ed:43:f4:ba:51:87:0c:27:3c:68:57:9b:36: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.180.0/22 IPv6: 2a03:9160::/32 Signature Algorithm: sha256WithRSAEncryption 10:3f:74:00:b7:ff:e9:76:5d:b3:d9:48:f4:a3:1e:a8:2b:72: ed:d3:ff:1d:df:46:50:b1:dc:03:8d:c0:63:18:24:2e:cb:26: 11:7e:37:ee:65:a0:92:15:a8:f6:a7:e4:cb:db:6c:8b:9f:5c: 9e:35:3c:04:a5:70:bc:9f:ca:45:66:7e:2a:44:52:f9:f0:88: b7:3b:b8:1b:d8:83:86:32:1e:87:2e:bf:80:60:1e:ee:16:c9: dc:85:4e:76:35:90:66:88:bf:6f:dd:9d:30:d2:78:4e:4c:a2: 04:c2:97:19:c7:42:12:11:c1:c5:26:65:24:57:9d:8a:04:54: 1f:65:dd:58:ae:3c:05:25:a6:60:49:7c:2b:b0:77:f6:60:ae: 9e:2b:af:52:5a:6a:4b:9f:f8:de:76:fc:8e:b0:72:c9:5f:70: 87:e7:3d:ad:65:2f:fc:18:26:5c:25:80:30:e1:1a:62:af:80: 12:17:2e:8b:0d:d4:59:86:8f:41:4a:31:46:02:1b:ea:3b:e0: d9:20:4c:89:61:b0:45:87:1b:7f:0f:b9:f2:e2:43:ed:d9:90: 88:4e:14:35:67:2a:39:1d:82:bb:c2:f4:18:17:0a:e6:ea:0d: e3:71:0b:bf:a4:64:12:62:1a:ce:a0:e6:89:d3:83:a7:01:57: cd:d5:54:be -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FeNYLMP/0FObYbVQ6bqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDljNjNjNmQ3NTZiYjJhY2QzZjFhZDkyYWM0MTVkYTg1N2U2Yzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cCIvC8rvY30m7y5grCpfzN+E3d6 yoUomCcgrvUs0bLVF784DlIZb8Ic2e11WfzpY+Tv7ugHb+7+yVz5G1RcQ5AxoqsZ AyxZniXAwlPOUwZy2I/ZShdt8arQRumg1GvHr5XmOareD81E6oKCZedFFGBN/wLO x3V0UmAMWEBSQ+jAewzdMaSxYn8N44lzUA+ATBSNQYtnVT1ea78xsmhiD+GHsnzC bHUIybWLl6FbSCAcXQzEX1Es7/TpITPXqV/H+wST0Bvrzqq4/nS60+ZRKa0z/RcY BIkJJGBOekokX6PLHpjMFZ6+qVNTgFCiXxHhOO1D9LpRhwwnPGhXmzZCJQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFCcY8bXVrsqzT8a2SrEFdqFfmyYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzg0NTQ4 ZC0zZjNiLTQ2YjktODM2Yy0zOGEzOTI0Nzc2ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvODQ1NDhk LTNmM2ItNDZiOS04MzZjLTM4YTM5MjQ3NzZlOS8xL1VKeGp4dGRXdXlyTlB4clpL c1FWMm9WLWJKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXq0MA0EAgACMAcDBQAqA5FgMA0GCSqGSIb3 DQEBCwUAA4IBAQAQP3QAt//pdl2z2Uj0ox6oK3Lt0/8d30ZQsdwDjcBjGCQuyyYR fjfuZaCSFaj2p+TL22yLn1yeNTwEpXC8n8pFZn4qRFL58Ii3O7gb2IOGMh6HLr+A YB7uFsnchU52NZBmiL9v3Z0w0nhOTKIEwpcZx0ISEcHFJmUkV52KBFQfZd1YrjwF JaZgSXwrsHf2YK6eK69SWmpLn/jedvyOsHLJX3CH5z2tZS/8GCZcJYAw4Rpir4AS Fy6LDdRZho9BSjFGAhvqO+DZIEyJYbBFhxt/D7ny4kPt2ZCIThQ1Zyo5HYK7wvQY Fwrm6g3jcQu/pGQSYhrOoOaJ04OnAVfN1VS+ -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:48 2026 by rpki-client