This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer File: UuAiJP-5cRcuSTXtfdll0RVQibY.cer (raw, json) Hash identifier: oPGaihjlEr1/LzOq9k64Y7KCjuPt+GnchtUOoaVsBzU= Subject key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C76C927E6F825FDB2D31BEC1B9CB71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8791 IP: 185.121.16.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6c:92:7e:6f:82:5f:db:2d:31:be:c1:b9:cb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52e02224ffb971172e4935ed7dd965d1155089b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a9:56:68:1c:55:3b:26:d0:a2:1a:eb:be:97: 4b:6c:19:f8:69:a3:fe:bd:3b:66:48:57:9c:5f:bf: b6:9f:ba:62:fb:4b:02:5a:b5:18:a0:44:e7:b4:32: 7b:a5:79:30:01:57:ba:ae:66:73:ee:bd:21:b7:0f: ef:ce:43:1e:20:90:5e:c6:9d:70:f8:de:33:f4:ee: ba:4d:73:18:b4:0c:e6:02:ba:f0:17:c2:11:7c:f8: 97:f6:16:e9:4a:b0:aa:95:ef:3c:39:5f:d9:79:f4: b3:30:c1:99:32:fd:04:21:bc:43:9d:cb:4e:d8:57: 37:ac:ec:d6:ac:65:aa:a2:a5:fa:e5:ff:d3:12:ce: 84:46:c9:6e:1e:57:e3:e5:86:a0:e5:b2:64:17:ee: 73:a6:74:81:1e:b8:07:b7:bc:6a:18:fe:35:db:72: 95:8f:42:ac:e6:df:60:12:10:80:7e:4e:1c:26:b9: 9c:17:4a:8b:03:c6:a7:39:29:09:c1:4d:09:80:62: 9c:4f:17:d4:dc:21:a7:b4:07:06:e4:74:bf:82:d1: 3b:43:25:79:d1:39:8b:9e:1a:ba:16:ac:5c:0e:3c: 63:1a:65:14:67:bd:91:04:6d:88:dc:64:a6:ff:c9: 32:90:1c:a8:11:d4:02:01:d1:ed:00:9c:ea:c5:5f: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.16.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8791 Signature Algorithm: sha256WithRSAEncryption 1b:ea:38:70:75:02:14:33:25:35:4e:3f:3c:fa:ed:95:3c:5b: 19:6b:7f:4c:87:15:51:a4:0a:6d:e9:03:46:36:83:80:7b:0a: 67:ba:3a:e3:cb:b1:bf:48:0d:d8:19:29:30:19:7e:47:c5:d7: ba:60:ad:2f:0c:17:21:b1:86:93:76:88:e7:18:38:f9:22:15: 33:37:06:58:27:6d:b0:3e:df:24:0e:ce:79:68:88:f8:e3:b8: a0:c6:3d:1f:9b:99:a9:bf:83:35:0d:17:7b:5e:e8:2e:f9:cc: ab:fa:1c:7c:44:94:a9:8d:83:60:9d:1f:bc:7e:e3:18:43:e5: ec:5d:9e:03:58:5a:70:5f:33:e5:94:9e:1d:f2:b6:28:f6:97: 43:b8:d8:53:72:9f:d0:b5:c0:0b:4d:58:5f:b5:7e:4d:2f:c7: 83:89:86:b3:a7:de:70:5f:8e:fe:0d:f8:c0:3e:56:cb:88:7f: e2:96:65:c5:64:4f:20:2c:63:e0:9c:ce:f2:53:de:9f:37:d0: 0f:50:92:32:a1:14:1f:83:05:89:95:6d:6a:77:6d:c1:b1:0a: 67:90:60:65:9c:cc:ea:1c:00:c8:04:5b:05:bb:d7:ac:69:3c: a1:75:77:6e:50:b7:16:aa:46:cc:97:3c:50:39:9e:e3:c2:52: 81:2a:a1:aa -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt3x2ySfm+CX9stMb7BuctxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmUwMjIyNGZmYjk3MTE3MmU0OTM1ZWQ3ZGQ5NjVkMTE1NTA4OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6lWaBxVOybQohrrvpdLbBn4aaP+ vTtmSFecX7+2n7pi+0sCWrUYoETntDJ7pXkwAVe6rmZz7r0htw/vzkMeIJBexp1w +N4z9O66TXMYtAzmArrwF8IRfPiX9hbpSrCqle88OV/ZefSzMMGZMv0EIbxDnctO 2Fc3rOzWrGWqoqX65f/TEs6ERsluHlfj5Yag5bJkF+5zpnSBHrgHt7xqGP4123KV j0Ks5t9gEhCAfk4cJrmcF0qLA8anOSkJwU0JgGKcTxfU3CGntAcG5HS/gtE7QyV5 0TmLnhq6FqxcDjxjGmUUZ72RBG2I3GSm/8kykByoEdQCAdHtAJzqxV+J9wIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFLgIiT/uXEXLkk17X3ZZdEVUIm2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzMxMWJj NS0zZjM2LTRkNWUtYWJkZS1iOGRhODk0MDZiZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvMzExYmM1 LTNmMzYtNGQ1ZS1hYmRlLWI4ZGE4OTQwNmJlZC8xL1V1QWlKUC01Y1JjdVNUWHRm ZGxsMFJWUWliWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuXkQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AiJXMA0GCSqGSIb3DQEBCwUAA4IBAQAb6jhwdQIUMyU1Tj88+u2VPFsZa39MhxVR pApt6QNGNoOAewpnujrjy7G/SA3YGSkwGX5Hxde6YK0vDBchsYaTdojnGDj5IhUz NwZYJ22wPt8kDs55aIj447igxj0fm5mpv4M1DRd7Xugu+cyr+hx8RJSpjYNgnR+8 fuMYQ+XsXZ4DWFpwXzPllJ4d8rYo9pdDuNhTcp/QtcALTVhftX5NL8eDiYazp95w X47+DfjAPlbLiH/ilmXFZE8gLGPgnM7yU96fN9APUJIyoRQfgwWJlW1qd23BsQpn kGBlnMzqHADIBFsFu9esaTyhdXduULcWqkbMlzxQOZ7jwlKBKqGq -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:03 2026 by rpki-client