This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer File: UzkLE8nvSvz9CBJBEeb2PcMBZao.cer (raw, json) Hash identifier: u80VQsPpaO+TQQHTGbU7C8P6yqOpayYQRyUeJPCG4To= Subject key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C3EA41D120CB7EEC9946B8A8741E9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.9.232.0/22 IP: 2a02:df80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:3e:a4:1d:12:0c:b7:ee:c9:94:6b:8a:87:41:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:f5:29:be:98:66:e4:b2:65:bb:26:01:f5: ef:e7:c6:f9:b8:fc:8e:ee:c6:13:1c:a8:6d:fa:50: 9f:c2:ab:cb:50:ee:83:51:67:11:e1:9a:90:68:a3: 59:e5:20:5d:23:ec:e6:10:41:6e:fd:3d:5d:5b:f6: f1:cb:93:de:84:4b:49:6a:ae:f1:93:3b:2b:fe:0e: 4f:7f:83:74:0a:f5:8d:eb:2a:06:1c:06:4b:16:27: 23:e3:8a:ee:ae:90:59:ad:56:cf:e3:c3:80:46:3a: 8c:83:07:6f:9c:bf:de:a4:a8:01:11:ee:90:9f:98: 43:8f:9f:49:85:54:84:77:a7:6b:fd:f2:78:20:1f: 2b:e9:b8:b9:3f:0b:25:74:65:4c:78:ab:81:fa:c0: b3:e1:ab:49:e6:19:9b:fa:07:f7:71:a2:e7:02:97: a3:73:c5:37:c9:aa:9f:80:23:a6:83:22:b8:b9:8f: 3c:3b:ee:50:7e:aa:38:0a:69:27:0e:1c:bf:95:57: d8:d7:45:ee:9d:01:cd:e5:9e:73:cd:4f:02:d7:3b: 47:e7:ab:3a:d0:17:e5:af:98:4f:d3:8e:75:a9:19: 18:28:2a:e5:9e:9e:5e:63:8f:7c:b1:36:1a:77:e0: f8:27:2a:d5:09:98:74:65:74:79:89:69:d4:3e:2b: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.232.0/22 IPv6: 2a02:df80::/29 Signature Algorithm: sha256WithRSAEncryption 77:bf:8f:6d:b1:41:26:69:22:3b:b0:a2:8d:a9:dc:be:0e:d6: 0b:98:f9:89:81:df:5b:f2:4d:f1:5a:08:83:d3:04:82:46:34: c5:80:5e:5a:0d:71:47:90:1d:8a:af:e9:cf:07:08:ad:1c:44: 5d:c1:25:65:2e:c9:2c:7d:f0:8b:fd:14:17:0b:2e:0d:e8:dd: 9e:ab:f5:a5:64:ec:46:4f:6e:f7:6f:b6:fa:10:96:aa:f9:c2: fb:82:81:f1:12:e6:ee:10:5a:e0:aa:d3:41:5d:39:1e:a3:f7: b9:ad:6e:b5:cd:98:74:47:04:2d:39:49:63:4e:17:24:11:a6: 76:dc:b8:d7:84:97:09:be:a4:75:f0:7b:8d:51:fd:9b:18:14: 1d:a4:3b:bc:d0:47:28:50:7f:55:08:6a:e3:0c:79:d6:a3:29: 70:eb:ed:b6:31:20:fb:a0:c8:e3:4c:a2:fb:5a:db:4f:80:d7: 70:30:20:69:5b:d1:2a:9f:f6:c7:97:dc:2b:de:4f:a3:0f:b2: 4c:a3:78:94:0e:50:5d:e4:55:35:0e:af:73:7f:bd:f8:69:54: fe:d4:ec:fe:fc:47:1f:0c:91:99:66:d1:42:f7:52:cb:b9:da: c8:de:0e:24:c4:ba:b0:8a:8b:18:2a:2b:ed:3f:53:db:6b:3b: e3:87:c9:b3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XD6kHRIMt+7JlGuKh0HpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzM5MGIxM2M5ZWY0YWZjZmQwODEyNDExMWU2ZjYzZGMzMDE2NWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b71Kb6YZuSyZbsmAfXv58b5uPyO 7sYTHKht+lCfwqvLUO6DUWcR4ZqQaKNZ5SBdI+zmEEFu/T1dW/bxy5PehEtJaq7x kzsr/g5Pf4N0CvWN6yoGHAZLFicj44rurpBZrVbP48OARjqMgwdvnL/epKgBEe6Q n5hDj59JhVSEd6dr/fJ4IB8r6bi5PwsldGVMeKuB+sCz4atJ5hmb+gf3caLnApej c8U3yaqfgCOmgyK4uY88O+5Qfqo4CmknDhy/lVfY10XunQHN5Z5zzU8C1ztH56s6 0Bflr5hP0451qRkYKCrlnp5eY498sTYad+D4JyrVCZh0ZXR5iWnUPisJRQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFM5CxPJ70r8/QgSQRHm9j3DAWWqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzg5YzRh Yi05ODRiLTRmNmMtYmRkMC0zM2Q3YWMzNzA5NzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvODljNGFi LTk4NGItNGY2Yy1iZGQwLTMzZDdhYzM3MDk3OS8xL1V6a0xFOG52U3Z6OUNCSkJF ZWIyUGNNQlphby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQnoMA0EAgACMAcDBQMqAt+AMA0GCSqGSIb3 DQEBCwUAA4IBAQB3v49tsUEmaSI7sKKNqdy+DtYLmPmJgd9b8k3xWgiD0wSCRjTF gF5aDXFHkB2Kr+nPBwitHERdwSVlLsksffCL/RQXCy4N6N2eq/WlZOxGT273b7b6 EJaq+cL7goHxEubuEFrgqtNBXTkeo/e5rW61zZh0RwQtOUljThckEaZ23LjXhJcJ vqR18HuNUf2bGBQdpDu80EcoUH9VCGrjDHnWoylw6+22MSD7oMjjTKL7WttPgNdw MCBpW9Eqn/bHl9wr3k+jD7JMo3iUDlBd5FU1Dq9zf734aVT+1Oz+/EcfDJGZZtFC 91LLudrI3g4kxLqwiosYKivtP1Pbazvjh8mz -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:14 2026 by rpki-client