This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer (raw, json) Hash identifier: JnhlgguXvF9BG/uMcqSZLJMNZEfLkF6r+twO0DULSDI= Subject key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A0D717A715D89F6547A7BF03F3FFE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209495 IP: 141.98.228.0/22 IP: 2a14:8f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:0d:71:7a:71:5d:89:f6:54:7a:7b:f0:3f:3f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=533802e62965d4584e598d59b76a928be5afd971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:d1:a2:63:a1:e4:55:b1:50:4b:71:80:d7: 60:c5:0f:49:7e:4e:89:d6:0b:a0:7d:8c:a9:37:fc: 9d:3a:2b:de:2f:28:c7:93:4a:1a:a5:70:25:22:08: 0b:0f:1f:91:51:1c:89:21:74:5d:d6:a4:ee:34:23: c9:d0:8f:ba:26:e9:62:1b:6b:f5:d7:01:24:8b:5a: ec:29:d8:a2:6e:d9:9f:22:be:7c:ed:3f:f8:cc:f2: 7a:61:a2:36:e0:b5:1f:0d:41:e1:f2:d8:01:fd:69: c5:f9:a1:1f:4b:89:3c:b4:01:92:8c:45:fb:a5:02: 2d:16:0d:6e:cf:45:8f:58:8a:b7:04:a8:4f:ba:36: d7:0f:ad:46:2c:18:ef:a1:61:21:d5:61:fb:64:11: 5d:31:0a:d4:92:e1:11:d4:4f:a3:0b:f1:d6:60:8c: 42:4f:7b:4a:02:f3:3f:c9:e4:a6:e0:13:78:bf:ec: 9d:28:a6:ba:e9:51:19:ee:1c:93:1b:63:cf:58:b4: 6c:73:ba:1d:99:3a:96:0c:37:c7:14:40:42:4b:d5: c5:0a:08:36:44:6d:92:32:f2:42:bf:23:c3:89:92: f1:3a:11:c7:77:78:99:62:29:c8:0a:a0:b8:4b:c3: 0e:de:7a:68:b0:59:ed:f7:86:1b:89:a8:2f:68:bc: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.228.0/22 IPv6: 2a14:8f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209495 Signature Algorithm: sha256WithRSAEncryption b1:db:5a:f7:96:0c:13:ad:0c:e4:07:83:de:b7:46:c2:06:a2: f3:06:0f:18:7a:a2:a5:32:db:15:8a:72:f5:a7:ef:7a:31:eb: 32:a7:e8:d9:4c:02:b7:2f:c3:ab:02:8f:b6:6b:c8:ee:16:bf: 11:40:c0:1b:fb:50:2f:02:40:3a:5b:b5:e1:52:43:c8:16:b6: 1c:3c:dc:fa:0f:2a:90:df:e5:86:a5:75:a2:dc:fe:d9:a0:26: 55:1d:d2:30:65:56:00:67:e6:b7:19:9c:e5:22:c9:1e:1b:ff: 18:e4:df:eb:70:4b:a2:37:21:52:14:40:9c:20:77:d1:2f:2c: dc:22:a7:60:c2:6e:8a:0c:7d:10:c5:3d:a9:c8:11:51:56:c6: 09:85:4d:34:e7:9e:b5:e4:80:fd:97:91:47:d6:97:dd:fb:48: 5a:e9:46:fe:00:85:ce:1e:82:c5:d9:25:1a:6d:39:0c:71:34: c9:1a:24:34:38:7f:d3:6d:92:b4:ce:d2:02:d3:2b:22:17:db: 59:80:f2:04:6c:99:1a:b6:eb:1b:34:87:0b:15:99:84:0f:e4: 9c:e9:70:5e:b3:69:1f:f8:70:43:f8:dd:e3:7f:2a:a6:d2:1a: 8e:4b:ec:20:89:8c:bf:16:cd:35:94:00:f2:10:17:12:8d:78: 57:42:f1:1b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6Wg1xenFdifZUenvwPz/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzM4MDJlNjI5NjVkNDU4NGU1OThkNTliNzZhOTI4YmU1YWZkOTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpfRomOh5FWxUEtxgNdgxQ9Jfk6J 1gugfYypN/ydOiveLyjHk0oapXAlIggLDx+RURyJIXRd1qTuNCPJ0I+6JuliG2v1 1wEki1rsKdiibtmfIr587T/4zPJ6YaI24LUfDUHh8tgB/WnF+aEfS4k8tAGSjEX7 pQItFg1uz0WPWIq3BKhPujbXD61GLBjvoWEh1WH7ZBFdMQrUkuER1E+jC/HWYIxC T3tKAvM/yeSm4BN4v+ydKKa66VEZ7hyTG2PPWLRsc7odmTqWDDfHFEBCS9XFCgg2 RG2SMvJCvyPDiZLxOhHHd3iZYinICqC4S8MO3nposFnt94YbiagvaLxs2QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFM4AuYpZdRYTlmNWbdqkovlr9lxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzAxYTcz YS04ZGEwLTQ4YjktYWFlZC1hMjNjMTMxYzBkMzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvMDFhNzNh LThkYTAtNDhiOS1hYWVkLWEyM2MxMzFjMGQzOC8xL1V6Z0M1aWxsMUZoT1dZMVp0 MnFTaS1XdjJYRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCjWLkMA0EAgACMAcDBQMqFI+AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMyVzANBgkqhkiG9w0BAQsFAAOCAQEAsdta95YME60M 5AeD3rdGwgai8wYPGHqipTLbFYpy9afvejHrMqfo2UwCty/DqwKPtmvI7ha/EUDA G/tQLwJAOlu14VJDyBa2HDzc+g8qkN/lhqV1otz+2aAmVR3SMGVWAGfmtxmc5SLJ Hhv/GOTf63BLojchUhRAnCB30S8s3CKnYMJuigx9EMU9qcgRUVbGCYVNNOeeteSA /ZeRR9aX3ftIWulG/gCFzh6CxdklGm05DHE0yRokNDh/022StM7SAtMrIhfbWYDy BGyZGrbrGzSHCxWZhA/knOlwXrNpH/hwQ/jd438qptIajkvsIImMvxbNNZQA8hAX Eo14V0LxGw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:41 2026 by rpki-client