This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer File: Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer (raw, json) Hash identifier: mNCa20pRKSbV9rOXW7swqErScHudGKeh9HEc0sBDl7Q= Subject key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F0E9426DBF2DDAA3D96220AD2D3A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57305 IP: 88.135.188.0/22 IP: 91.201.152.0/22 IP: 91.227.212.0/22 IP: 109.197.33.0 -- 109.197.34.255 IP: 109.197.38.0/24 IP: 195.149.100.0/24 IP: 195.200.206.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0e:94:26:db:f2:dd:aa:3d:96:22:0a:d2:d3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1d:47:c1:bb:6e:1d:c7:7c:d2:12:95:48:6e: 05:64:68:a1:6c:7e:76:2a:95:73:0d:77:84:d0:65: ad:44:8b:6a:3b:03:58:cc:10:a4:8e:a3:b5:98:c0: b2:18:7b:1a:c4:cc:b2:cd:d4:96:7a:61:65:a9:ba: b7:0f:3f:6c:bd:f0:b9:f3:04:c3:d1:96:2b:17:5f: 7f:22:d9:b5:cf:96:db:96:40:4f:eb:b9:12:74:55: 89:8e:50:af:5b:68:4b:9f:1b:ea:d1:d9:ba:36:9d: 1f:9e:c5:bd:f1:e9:a5:ad:b2:2c:4f:15:0b:c7:b4: 51:2a:80:b3:13:41:a5:b2:74:89:9c:9e:f4:02:d7: 56:c7:c2:bf:dc:eb:5e:e3:f0:f9:94:38:56:8b:6b: 38:1a:a9:5c:74:96:41:44:9d:b0:07:eb:da:5c:88: 78:98:1a:b1:5a:95:19:36:c4:c8:04:b5:7a:fa:1e: 46:aa:fd:50:23:e4:8c:e6:15:df:dc:da:3c:aa:42: 6f:66:50:69:da:67:3a:ee:5f:31:51:39:2a:30:eb: e3:5f:52:ff:94:47:9d:c5:71:bf:b8:95:85:33:81: 82:45:df:2d:2b:b6:14:3b:88:ee:b8:1b:b4:09:ff: 09:ec:db:da:4c:24:1a:63:58:e8:a3:da:58:22:e6: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.188.0/22 91.201.152.0/22 91.227.212.0/22 109.197.33.0-109.197.34.255 109.197.38.0/24 195.149.100.0/24 195.200.206.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57305 Signature Algorithm: sha256WithRSAEncryption 79:e4:eb:11:34:77:b8:cf:e0:5f:11:d8:47:24:62:ca:2d:15: f3:3b:03:87:12:54:9a:95:d3:b5:d4:31:98:73:ef:1d:e9:be: dc:fb:44:12:89:dd:04:e5:b9:ac:5e:9b:85:7a:c2:bf:4f:ec: c9:e6:0c:b5:4a:c9:42:34:4d:20:ae:c5:ab:92:ef:3c:ae:cf: f6:51:d2:2e:a3:5a:69:4d:45:3b:20:c6:cb:13:d1:bf:53:88: ef:1f:8e:1b:b0:d0:60:7c:44:c5:f4:79:25:10:c7:83:55:64: d6:0b:d1:72:38:23:ba:0b:3f:02:b5:af:f7:76:ad:c6:46:a3: 5d:ad:40:a3:be:a4:a2:47:8e:cb:73:70:4d:76:c5:10:c8:25: b4:22:f5:67:1e:f6:c1:82:a1:b8:c4:34:dd:89:f4:f8:cd:ef: 05:30:14:a0:e9:7b:66:3b:cd:9a:7b:37:46:d0:d6:a1:70:f6: 40:de:2b:dd:d4:d2:f2:0f:47:25:67:62:70:d1:86:7b:eb:aa: 66:04:f2:39:1a:6b:2b:4e:dc:c8:b8:c7:55:03:2e:6e:73:66: b1:ed:ff:30:f8:1c:8a:c0:13:6a:d0:b2:bc:ac:4b:3f:15:ec: 25:3e:48:c0:cf:25:6e:62:e1:b0:59:9c:56:2b:08:68:51:97: 44:7e:b3:8f -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt5fw6UJtvy3ao9liIK0tOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWJmYjQ2MzUzYmZjY2NmZjk0MTJkY2JkZDQ4MGYxOWI0Yzk4Mzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh1HwbtuHcd80hKVSG4FZGihbH52 KpVzDXeE0GWtRItqOwNYzBCkjqO1mMCyGHsaxMyyzdSWemFlqbq3Dz9svfC58wTD 0ZYrF19/Itm1z5bblkBP67kSdFWJjlCvW2hLnxvq0dm6Np0fnsW98emlrbIsTxUL x7RRKoCzE0GlsnSJnJ70AtdWx8K/3Ote4/D5lDhWi2s4GqlcdJZBRJ2wB+vaXIh4 mBqxWpUZNsTIBLV6+h5Gqv1QI+SM5hXf3No8qkJvZlBp2mc67l8xUTkqMOvjX1L/ lEedxXG/uJWFM4GCRd8tK7YUO4juuBu0Cf8J7NvaTCQaY1joo9pYIubLCwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFFG/tGNTv8zP+UEty91IDxm0yYOXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2Q5MjU1 Ny04YzQ2LTQ4MmMtOTFhOC1jMWU5NzRiZWQxMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZDkyNTU3 LThjNDYtNDgyYy05MWE4LWMxZTk3NGJlZDEyZS8xL1ViLTBZMU9fek1fNVFTM0wz VWdQR2JUSmc1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUF BwEHAQH/BDwwOjA4BAIAATAyAwQCWIe8AwQCW8mYAwQCW+PUMAwDBABtxSEDBABt xSIDBABtxSYDBADDlWQDBADDyM4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAN/Z MA0GCSqGSIb3DQEBCwUAA4IBAQB55OsRNHe4z+BfEdhHJGLKLRXzOwOHElSaldO1 1DGYc+8d6b7c+0QSid0E5bmsXpuFesK/T+zJ5gy1SslCNE0grsWrku88rs/2UdIu o1ppTUU7IMbLE9G/U4jvH44bsNBgfETF9HklEMeDVWTWC9FyOCO6Cz8Cta/3dq3G RqNdrUCjvqSiR47Lc3BNdsUQyCW0IvVnHvbBgqG4xDTdifT4ze8FMBSg6XtmO82a ezdG0NahcPZA3ivd1NLyD0clZ2Jw0YZ766pmBPI5GmsrTtzIuMdVAy5uc2ax7f8w +ByKwBNq0LK8rEs/FewlPkjAzyVuYuGwWZxWKwhoUZdEfrOP -----END CERTIFICATE-----Generated at Mon Jan 26 02:47:14 2026 by rpki-client