This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer File: UtycIYtRDAe8Zlmwn70yr-aKv9I.cer (raw, json) Hash identifier: OSByDIK5CHtnAaD2mVs1Snbbzf952ZKPTQUGm1p5SOU= Subject key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CBF4C6621A6842741A10C51B91778 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6206 AS: 62349 IP: 31.171.128.0/21 IP: 37.46.192.0/21 IP: 45.154.4.0/22 IP: 91.199.50.0/24 IP: 91.230.225.0/24 IP: 94.185.80.0/21 IP: 94.228.208.0/20 IP: 109.235.48.0/21 IP: 185.68.196.0/22 IP: 185.153.188.0/22 IP: 185.196.92.0/22 IP: 194.110.67.0/24 IP: 195.191.144.0/23 IP: 2a00:dd0::/32 IP: 2a07:6580::/29 IP: 2a07:8840::/29 IP: 2a0a:6b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bf:4c:66:21:a6:84:27:41:a1:0c:51:b9:17:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:9a:18:40:d3:4a:17:c3:49:bc:f3:9c:2a: 59:31:d6:0b:29:b4:3a:87:19:a1:91:ed:fb:01:36: 22:09:88:1a:0a:b6:ce:e6:a2:6f:5a:65:2b:b4:d0: 93:8c:8d:4f:1b:06:cc:96:3e:f5:50:76:52:cc:1a: 67:6d:35:8d:32:dd:48:de:51:91:5b:c3:2c:ec:43: 8b:be:5f:74:77:53:8f:0d:80:a0:2e:ae:8f:61:7d: 8a:fd:ec:91:5e:3b:86:81:4b:a8:30:4b:14:47:f8: e6:6a:a5:04:74:7b:e9:6f:af:2e:13:af:00:d4:68: 38:3b:f7:e7:d4:1c:0f:3f:57:38:86:9a:8f:77:e2: e7:e0:50:71:eb:7b:04:08:dc:60:7b:de:ff:f9:40: cc:21:1a:a3:ff:21:d6:68:d7:50:06:98:0c:5d:2a: 64:ea:05:82:d4:49:64:ed:ce:e5:da:c1:44:52:a4: 53:cc:47:40:03:c4:f1:a1:3a:50:00:62:e4:23:84: 40:6e:18:05:87:af:24:f3:64:d1:c3:54:d5:b4:46: a4:49:ef:3d:4c:00:f9:f1:1c:af:af:17:e7:b2:d7: 79:31:19:77:87:80:2c:7d:18:80:53:c1:be:90:9f: b7:29:40:47:8a:13:50:13:75:63:97:46:ff:a4:49: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.128.0/21 37.46.192.0/21 45.154.4.0/22 91.199.50.0/24 91.230.225.0/24 94.185.80.0/21 94.228.208.0/20 109.235.48.0/21 185.68.196.0/22 185.153.188.0/22 185.196.92.0/22 194.110.67.0/24 195.191.144.0/23 IPv6: 2a00:dd0::/32 2a07:6580::/29 2a07:8840::/29 2a0a:6b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6206 62349 Signature Algorithm: sha256WithRSAEncryption 52:df:c0:ec:7d:29:6f:86:eb:d2:63:ae:b5:a8:9d:ed:12:23: 2d:02:ef:12:43:0d:28:71:d0:9f:08:67:cd:59:73:2c:b8:03: f1:89:6a:c7:bd:a8:cb:2d:96:57:a9:99:42:ca:3b:ba:09:e0: 7c:83:e1:8c:10:6f:ce:b8:44:05:9f:d5:93:2a:f4:c2:f6:ad: d6:b2:a8:1f:49:1e:f1:84:b0:40:8f:c4:b2:e3:f7:2c:d0:0f: 91:3a:e6:f0:26:a9:58:fb:22:c7:86:d6:d1:42:33:93:fd:aa: 15:ab:b9:6c:04:f1:37:0a:55:0e:77:5f:31:3b:22:09:41:a3: dc:5e:7b:96:1f:cf:a0:4e:ee:cc:f1:07:16:56:3e:05:17:99: e6:16:06:26:9b:e0:bb:7e:47:1e:b6:54:93:eb:c3:66:a3:c9: b7:e3:43:ce:46:55:94:21:62:18:f2:6a:13:6e:cc:9c:b1:51: ef:01:40:c5:4e:43:d5:94:49:e4:3a:98:fb:ec:dd:05:ae:89: f2:eb:90:4f:32:18:c5:59:f3:63:8b:73:51:87:84:15:71:c7: fa:a3:38:e9:a2:5c:22:03:72:4b:4d:3a:2b:91:1a:2c:ad:90: 92:9d:14:9d:89:e0:8f:71:70:61:c9:81:23:78:c0:c9:83:a7: ed:02:70:e9 -----BEGIN CERTIFICATE----- MIIGBTCCBO2gAwIBAgISAZt9XL9MZiGmhCdBoQxRuRd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmRjOWMyMThiNTEwYzA3YmM2NjU5YjA5ZmJkMzJhZmU2OGFiZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7yaGEDTShfDSbzznCpZMdYLKbQ6 hxmhke37ATYiCYgaCrbO5qJvWmUrtNCTjI1PGwbMlj71UHZSzBpnbTWNMt1I3lGR W8Ms7EOLvl90d1OPDYCgLq6PYX2K/eyRXjuGgUuoMEsUR/jmaqUEdHvpb68uE68A 1Gg4O/fn1BwPP1c4hpqPd+Ln4FBx63sECNxge97/+UDMIRqj/yHWaNdQBpgMXSpk 6gWC1Elk7c7l2sFEUqRTzEdAA8TxoTpQAGLkI4RAbhgFh68k82TRw1TVtEakSe89 TAD58Ryvrxfnstd5MRl3h4AsfRiAU8G+kJ+3KUBHihNQE3Vjl0b/pEkS9QIDAQAB o4IDETCCAw0wHQYDVR0OBBYEFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzQwOWI3 ZS0xMjc1LTQzZWQtYWYwZi01MmY5N2IyNzdkMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNDA5Yjdl LTEyNzUtNDNlZC1hZjBmLTUyZjk3YjI3N2QxZi8xL1V0eWNJWXRSREFlOFpsbXdu NzB5ci1hS3Y5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGLBggrBgEF BQcBBwEB/wR8MHowVAQCAAEwTgMEAx+rgAMEAyUuwAMEAi2aBAMEAFvHMgMEAFvm 4QMEA165UAMEBF7k0AMEA23rMAMEArlExAMEArmZvAMEArnEXAMEAMJuQwMEAcO/ kDAiBAIAAjAcAwUAKgAN0AMFAyoHZYADBQMqB4hAAwUDKgprQDAeBggrBgEFBQcB CAEB/wQPMA2gCzAJAgIYPgIDAPONMA0GCSqGSIb3DQEBCwUAA4IBAQBS38DsfSlv huvSY661qJ3tEiMtAu8SQw0ocdCfCGfNWXMsuAPxiWrHvajLLZZXqZlCyju6CeB8 g+GMEG/OuEQFn9WTKvTC9q3WsqgfSR7xhLBAj8Sy4/cs0A+ROubwJqlY+yLHhtbR QjOT/aoVq7lsBPE3ClUOd18xOyIJQaPcXnuWH8+gTu7M8QcWVj4FF5nmFgYmm+C7 fkcetlST68Nmo8m340PORlWUIWIY8moTbsycsVHvAUDFTkPVlEnkOpj77N0Frony 65BPMhjFWfNji3NRh4QVccf6ozjpolwiA3JLTTorkRosrZCSnRSdieCPcXBhyYEj eMDJg6ftAnDp -----END CERTIFICATE-----Generated at Sun Jan 25 22:23:14 2026 by rpki-client