This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer File: UtycIYtRDAe8Zlmwn70yr-aKv9I.cer (raw, json) Hash identifier: +3IaXz9h+WZlS3nLUeIUD5/9QLMoZYEvcIF6aKYm+UI= Subject key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ACB5EB223B30E0526B407FD71046B9F92 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 16:49:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 6206 AS: 62349 IP: 31.171.128.0/21 IP: 37.46.192.0/21 IP: 45.154.4.0/22 IP: 91.199.50.0/24 IP: 91.230.225.0/24 IP: 94.185.80.0/21 IP: 94.228.208.0/20 IP: 109.235.48.0/21 IP: 185.68.196.0/22 IP: 185.153.188.0/22 IP: 185.196.92.0/22 IP: 194.110.67.0/24 IP: 195.191.144.0/23 IP: 2a00:dd0::/32 IP: 2a07:6580::/29 IP: 2a07:8840::/29 IP: 2a0a:6b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:5e:b2:23:b3:0e:05:26:b4:07:fd:71:04:6b:9f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 28 16:49:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:9a:18:40:d3:4a:17:c3:49:bc:f3:9c:2a: 59:31:d6:0b:29:b4:3a:87:19:a1:91:ed:fb:01:36: 22:09:88:1a:0a:b6:ce:e6:a2:6f:5a:65:2b:b4:d0: 93:8c:8d:4f:1b:06:cc:96:3e:f5:50:76:52:cc:1a: 67:6d:35:8d:32:dd:48:de:51:91:5b:c3:2c:ec:43: 8b:be:5f:74:77:53:8f:0d:80:a0:2e:ae:8f:61:7d: 8a:fd:ec:91:5e:3b:86:81:4b:a8:30:4b:14:47:f8: e6:6a:a5:04:74:7b:e9:6f:af:2e:13:af:00:d4:68: 38:3b:f7:e7:d4:1c:0f:3f:57:38:86:9a:8f:77:e2: e7:e0:50:71:eb:7b:04:08:dc:60:7b:de:ff:f9:40: cc:21:1a:a3:ff:21:d6:68:d7:50:06:98:0c:5d:2a: 64:ea:05:82:d4:49:64:ed:ce:e5:da:c1:44:52:a4: 53:cc:47:40:03:c4:f1:a1:3a:50:00:62:e4:23:84: 40:6e:18:05:87:af:24:f3:64:d1:c3:54:d5:b4:46: a4:49:ef:3d:4c:00:f9:f1:1c:af:af:17:e7:b2:d7: 79:31:19:77:87:80:2c:7d:18:80:53:c1:be:90:9f: b7:29:40:47:8a:13:50:13:75:63:97:46:ff:a4:49: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.128.0/21 37.46.192.0/21 45.154.4.0/22 91.199.50.0/24 91.230.225.0/24 94.185.80.0/21 94.228.208.0/20 109.235.48.0/21 185.68.196.0/22 185.153.188.0/22 185.196.92.0/22 194.110.67.0/24 195.191.144.0/23 IPv6: 2a00:dd0::/32 2a07:6580::/29 2a07:8840::/29 2a0a:6b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6206 62349 Signature Algorithm: sha256WithRSAEncryption 00:2a:45:6c:3f:aa:fd:2b:7b:8e:d3:ff:67:82:94:ab:75:24: 6f:22:71:27:63:09:c1:db:2f:4e:29:11:ff:d7:ef:29:61:65: 37:75:0e:4b:36:00:2d:c8:1d:a0:16:c7:2b:81:9a:56:39:95: cf:41:ee:95:c6:47:94:22:91:e6:d5:51:a6:24:b5:ed:6b:73: 42:e2:b7:70:2e:09:27:a9:ad:d0:2f:db:93:e2:d5:90:3c:a3: 48:c6:77:6b:5c:3e:17:3c:bd:06:57:97:c5:d3:fe:c4:e8:7a: f5:64:92:98:52:79:d7:e7:51:4f:02:1f:77:0b:00:b8:94:c0: 56:34:00:8e:77:21:da:6f:f9:24:5c:b7:95:93:87:a3:65:5c: 25:ac:52:81:8d:c5:c2:d8:a9:7e:1e:21:0d:5a:cc:43:7b:03: 8f:2f:e1:b4:c8:0e:95:7c:38:12:1a:e0:84:ee:74:ab:db:60: b2:2e:56:07:fc:84:b1:ac:b4:4a:b0:87:af:81:53:59:95:9f: 0e:6c:08:1c:2b:45:ec:30:14:61:b4:20:30:5e:38:69:7f:a2: 49:6c:7d:c0:b2:b9:33:89:2f:a8:1a:72:21:69:42:c7:06:c7: 24:da:8f:a6:62:14:fb:48:05:90:ba:9f:69:a5:75:23:88:c1: 2c:9b:03:8c -----BEGIN CERTIFICATE----- MIIGBTCCBO2gAwIBAgISAZrLXrIjsw4FJrQH/XEEa5+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI4MTY0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmRjOWMyMThiNTEwYzA3YmM2NjU5YjA5ZmJkMzJhZmU2OGFiZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7yaGEDTShfDSbzznCpZMdYLKbQ6 hxmhke37ATYiCYgaCrbO5qJvWmUrtNCTjI1PGwbMlj71UHZSzBpnbTWNMt1I3lGR W8Ms7EOLvl90d1OPDYCgLq6PYX2K/eyRXjuGgUuoMEsUR/jmaqUEdHvpb68uE68A 1Gg4O/fn1BwPP1c4hpqPd+Ln4FBx63sECNxge97/+UDMIRqj/yHWaNdQBpgMXSpk 6gWC1Elk7c7l2sFEUqRTzEdAA8TxoTpQAGLkI4RAbhgFh68k82TRw1TVtEakSe89 TAD58Ryvrxfnstd5MRl3h4AsfRiAU8G+kJ+3KUBHihNQE3Vjl0b/pEkS9QIDAQAB o4IDETCCAw0wHQYDVR0OBBYEFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzQwOWI3 ZS0xMjc1LTQzZWQtYWYwZi01MmY5N2IyNzdkMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNDA5Yjdl LTEyNzUtNDNlZC1hZjBmLTUyZjk3YjI3N2QxZi8xL1V0eWNJWXRSREFlOFpsbXdu NzB5ci1hS3Y5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGLBggrBgEF BQcBBwEB/wR8MHowVAQCAAEwTgMEAx+rgAMEAyUuwAMEAi2aBAMEAFvHMgMEAFvm 4QMEA165UAMEBF7k0AMEA23rMAMEArlExAMEArmZvAMEArnEXAMEAMJuQwMEAcO/ kDAiBAIAAjAcAwUAKgAN0AMFAyoHZYADBQMqB4hAAwUDKgprQDAeBggrBgEFBQcB CAEB/wQPMA2gCzAJAgIYPgIDAPONMA0GCSqGSIb3DQEBCwUAA4IBAQAAKkVsP6r9 K3uO0/9ngpSrdSRvInEnYwnB2y9OKRH/1+8pYWU3dQ5LNgAtyB2gFscrgZpWOZXP Qe6VxkeUIpHm1VGmJLXta3NC4rdwLgknqa3QL9uT4tWQPKNIxndrXD4XPL0GV5fF 0/7E6Hr1ZJKYUnnX51FPAh93CwC4lMBWNACOdyHab/kkXLeVk4ejZVwlrFKBjcXC 2Kl+HiENWsxDewOPL+G0yA6VfDgSGuCE7nSr22CyLlYH/ISxrLRKsIevgVNZlZ8O bAgcK0XsMBRhtCAwXjhpf6JJbH3AsrkziS+oGnIhaULHBsck2o+mYhT7SAWQup9p pXUjiMEsmwOM -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:15 2025 by rpki-client