This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer File: UZ5x0bhgWjO53WVLo43fq8HO9es.cer (raw, json) Hash identifier: /CNfd+/YGlWAktEnrg5LPHOTgxB693OL4KJgVfApfeE= Subject key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E45DBF936607EA4331D5FB26CE1DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.36.82.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:45:db:f9:36:60:7e:a4:33:1d:5f:b2:6c:e1:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:24:e2:33:69:9d:1b:4f:ec:a8:8f:4a:42: 99:4e:f0:f3:6c:f8:64:3d:d1:84:5d:e4:85:de:28: e0:d0:f8:da:87:e5:9f:16:c0:75:25:e7:42:0c:81: c8:cd:b3:27:54:6e:11:b9:68:d3:f6:47:d2:26:fc: 5f:d5:ae:06:f9:f2:5d:b0:8f:00:cc:a5:9a:8a:b5: 82:07:27:85:75:09:54:47:df:82:e7:7e:6f:f3:32: 9e:df:db:e1:6c:ef:ba:b8:f1:be:9c:8d:72:9d:6d: 8f:c7:66:83:0f:9b:a0:0a:33:12:c5:c5:51:27:83: ac:42:b4:7c:bc:58:80:d8:20:b5:e4:8b:7c:9c:45: b3:20:64:b4:2f:8a:5b:7e:6d:24:c6:6f:86:0e:9c: 2e:70:59:db:e0:ef:15:3c:71:45:17:3f:00:e1:38: 3b:a8:0b:c2:9f:cb:c0:5e:c2:16:07:3f:54:be:e2: e2:b9:64:1e:42:4d:56:f9:d8:fc:12:9a:73:85:ef: 4b:1b:ad:ca:e6:43:8b:dd:72:dd:42:b3:92:4e:01: df:72:68:50:39:3a:c1:7e:81:83:7e:ef:dc:5b:3e: 29:b9:ac:9a:d8:e5:32:e3:f0:1b:81:a2:7b:0c:f7: 4c:9f:3d:99:66:36:cb:96:4c:e9:cb:f3:6a:79:7c: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.82.0/24 Signature Algorithm: sha256WithRSAEncryption 59:b9:af:d5:e9:a8:b4:8c:f5:8b:f8:b7:df:1e:38:98:4c:f9: 33:11:9f:5d:5c:80:b9:65:f0:86:5d:a2:84:a0:d2:fd:01:01: 16:2d:91:3f:f0:c9:78:64:14:0b:b0:a4:e6:30:08:87:93:bf: ed:f5:cd:38:d1:24:21:c1:41:93:3e:f0:29:12:34:bd:2b:c9: 5f:f4:12:36:7c:e0:3e:55:7d:4d:2d:a5:d2:46:c9:be:96:a1: e2:50:a3:f7:3c:61:3e:e4:a6:0c:86:24:9a:3c:79:5f:a3:1d: 46:2e:9c:16:6d:02:b3:10:39:7c:cd:74:05:c3:6e:43:73:6b: 11:19:f4:5e:fc:e5:88:05:67:43:39:9a:37:a0:ba:9a:8c:ba: c0:2a:51:7f:2a:13:88:d9:e9:59:64:60:55:21:54:75:95:a6: 57:2f:87:f9:40:50:1a:8a:fe:21:57:5a:93:74:6a:42:c5:e9: 06:7f:33:20:87:93:16:5f:fe:b6:c5:0e:9e:c2:65:5c:89:c3: a0:fb:72:2d:6e:c3:bc:0c:6d:1b:c8:f9:fe:1f:02:79:cb:f0: fb:5c:8b:a8:7c:c0:8c:2c:7a:71:58:f3:ad:23:6e:09:6a:df: 4f:ba:7c:c4:65:ad:e8:1f:56:c8:1b:9b:0f:e8:6c:ee:fa:e8: ca:d8:9d:8b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fkXb+TZgfqQzHV+ybOHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTllNzFkMWI4NjA1YTMzYjlkZDY1NGJhMzhkZGZhYmMxY2VmNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYgk4jNpnRtP7KiPSkKZTvDzbPhk PdGEXeSF3ijg0Pjah+WfFsB1JedCDIHIzbMnVG4RuWjT9kfSJvxf1a4G+fJdsI8A zKWairWCByeFdQlUR9+C535v8zKe39vhbO+6uPG+nI1ynW2Px2aDD5ugCjMSxcVR J4OsQrR8vFiA2CC15It8nEWzIGS0L4pbfm0kxm+GDpwucFnb4O8VPHFFFz8A4Tg7 qAvCn8vAXsIWBz9UvuLiuWQeQk1W+dj8Eppzhe9LG63K5kOL3XLdQrOSTgHfcmhQ OTrBfoGDfu/cWz4puaya2OUy4/AbgaJ7DPdMnz2ZZjbLlkzpy/NqeXyZCQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFGecdG4YFozud1lS6ON36vBzvXrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1L2YzNWZi NS0wZjY3LTQ0ZTQtOWE1NC1mZDZmMjM1ZGFmMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvZjM1ZmI1 LTBmNjctNDRlNC05YTU0LWZkNmYyMzVkYWYwYi8xL1VaNXgwYmhnV2pPNTNXVkxv NDNmcThITzllcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwiRSMA0GCSqGSIb3DQEBCwUAA4IBAQBZua/V 6ai0jPWL+LffHjiYTPkzEZ9dXIC5ZfCGXaKEoNL9AQEWLZE/8Ml4ZBQLsKTmMAiH k7/t9c040SQhwUGTPvApEjS9K8lf9BI2fOA+VX1NLaXSRsm+lqHiUKP3PGE+5KYM hiSaPHlfox1GLpwWbQKzEDl8zXQFw25Dc2sRGfRe/OWIBWdDOZo3oLqajLrAKlF/ KhOI2elZZGBVIVR1laZXL4f5QFAaiv4hV1qTdGpCxekGfzMgh5MWX/62xQ6ewmVc icOg+3ItbsO8DG0byPn+HwJ5y/D7XIuofMCMLHpxWPOtI24Jat9PunzEZa3oH1bI G5sP6Gzu+ujK2J2L -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:44 2026 by rpki-client