This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer File: UxUwA3N9ePci25oo4iBD412Nhx4.cer (raw, json) Hash identifier: 7t89WRQyrIG9mlGV9zy0jRCOt2AAOMDZsJiQRlvNi+Y= Subject key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77595B090DCA5B7BCD7F335B01A8319C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 134.21.0.0/16 IP: 192.47.244.0 -- 192.47.249.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5b:09:0d:ca:5b:7b:cd:7f:33:5b:01:a8:31:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53153003737d78f722db9a28e22043e35d8d871e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:b6:5d:7e:bf:4f:c6:91:52:70:ca:4a:cb: 93:2d:28:ad:80:33:a8:60:ef:17:df:58:d2:8f:db: fe:0e:f3:2a:65:a7:ab:2c:53:20:dc:ab:5a:5f:85: 49:8d:ce:20:f1:ca:06:25:5d:14:a6:ce:7d:4a:f6: d9:2a:9f:9e:10:5d:c7:82:22:6d:de:bd:b8:4d:bf: 81:85:82:a3:0d:ff:a5:51:90:90:b8:e4:db:0f:34: 70:7c:dd:76:e5:87:dd:80:0c:1e:63:ff:3e:8e:5b: 76:5c:8e:51:6c:1a:cb:fc:6d:d9:be:63:8e:eb:47: 11:f6:21:61:1c:66:19:82:a7:2e:06:5d:4c:ef:5f: b9:bb:6e:3c:46:6b:15:cc:81:63:06:e7:ee:8d:a2: ba:cf:83:b1:f3:ea:51:da:df:64:7b:68:07:5d:df: 1d:2c:6c:1c:6c:43:21:12:4a:b0:2d:ed:38:b1:68: df:15:73:62:bc:69:4e:a9:fe:9f:a9:89:08:93:04: fc:81:f6:37:e8:1c:a1:8c:8d:43:82:15:b1:c1:04: e0:eb:02:40:50:8a:1a:ef:7b:9f:cb:41:25:d2:25: 1f:4e:9c:47:6e:f8:d9:e0:f5:5e:f8:c6:44:fb:2c: 1b:9f:fd:c0:7b:14:8c:f1:1f:80:95:9e:ce:6d:d9: 30:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.21.0.0/16 192.47.244.0-192.47.249.255 Signature Algorithm: sha256WithRSAEncryption 20:8c:6e:66:dd:0f:b1:3c:45:33:5d:84:a9:65:b6:29:a8:f6: eb:0e:fc:bb:54:b3:29:aa:1b:79:70:71:22:a1:db:af:5a:ac: 31:3e:6b:15:5d:11:19:f7:e5:e1:0e:d0:a1:a9:21:a7:13:5b: 99:42:0d:54:37:00:2b:6e:b6:72:a8:91:af:3c:5a:3e:3c:70: fa:68:b2:97:cd:85:87:4d:2a:34:68:5c:e8:6b:a3:0e:76:fc: 8c:13:91:31:43:00:8b:db:37:ec:83:77:45:26:ae:de:d2:e5: cf:a2:1e:f3:57:55:48:9b:4f:a7:cb:89:cf:45:95:7c:b8:39: c9:a2:40:20:07:28:84:e7:1e:d7:dc:b4:ac:8c:59:b4:26:42: 89:8f:ab:f4:f6:57:ff:9c:cc:ea:26:8c:ba:90:5d:19:72:ad: 9b:1f:62:fd:50:04:05:b8:33:55:c4:1a:14:3a:83:06:43:2b: 9b:d8:9a:f5:c2:80:df:db:b2:72:c8:0f:72:88:3d:4b:d5:90: a2:c8:75:4f:01:28:5a:4a:a7:96:15:ba:90:c1:74:a5:53:be: 18:d8:e1:74:8e:19:bc:8e:8b:0e:fe:01:a2:34:5b:0b:19:3b: da:f1:ca:06:7a:64:4c:5e:50:40:a5:d7:7e:e9:db:06:98:ff: dd:33:75:d6 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgISAZt3WVsJDcpbe81/M1sBqDGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzE1MzAwMzczN2Q3OGY3MjJkYjlhMjhlMjIwNDNlMzVkOGQ4NzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsS2XX6/T8aRUnDKSsuTLSitgDOo YO8X31jSj9v+DvMqZaerLFMg3KtaX4VJjc4g8coGJV0Ups59SvbZKp+eEF3HgiJt 3r24Tb+BhYKjDf+lUZCQuOTbDzRwfN125YfdgAweY/8+jlt2XI5RbBrL/G3ZvmOO 60cR9iFhHGYZgqcuBl1M71+5u248RmsVzIFjBufujaK6z4Ox8+pR2t9ke2gHXd8d LGwcbEMhEkqwLe04sWjfFXNivGlOqf6fqYkIkwT8gfY36ByhjI1DghWxwQTg6wJA UIoa73ufy0El0iUfTpxHbvjZ4PVe+MZE+ywbn/3AexSM8R+AlZ7Obdkw/QIDAQAB o4ICkTCCAo0wHQYDVR0OBBYEFFMVMANzfXj3ItuaKOIgQ+NdjYceMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzhmNzE0 OC0yMzZkLTQwODgtODllNi02NjU5OTVjNjI4MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvOGY3MTQ4 LTIzNmQtNDA4OC04OWU2LTY2NTk5NWM2MjgzOC8xL1V4VXdBM045ZVBjaTI1b280 aUJENDEyTmh4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCwGCCsGAQUF BwEHAQH/BB0wGzAZBAIAATATAwMAhhUwDAMEAsAv9AMEAcAv+DANBgkqhkiG9w0B AQsFAAOCAQEAIIxuZt0PsTxFM12EqWW2Kaj26w78u1SzKaobeXBxIqHbr1qsMT5r FV0RGffl4Q7QoakhpxNbmUINVDcAK262cqiRrzxaPjxw+miyl82Fh00qNGhc6Guj Dnb8jBORMUMAi9s37IN3RSau3tLlz6Ie81dVSJtPp8uJz0WVfLg5yaJAIAcohOce 19y0rIxZtCZCiY+r9PZX/5zM6iaMupBdGXKtmx9i/VAEBbgzVcQaFDqDBkMrm9ia 9cKA39uycsgPcog9S9WQosh1TwEoWkqnlhW6kMF0pVO+GNjhdI4ZvI6LDv4BojRb Cxk72vHKBnpkTF5QQKXXfunbBpj/3TN11g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:49:09 2026 by rpki-client