This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer File: UjLUTZ4IyHPbNcAhUcpErlS0uK8.cer (raw, json) Hash identifier: ceCtDu/VxJzNJT6TQX8TJuVXGeKhmdk04++B5TAUUrQ= Subject key identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A4941A1F7931AC93D19D99E8DFBCB5604 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 03 Nov 2025 10:27:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208989 IP: 45.12.8.0/22 IP: 2a10:7140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:49:41:a1:f7:93:1a:c9:3d:19:d9:9e:8d:fb:cb:56:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 3 10:27:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5232d44d9e08c873db35c02151ca44ae54b4b8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:cf:16:0b:45:c9:a7:ec:67:22:1d:1c:eb: 33:8f:1f:53:8f:bd:31:7d:c8:6b:92:53:99:92:28: 25:65:de:e7:f4:e1:a4:06:c8:95:83:db:c5:d3:9e: 58:e4:29:e6:d2:f6:83:3a:7e:b5:16:d4:aa:83:04: 0f:2c:e8:e7:0f:c0:a0:0f:3d:ca:b9:43:0d:ec:0b: 8c:ad:51:23:37:6e:c6:c0:ec:07:8d:31:1f:37:35: 7e:a0:ed:09:76:72:f4:22:4c:87:94:5d:07:cd:f4: 80:19:ac:e9:31:af:fe:e8:b5:0d:84:1b:c5:f6:85: be:e0:23:63:c2:41:d9:69:14:9c:7c:4c:d8:a8:8d: 15:2a:12:a2:db:05:d3:14:dd:67:8b:9c:cd:b7:99: fb:71:d8:fd:ac:69:24:78:79:bd:70:4f:ed:5f:54: f7:6b:9d:1e:d0:36:df:a7:51:02:aa:fc:7a:52:30: 06:69:ea:e2:3a:46:35:bb:4c:ce:9a:6a:b3:63:86: 78:08:ac:07:09:f2:e3:43:33:62:2b:d8:f4:f8:e8: 66:15:50:e6:39:37:3b:9a:a4:b1:78:17:ca:f1:32: ec:de:39:51:6c:ec:a2:9e:df:79:27:c9:12:3d:0a: ea:7a:37:f5:23:39:60:87:83:d2:77:6a:9d:5f:f4: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:32:D4:4D:9E:08:C8:73:DB:35:C0:21:51:CA:44:AE:54:B4:B8:AF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8b400d-1e8e-40da-b1d6-a6541ceb1e43/1/UjLUTZ4IyHPbNcAhUcpErlS0uK8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.8.0/22 IPv6: 2a10:7140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208989 Signature Algorithm: sha256WithRSAEncryption 6a:90:9c:5e:6f:35:10:2f:2c:74:a2:43:e2:ce:85:3f:ea:99: 05:c6:7d:12:93:c1:72:5c:c7:e4:70:75:4c:e3:08:63:4a:a0: 30:c1:4f:31:ef:61:8b:ce:c7:75:11:91:cf:82:dd:fd:b0:22: 1c:05:c8:ce:5d:4b:41:2c:23:cf:59:36:f8:6d:84:fe:2a:ce: 63:50:b6:5e:87:07:ed:63:7a:23:ba:62:0a:75:ff:b5:45:be: 2c:de:f1:ca:9a:9f:1d:57:06:55:f5:e0:70:0f:11:0d:54:f1: 28:47:8b:ca:45:98:71:62:c0:9d:ad:8c:55:1d:3e:b3:45:23: 04:5c:b8:68:4b:b8:94:b4:0c:6f:d7:c1:6a:bb:dd:37:2a:f7: a7:08:36:51:21:6f:6d:07:08:66:e8:f6:8c:d8:cf:4f:6b:a6: ff:7e:ea:21:62:4e:83:e4:1f:00:c6:37:0e:e1:e5:a0:cd:6f: 16:2e:60:7a:fd:79:69:cf:c8:08:1d:e2:38:85:a4:16:dc:db: 55:56:de:11:a0:f4:b5:2c:18:fb:72:65:e8:4b:fd:bd:41:df: d7:50:78:0b:2b:12:4a:ad:dd:ab:fa:77:34:60:48:d7:82:29: 51:2d:c4:95:7c:f8:80:af:6e:b2:ba:a4:17:4c:33:86:d2:fb: f8:2f:dc:b9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZpJQaH3kxrJPRnZno37y1YEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTAzMTAyNzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjMyZDQ0ZDllMDhjODczZGIzNWMwMjE1MWNhNDRhZTU0YjRiOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9PPFgtFyafsZyIdHOszjx9Tj70x fchrklOZkiglZd7n9OGkBsiVg9vF055Y5Cnm0vaDOn61FtSqgwQPLOjnD8CgDz3K uUMN7AuMrVEjN27GwOwHjTEfNzV+oO0JdnL0IkyHlF0HzfSAGazpMa/+6LUNhBvF 9oW+4CNjwkHZaRScfEzYqI0VKhKi2wXTFN1ni5zNt5n7cdj9rGkkeHm9cE/tX1T3 a50e0Dbfp1ECqvx6UjAGaeriOkY1u0zOmmqzY4Z4CKwHCfLjQzNiK9j0+OhmFVDm OTc7mqSxeBfK8TLs3jlRbOyint95J8kSPQrqejf1Izlgh4PSd2qdX/RmZwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFIy1E2eCMhz2zXAIVHKRK5UtLivMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzhiNDAw ZC0xZThlLTQwZGEtYjFkNi1hNjU0MWNlYjFlNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvOGI0MDBk LTFlOGUtNDBkYS1iMWQ2LWE2NTQxY2ViMWU0My8xL1VqTFVUWjRJeUhQYk5jQWhV Y3BFcmxTMHVLOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQwIMA0EAgACMAcDBQMqEHFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwXTANBgkqhkiG9w0BAQsFAAOCAQEAapCcXm81EC8s dKJD4s6FP+qZBcZ9EpPBclzH5HB1TOMIY0qgMMFPMe9hi87HdRGRz4Ld/bAiHAXI zl1LQSwjz1k2+G2E/irOY1C2XocH7WN6I7piCnX/tUW+LN7xypqfHVcGVfXgcA8R DVTxKEeLykWYcWLAna2MVR0+s0UjBFy4aEu4lLQMb9fBarvdNyr3pwg2USFvbQcI Zuj2jNjPT2um/37qIWJOg+QfAMY3DuHloM1vFi5gev15ac/ICB3iOIWkFtzbVVbe EaD0tSwY+3Jl6Ev9vUHf11B4CysSSq3dq/p3NGBI14IpUS3ElXz4gK9usrqkF0wz htL7+C/cuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:11 2025 by rpki-client