This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer File: UYnbLl9XTdoOPBfjldXwW2YlTsU.cer (raw, json) Hash identifier: HhxcNfCBVnDhTi6VUGWGxWpoN7Y5rST7nVTqf81bl2o= Subject key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79101A064DD5D27F12AC52ECE5A56235 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.47.231.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1a:06:4d:d5:d2:7f:12:ac:52:ec:e5:a5:62:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:bd:0f:52:ea:a2:ad:b9:98:8b:f1:29:c7: 20:1d:f7:02:bf:9f:4e:10:65:74:5e:cc:6f:8f:5b: af:a7:24:0a:a7:8f:66:f5:27:17:9a:f3:78:64:f7: 93:01:21:6d:f6:76:e1:71:0f:47:28:46:7d:01:7e: 36:1f:d9:64:2c:0c:f8:cf:af:07:68:5f:c4:53:2a: f7:29:be:e0:1e:f3:c2:71:8b:d5:5e:bc:07:52:69: 6a:60:89:f0:5b:56:6c:5c:68:26:30:27:b3:3c:44: 82:5d:24:b2:0a:09:1b:54:05:30:5a:d7:3d:c5:0f: 25:6d:b7:ef:11:74:86:78:85:97:e4:9a:68:19:c9: e8:d3:b1:69:30:ec:e3:c3:43:dd:2e:3d:9f:1b:f5: b4:d4:7b:bc:d3:5f:c7:1e:1b:28:01:41:c7:9e:a6: cd:9e:64:06:49:7c:85:87:24:a1:97:bf:55:fc:9d: f2:2f:19:5b:0b:9d:c7:70:43:36:9b:3d:80:83:51: 4b:6c:54:36:bb:1d:3e:f0:76:76:51:d7:09:b3:c8: 0e:7b:0f:2d:e5:b6:4f:7f:c9:20:29:a6:61:2e:6f: e2:b3:82:83:79:81:70:f8:25:31:76:0c:23:0d:cc: 61:1e:ac:40:7d:04:64:20:89:ec:b4:58:67:1a:5f: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.47.231.0/24 Signature Algorithm: sha256WithRSAEncryption 89:12:fb:72:bc:8f:c5:dc:bb:55:dd:c8:b7:c8:7b:8f:3e:26: d3:a6:65:80:9d:10:f2:9c:9c:74:7d:9c:8a:75:e8:ec:27:5a: 6f:61:9d:7d:78:3b:c8:90:98:3d:99:41:8c:35:18:57:bd:71: 29:23:6d:35:3c:03:fa:53:f0:73:74:6d:3f:d6:b1:50:f0:1e: 49:12:90:6a:3c:47:ee:bd:3f:49:1e:10:f4:fb:95:77:33:8f: d7:fe:17:95:f5:2c:e9:bf:c4:8d:d8:8a:05:1c:ed:12:a3:f1: ed:7f:f6:db:79:a8:81:39:ea:f7:b6:4c:b6:ef:39:78:66:9b: 58:26:7f:94:55:d6:3f:bd:e2:1e:bf:12:1c:42:32:32:9e:91: 88:f7:07:e4:a6:50:b6:1f:49:b1:6d:1b:b4:db:7d:f2:a2:dd: a8:6c:ac:07:e3:4b:ab:5f:c7:2f:4a:5b:2e:b0:fa:27:4f:88: 6c:8a:3d:87:7d:ec:5a:1e:c9:3e:f9:bf:0a:ef:a1:2b:4b:43: 30:90:ab:25:39:03:7b:83:e6:00:1a:f3:3f:ae:cd:00:f1:f9: 5c:b9:6a:3d:0d:af:44:4d:bd:bc:b1:fe:f8:76:72:c2:5a:5a: a9:1a:c6:ad:41:8a:1e:bf:74:f9:a4:2f:5f:7e:79:83:a8:71: 7a:7c:b0:5f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5EBoGTdXSfxKsUuzlpWI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTg5ZGIyZTVmNTc0ZGRhMGUzYzE3ZTM5NWQ1ZjA1YjY2MjU0ZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIG9D1Lqoq25mIvxKccgHfcCv59O EGV0Xsxvj1uvpyQKp49m9ScXmvN4ZPeTASFt9nbhcQ9HKEZ9AX42H9lkLAz4z68H aF/EUyr3Kb7gHvPCcYvVXrwHUmlqYInwW1ZsXGgmMCezPESCXSSyCgkbVAUwWtc9 xQ8lbbfvEXSGeIWX5JpoGcno07FpMOzjw0PdLj2fG/W01Hu801/HHhsoAUHHnqbN nmQGSXyFhyShl79V/J3yLxlbC53HcEM2mz2Ag1FLbFQ2ux0+8HZ2UdcJs8gOew8t 5bZPf8kgKaZhLm/is4KDeYFw+CUxdgwjDcxhHqxAfQRkIInstFhnGl9DCwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFGJ2y5fV03aDjwX45XV8FtmJU7FMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzM4MGMz Yy1mMzA4LTRkZmUtYTNhMy1lMjFjNmQwZjhmMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvMzgwYzNj LWYzMDgtNGRmZS1hM2EzLWUyMWM2ZDBmOGYwNC8xL1VZbmJMbDlYVGRvT1BCZmps ZFh3VzJZbFRzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwy/nMA0GCSqGSIb3DQEBCwUAA4IBAQCJEvty vI/F3LtV3ci3yHuPPibTpmWAnRDynJx0fZyKdejsJ1pvYZ19eDvIkJg9mUGMNRhX vXEpI201PAP6U/BzdG0/1rFQ8B5JEpBqPEfuvT9JHhD0+5V3M4/X/heV9Szpv8SN 2IoFHO0So/Htf/bbeaiBOer3tky27zl4ZptYJn+UVdY/veIevxIcQjIynpGI9wfk plC2H0mxbRu0233yot2obKwH40urX8cvSlsusPonT4hsij2HfexaHsk++b8K76Er S0MwkKslOQN7g+YAGvM/rs0A8flcuWo9Da9ETb28sf74dnLCWlqpGsatQYoev3T5 pC9ffnmDqHF6fLBf -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:53 2026 by rpki-client