This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer File: UOaW5uJbSSu34HyzKbtDVLERpoE.cer (raw, json) Hash identifier: 9XHjAL5lF9kPTZKb5JiRYJfOlQXl70ExJ66JpOdhkMg= Subject key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF794E3A437DAF67D7FD9838A8EE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213250 IP: 45.155.172.0/22 IP: 91.192.10.0/24 IP: 2a0f:580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f7:94:e3:a4:37:da:f6:7d:7f:d9:83:8a:8e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50e696e6e25b492bb7e07cb329bb4354b111a681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:bc:b3:5e:9a:ae:39:e9:a3:a0:7f:22:c9: e8:c2:cd:c5:01:65:78:36:02:fb:fc:39:c8:71:2c: 2a:d3:26:e1:dc:63:b2:bb:05:d5:8b:b2:f1:70:2b: 80:4a:cd:95:c1:8f:03:77:b9:8e:18:c2:30:fd:75: 06:25:b9:16:79:87:d2:7c:ab:34:4d:a8:a3:b4:6c: a7:f3:d1:67:fe:7b:ac:88:b0:d1:48:d5:43:8d:ab: 40:f0:ef:09:0d:31:4d:b6:80:7f:51:37:71:51:3d: 1b:50:17:cc:14:f4:a5:64:6a:a1:70:d9:80:de:46: ef:f3:49:5b:e8:d3:c0:2a:11:f7:0e:8e:c4:38:fd: 68:c3:53:a2:77:40:b8:dc:93:33:1f:28:a1:1a:ea: 99:00:73:9b:f0:4a:cd:3f:40:69:a8:0c:09:92:d3: 91:ca:66:1a:a4:46:93:ef:23:67:29:2e:1e:b6:98: b1:9f:49:09:7f:81:98:07:39:84:06:bb:5f:24:ad: be:40:b4:29:17:4a:9c:f5:c5:dc:51:ce:e0:85:60: 5b:ed:47:f9:cd:fb:47:05:48:54:72:c9:33:b7:5e: 80:d8:2c:7e:fe:77:ce:01:96:22:a1:c5:53:fb:45: a7:03:39:87:6d:4c:6d:5e:3e:16:49:1b:06:83:1b: 78:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.172.0/22 91.192.10.0/24 IPv6: 2a0f:580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213250 Signature Algorithm: sha256WithRSAEncryption 74:23:b4:d1:15:67:11:dc:59:fd:f7:08:71:19:ad:88:48:f0: a0:9f:00:33:7d:35:aa:b3:92:a5:33:c6:5c:04:e4:cb:2a:24: b3:51:8f:a9:4d:9b:e1:9b:73:5b:aa:26:85:46:ad:ff:8a:68: 8f:51:1e:15:43:99:9c:3f:81:e3:ff:3d:6c:97:ba:30:ff:3e: 72:3a:4c:57:07:4d:c1:85:cc:5d:52:d1:f2:04:92:b7:f1:8b: ff:1e:ca:c7:1b:ca:fa:77:10:d7:72:ed:5b:66:17:fb:cb:8c: 2d:05:e0:45:01:c9:aa:d6:84:8b:3f:dd:41:9b:96:d7:68:26: 09:a7:0a:de:7d:af:64:01:94:da:61:27:2c:93:a0:1b:31:63: a0:e2:06:94:3b:0d:d5:8f:a9:95:ed:2f:31:ee:6a:49:36:97: 66:ac:c3:f0:da:ec:11:d6:43:e5:8d:10:4e:30:d2:b8:d1:34: e5:5e:51:6b:24:27:f4:be:ce:f1:79:19:a9:c6:18:6d:ef:05: 4e:df:8b:c1:67:94:49:db:62:3c:f6:e9:c1:b5:45:11:f2:5b: 23:db:79:a6:6b:0d:68:0f:8a:07:fa:7d:e9:3f:0f:c3:16:86: 91:ec:6e:01:f7:55:06:70:85:47:8b:fe:d0:03:9b:80:97:b1: d0:73:cc:76 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt26veU46Q32vZ9f9mDio7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGU2OTZlNmUyNWI0OTJiYjdlMDdjYjMyOWJiNDM1NGIxMTFhNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd+8s16arjnpo6B/Isnows3FAWV4 NgL7/DnIcSwq0ybh3GOyuwXVi7LxcCuASs2VwY8Dd7mOGMIw/XUGJbkWeYfSfKs0 TaijtGyn89Fn/nusiLDRSNVDjatA8O8JDTFNtoB/UTdxUT0bUBfMFPSlZGqhcNmA 3kbv80lb6NPAKhH3Do7EOP1ow1Oid0C43JMzHyihGuqZAHOb8ErNP0BpqAwJktOR ymYapEaT7yNnKS4etpixn0kJf4GYBzmEBrtfJK2+QLQpF0qc9cXcUc7ghWBb7Uf5 zftHBUhUcskzt16A2Cx+/nfOAZYiocVT+0WnAzmHbUxtXj4WSRsGgxt4SwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFDmlubiW0krt+B8sym7Q1SxEaaBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwL2RhZGYz Yi1jODY3LTQxNjMtODc2OC02MTQxZDk5NjM0YjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvZGFkZjNi LWM4NjctNDE2My04NzY4LTYxNDFkOTk2MzRiNS8xL1VPYVc1dUpiU1N1MzRIeXpL YnREVkxFUnBvRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLZusAwQAW8AKMA0EAgACMAcDBQMqDwWAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNBAjANBgkqhkiG9w0BAQsFAAOCAQEAdCO0 0RVnEdxZ/fcIcRmtiEjwoJ8AM301qrOSpTPGXATkyyoks1GPqU2b4ZtzW6omhUat /4poj1EeFUOZnD+B4/89bJe6MP8+cjpMVwdNwYXMXVLR8gSSt/GL/x7KxxvK+ncQ 13LtW2YX+8uMLQXgRQHJqtaEiz/dQZuW12gmCacK3n2vZAGU2mEnLJOgGzFjoOIG lDsN1Y+ple0vMe5qSTaXZqzD8NrsEdZD5Y0QTjDSuNE05V5RayQn9L7O8XkZqcYY be8FTt+LwWeUSdtiPPbpwbVFEfJbI9t5pmsNaA+KB/p96T8PwxaGkexuAfdVBnCF R4v+0AObgJex0HPMdg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:44 2026 by rpki-client