This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer File: UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer (raw, json) Hash identifier: hngZUwm14YNAcosNT5Qu58+oHIsLhMqGttlfa14aUZY= Subject key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15E31FB6467166D05233850AAB10AD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20902 IP: 46.229.0.0/20 IP: 80.73.96.0/19 IP: 80.88.64.0/20 IP: 109.239.160.0/20 IP: 185.76.40.0/22 IP: 194.0.184.0/24 IP: 2001:67c:2088::/48 IP: 2a00:1230::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e3:1f:b6:46:71:66:d0:52:33:85:0a:ab:10:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:8a:7b:9c:17:66:55:03:50:bf:34:32:bc: 2b:72:65:e0:59:8c:8f:d1:f8:de:2c:cf:e1:ef:ed: ba:b0:d1:5e:e3:0a:57:e6:2b:f4:e4:9f:87:af:bc: fd:55:44:46:7b:c1:65:0a:3f:4f:1d:be:25:45:07: 01:91:3a:f9:43:44:15:9a:dd:cc:22:f4:3c:b6:43: ef:50:b5:c5:1a:2f:22:9a:2e:89:f7:81:f0:5b:99: 5c:ba:de:bc:ad:3b:aa:74:1c:dc:1c:8b:ea:2a:03: 09:a3:a7:ef:d8:4b:94:0a:9a:d9:3a:e5:43:6f:ff: 59:06:5f:85:c7:02:1b:75:53:1a:74:f0:99:69:1c: 45:63:a3:46:d1:c7:6a:7b:eb:a1:9b:93:62:13:33: 12:78:b8:5d:9a:3e:8f:0c:70:36:eb:45:a6:78:0b: 7f:31:79:c4:9d:df:56:7c:1c:91:c7:10:20:94:c2: 06:17:72:91:68:b2:6e:8b:45:91:06:40:91:cf:fd: 0a:b3:8d:33:f2:a5:da:df:a4:e9:95:05:e7:15:80: 0c:fb:f2:2b:e5:6f:91:29:52:97:98:c1:b8:a2:15: 98:a9:c1:ec:30:30:25:5c:a2:65:17:44:fc:84:08: 4d:b8:a8:7b:d1:31:78:b3:15:e8:54:07:ac:f1:1b: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.0.0/20 80.73.96.0/19 80.88.64.0/20 109.239.160.0/20 185.76.40.0/22 194.0.184.0/24 IPv6: 2001:67c:2088::/48 2a00:1230::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20902 Signature Algorithm: sha256WithRSAEncryption 74:87:67:63:d1:6f:b9:42:78:fa:3d:3d:72:30:d7:7e:38:b7: 30:6c:c1:00:6b:bd:e7:61:44:55:98:a7:e5:c8:9d:b5:ed:fd: ae:91:cf:14:c5:70:e5:68:56:f9:5e:97:ef:54:17:ba:ab:8e: 2c:bf:e5:67:21:c8:92:db:07:c2:a0:50:55:67:e4:63:7c:89: ae:a4:1f:c9:cd:57:d0:c7:b4:77:b7:89:e4:02:63:f5:01:e8: 41:3a:ee:7d:eb:cc:4d:0f:a9:df:63:bd:78:85:b3:03:32:47: 08:a5:ce:c2:b8:71:6d:1c:54:8b:3d:54:16:9f:94:8e:5b:3f: 2a:00:2b:82:e7:3f:40:aa:6e:a9:ae:5a:64:68:48:d1:c4:d2: e1:2a:b6:75:13:da:4f:5d:f6:f3:b2:af:cc:b8:a6:6a:0f:db: 08:9f:2b:72:e8:f4:5b:1d:eb:ee:5b:e4:97:65:f4:45:55:3c: fb:c9:fb:92:a9:4c:10:67:e6:4d:c2:0b:fc:6c:97:cf:a6:8c: 0b:78:ab:4d:c6:6a:74:65:c1:af:ba:74:63:3e:cd:80:ee:a8: c1:88:61:42:01:b0:19:15:ff:91:8d:2e:c1:27:10:95:40:7d: c1:64:dc:5f:6b:31:ef:66:33:35:4c:e6:da:98:f2:26:8c:82: 83:02:3f:71 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt/FeMftkZxZtBSM4UKqxCtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmE1YzkwY2E5MjgzMTNiYzcwZDI2ODNiYjBmNjRkNjMyYjI3M2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPCKe5wXZlUDUL80MrwrcmXgWYyP 0fjeLM/h7+26sNFe4wpX5iv05J+Hr7z9VURGe8FlCj9PHb4lRQcBkTr5Q0QVmt3M IvQ8tkPvULXFGi8imi6J94HwW5lcut68rTuqdBzcHIvqKgMJo6fv2EuUCprZOuVD b/9ZBl+FxwIbdVMadPCZaRxFY6NG0cdqe+uhm5NiEzMSeLhdmj6PDHA260WmeAt/ MXnEnd9WfByRxxAglMIGF3KRaLJui0WRBkCRz/0Ks40z8qXa36TplQXnFYAM+/Ir 5W+RKVKXmMG4ohWYqcHsMDAlXKJlF0T8hAhNuKh70TF4sxXoVAes8RvX3wIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFFKlyQypKDE7xw0mg7sPZNYysnOhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2M0Yjdh MC0xZTUwLTQwM2MtYjI0ZS0xM2VkNjMzZjkyMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvYzRiN2Ew LTFlNTAtNDAzYy1iMjRlLTEzZWQ2MzNmOTIyYS8xL1VxWEpES2tvTVR2SERTYUR1 dzlrMWpLeWM2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAqBAIAATAkAwQELuUAAwQFUElgAwQEUFhAAwQEbe+gAwQCuUwo AwQAwgC4MBYEAgACMBADBwAgAQZ8IIgDBQMqABIwMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAlGmMA0GCSqGSIb3DQEBCwUAA4IBAQB0h2dj0W+5Qnj6PT1yMNd+OLcw bMEAa73nYURVmKflyJ217f2ukc8UxXDlaFb5XpfvVBe6q44sv+VnIciS2wfCoFBV Z+RjfImupB/JzVfQx7R3t4nkAmP1AehBOu5968xND6nfY714hbMDMkcIpc7CuHFt HFSLPVQWn5SOWz8qACuC5z9Aqm6prlpkaEjRxNLhKrZ1E9pPXfbzsq/MuKZqD9sI nyty6PRbHevuW+SXZfRFVTz7yfuSqUwQZ+ZNwgv8bJfPpowLeKtNxmp0ZcGvunRj Ps2A7qjBiGFCAbAZFf+RjS7BJxCVQH3BZNxfazHvZjM1TObamPImjIKDAj9x -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:29 2026 by rpki-client