This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer (raw, json) Hash identifier: LOTuyv1xSGKz6Rar6ydybgU7PCUdez03NpYAtqBzALY= Subject key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35EF28FAB7661AB75C32F505749DCE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 80.86.208.0/20 IP: 81.29.32.0/20 IP: 2a03:9a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ef:28:fa:b7:66:1a:b7:5c:32:f5:05:74:9d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52226f671c2643a5c04846264fee01f943ac2bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:6b:19:60:e5:33:5d:c9:7a:52:c8:9f:86: 4e:7d:1b:2c:47:e8:e3:a1:84:b4:e7:91:9e:b8:1f: 36:fd:05:36:6a:70:8f:c7:e5:90:ff:37:7b:6c:fe: 85:f2:03:bb:65:aa:be:9f:e7:62:88:92:7f:a5:ca: cd:3f:55:98:98:45:c2:84:7e:48:d8:15:68:05:b8: 55:c2:4e:0a:d5:51:63:44:18:05:91:8a:d0:8e:d5: 0b:22:cf:52:a8:6e:8a:ea:53:f7:75:7e:64:11:36: 43:35:6b:d0:63:81:7d:78:da:e3:12:62:3c:f7:a2: ef:e5:65:3f:60:b1:d4:62:dc:d7:43:5d:44:84:e5: 90:db:dc:d5:bd:7e:20:5c:b1:b7:54:59:b6:64:03: 59:0a:4d:1a:1f:b1:03:af:89:9a:9a:d2:67:fd:c7: 76:65:1e:a5:c6:79:38:4b:15:e3:ed:83:f9:f1:03: da:63:90:15:ab:0c:15:69:2e:02:58:7a:72:e6:f8: 07:3e:b9:72:45:63:b0:74:cf:66:9e:a6:32:31:7c: 52:5b:4a:7c:ee:2f:b5:c4:72:07:c5:85:9d:4c:da: 5f:6c:f8:31:63:3b:8f:59:70:48:ab:e4:6c:c1:0f: 6b:7b:48:4c:fb:17:f7:32:6d:7e:1c:99:f0:f5:f8: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.208.0/20 81.29.32.0/20 IPv6: 2a03:9a00::/29 Signature Algorithm: sha256WithRSAEncryption 28:f5:2e:2d:e0:22:37:27:48:0c:69:59:bd:87:79:0b:53:47: 52:bf:6e:f2:82:f5:32:43:9e:4b:11:79:d5:73:c3:a5:20:18: 05:07:56:a6:93:f7:85:21:04:bd:fb:39:00:2d:0a:08:7a:1b: a7:bc:4e:af:ed:5f:75:47:ac:62:7c:08:de:e1:cf:03:e3:27: ca:a0:19:26:6d:f5:7f:a4:7b:0e:48:cb:49:52:46:1d:91:41: b5:6a:c3:05:b6:6a:53:a5:b2:1d:e9:95:17:92:34:08:8f:fa: 1f:18:fb:b0:b7:3c:d1:d2:09:1c:96:a2:22:b4:7d:db:db:f1: 59:85:45:85:b6:b0:3e:d8:79:4c:b9:bb:92:0c:79:f8:7b:c9: ff:85:d3:0d:62:0c:39:56:80:19:e3:67:54:c3:66:6d:c0:fb: 8a:88:09:f2:a2:1f:c3:f1:52:3b:f8:af:f0:8d:22:9e:13:08: 9b:19:ab:33:ef:d3:59:42:1e:e8:21:c7:84:0e:64:47:6a:3f: b9:84:4e:79:59:12:d0:e8:42:b8:a7:ca:4e:95:36:15:1f:c9: 8f:f9:fd:90:bc:69:14:f1:4d:b2:97:e8:2a:7a:36:fd:1d:44: f6:c4:a9:6d:28:8d:0d:b6:1d:0a:d8:7c:4d:1d:02:3d:b8:a5: 1a:e1:2e:20 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt7Ne8o+rdmGrdcMvUFdJ3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjIyNmY2NzFjMjY0M2E1YzA0ODQ2MjY0ZmVlMDFmOTQzYWMyYmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmVrGWDlM13JelLIn4ZOfRssR+jj oYS055GeuB82/QU2anCPx+WQ/zd7bP6F8gO7Zaq+n+diiJJ/pcrNP1WYmEXChH5I 2BVoBbhVwk4K1VFjRBgFkYrQjtULIs9SqG6K6lP3dX5kETZDNWvQY4F9eNrjEmI8 96Lv5WU/YLHUYtzXQ11EhOWQ29zVvX4gXLG3VFm2ZANZCk0aH7EDr4mamtJn/cd2 ZR6lxnk4SxXj7YP58QPaY5AVqwwVaS4CWHpy5vgHPrlyRWOwdM9mnqYyMXxSW0p8 7i+1xHIHxYWdTNpfbPgxYzuPWXBIq+RswQ9re0hM+xf3Mm1+HJnw9fgC/wIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFFIib2ccJkOlwEhGJk/uAflDrCv8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzJiNGQw Zi0yMTlmLTRjMDAtODY0OC1hMTJkZTNhMzM1NTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvMmI0ZDBm LTIxOWYtNGMwMC04NjQ4LWExMmRlM2EzMzU1My8xL1VpSnZaeHdtUTZYQVNFWW1U LTRCLVVPc0tfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUFbQAwQEUR0gMA0EAgACMAcDBQMqA5oAMA0G CSqGSIb3DQEBCwUAA4IBAQAo9S4t4CI3J0gMaVm9h3kLU0dSv27ygvUyQ55LEXnV c8OlIBgFB1amk/eFIQS9+zkALQoIehunvE6v7V91R6xifAje4c8D4yfKoBkmbfV/ pHsOSMtJUkYdkUG1asMFtmpTpbId6ZUXkjQIj/ofGPuwtzzR0gkclqIitH3b2/FZ hUWFtrA+2HlMubuSDHn4e8n/hdMNYgw5VoAZ42dUw2ZtwPuKiAnyoh/D8VI7+K/w jSKeEwibGasz79NZQh7oIceEDmRHaj+5hE55WRLQ6EK4p8pOlTYVH8mP+f2QvGkU 8U2yl+gqejb9HUT2xKltKI0Nth0K2HxNHQI9uKUa4S4g -----END CERTIFICATE-----Generated at Mon Jan 26 05:11:16 2026 by rpki-client