This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer File: UbSboN2GFRKGGNUBWcsPO16e5iY.cer (raw, json) Hash identifier: 1rQSfz5PLjteA5lLTS4gbkDFn8gv7ISHyHjQZBe5UF0= Subject key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3CDBE9DA6CE9AF1246C491D416DEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 81.188.0.0/16 IP: 212.100.160.0/19 IP: 213.193.128.0/18 IP: 2a00:80c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cd:be:9d:a6:ce:9a:f1:24:6c:49:1d:41:6d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:22:32:96:4c:06:e7:cf:3f:06:e0:41:e7: 71:d3:f0:74:58:49:52:44:54:45:8d:4d:3f:23:f0: 9f:8c:9b:6a:7e:b8:bd:e1:b4:a3:30:d3:10:69:a5: 5b:1b:29:11:95:40:cd:ae:fc:d5:67:9b:44:3a:63: 22:fc:cd:78:14:a7:4d:d7:c8:bf:2d:31:6c:45:62: c6:88:4a:e6:f1:6f:d6:a9:da:ed:ed:26:f5:51:56: 21:76:a1:15:f8:ca:e4:a1:6c:e5:45:1f:f4:69:4b: b6:e0:13:02:07:2f:6c:eb:66:87:d5:f0:73:86:4b: ad:d2:7f:1f:1f:e1:12:fd:73:3f:3b:36:ad:4c:8d: 92:d2:e5:5e:c6:83:bc:af:1c:b0:1c:73:35:65:b8: ab:a1:20:94:ae:a0:3f:c0:2d:e7:b4:f0:a3:23:ab: 47:b6:19:5e:12:4b:b5:a2:60:cb:5f:95:07:4a:88: df:22:d9:81:a1:39:a9:b1:de:b1:bf:79:93:2d:35: ec:9e:dd:26:e8:a5:d0:75:d6:4d:e2:b4:ad:e3:63: ac:68:eb:67:24:09:3a:97:17:ee:29:56:d4:77:c2: 7d:c3:18:6b:05:e4:a5:5c:aa:fa:c0:9c:4d:02:c3: bc:91:4a:cc:e7:24:a4:6c:bc:3a:32:c9:62:7b:0f: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.188.0.0/16 212.100.160.0/19 213.193.128.0/18 IPv6: 2a00:80c0::/32 Signature Algorithm: sha256WithRSAEncryption 71:f1:c2:12:16:bf:53:a5:12:96:eb:a2:15:da:80:4a:c1:64: 12:2d:3b:d6:97:91:4e:74:8d:db:6c:6e:d2:03:ea:62:e9:1a: 5a:83:7d:92:01:3d:33:1d:2f:50:00:05:4f:da:2d:3b:36:63: de:99:20:08:43:52:28:77:f1:a5:ae:6c:b0:cb:69:83:63:a6: be:8f:0d:ff:47:56:df:77:1d:a1:8a:40:af:a1:61:64:29:de: 10:df:6a:e5:84:21:e3:82:c0:0b:d1:6a:09:9f:4e:41:3d:09: 52:2f:97:74:32:a7:d6:be:21:51:71:17:27:21:7e:be:ee:14: 23:97:68:bd:c8:1f:c1:a8:33:1c:ba:84:33:91:f2:cc:25:4b: c2:7c:5c:87:df:a1:6e:29:50:b2:16:a2:bb:b2:00:11:11:20: 5f:62:53:3c:7e:17:fd:00:90:a7:95:4d:30:ff:82:f8:cd:5c: 1d:e1:62:35:f1:9f:d0:fa:78:ac:8b:09:9c:bf:1f:89:04:ff: b0:14:5b:84:32:f0:60:d0:0b:61:71:c0:2f:07:fc:04:d2:bd: 98:31:5c:6b:d9:d0:76:90:67:bb:5a:cc:6c:3a:8a:2e:e0:2f: 97:07:43:71:f0:db:b9:2e:82:3b:34:18:dc:62:fc:75:42:50: 34:33:3b:42 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt7o82+nabOmvEkbEkdQW3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWI0OWJhMGRkODYxNTEyODYxOGQ1MDE1OWNiMGYzYjVlOWVlNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4QiMpZMBufPPwbgQedx0/B0WElS RFRFjU0/I/CfjJtqfri94bSjMNMQaaVbGykRlUDNrvzVZ5tEOmMi/M14FKdN18i/ LTFsRWLGiErm8W/Wqdrt7Sb1UVYhdqEV+MrkoWzlRR/0aUu24BMCBy9s62aH1fBz hkut0n8fH+ES/XM/OzatTI2S0uVexoO8rxywHHM1ZbiroSCUrqA/wC3ntPCjI6tH thleEku1omDLX5UHSojfItmBoTmpsd6xv3mTLTXsnt0m6KXQddZN4rSt42OsaOtn JAk6lxfuKVbUd8J9wxhrBeSlXKr6wJxNAsO8kUrM5ySkbLw6Msliew9I8QIDAQAB o4ICnjCCApowHQYDVR0OBBYEFFG0m6DdhhUShhjVAVnLDztenuYmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzI2YzA0 OS00N2VlLTQ4ODYtOTg0NC00YWI5ZThhYTMyNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMjZjMDQ5 LTQ3ZWUtNDg4Ni05ODQ0LTRhYjllOGFhMzI2Mi8xL1ViU2JvTjJHRlJLR0dOVUJX Y3NQTzE2ZTVpWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAXBAIAATARAwMAUbwDBAXUZKADBAbVwYAwDQQCAAIwBwMFACoA gMAwDQYJKoZIhvcNAQELBQADggEBAHHxwhIWv1OlEpbrohXagErBZBItO9aXkU50 jdtsbtID6mLpGlqDfZIBPTMdL1AABU/aLTs2Y96ZIAhDUih38aWubLDLaYNjpr6P Df9HVt93HaGKQK+hYWQp3hDfauWEIeOCwAvRagmfTkE9CVIvl3Qyp9a+IVFxFych fr7uFCOXaL3IH8GoMxy6hDOR8swlS8J8XIffoW4pULIWoruyABERIF9iUzx+F/0A kKeVTTD/gvjNXB3hYjXxn9D6eKyLCZy/H4kE/7AUW4Qy8GDQC2FxwC8H/ATSvZgx XGvZ0HaQZ7tazGw6ii7gL5cHQ3Hw27kugjs0GNxi/HVCUDQzO0I= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:20 2026 by rpki-client