This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer File: uBcWKHfan0Awu8uf6KwUPmqyhxs.cer (raw, json) Hash identifier: 1UL+eGYbz4NoVYFqUslvllZnQM91SNHdNUblJyI5D1I= Subject key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF17E09BDC9027B027E12A13A5190E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 64484 IP: 45.145.164.0/22 IP: 62.3.33.0/24 IP: 146.19.168.0/24 IP: 193.3.190.0/24 IP: 2a0e:1e40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:7e:09:bd:c9:02:7b:02:7e:12:a1:3a:51:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fa:83:d9:e4:d7:5e:92:34:ba:e9:05:e5:29: 1f:a9:d7:cd:fd:d8:dd:66:cd:6e:68:5b:75:bd:3f: 5b:b7:d4:4a:ed:f7:84:79:94:eb:1c:5e:14:f2:e7: a6:ed:28:fc:6c:c2:8e:f7:61:db:e1:2a:c0:16:71: db:76:99:a5:6e:b7:63:de:3c:a0:7b:f7:d9:9c:cf: 99:91:cd:1c:58:15:eb:05:7b:1b:40:ec:37:7a:28: bd:ee:dd:c4:6e:61:33:89:04:3c:0e:fa:0b:20:55: 19:5d:6c:9d:2d:ed:eb:f1:43:7b:d0:f4:65:22:ac: 7f:3c:90:49:91:63:e3:02:3a:03:4c:3b:a0:cf:46: c9:de:5a:76:e0:d8:84:47:eb:9e:55:bd:cb:ba:1e: 40:a7:0b:7e:92:55:22:3f:d2:50:dc:05:53:a9:61: c1:1a:2f:a5:ab:2f:2f:a5:d5:7e:97:4f:65:e4:bd: 0a:3c:77:eb:ef:40:6a:6a:00:d5:1f:9b:53:48:c4: fa:5b:cb:50:cd:ba:d5:a8:3c:03:e7:fc:f7:71:64: da:52:39:a6:f9:e2:00:da:f4:ed:a9:44:34:b7:e9: b2:35:a7:cb:3b:b5:1d:58:a0:c7:d5:3e:a6:63:d0: 8b:19:7a:8d:00:3d:82:ca:c7:22:e3:78:d3:fe:63: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.164.0/22 62.3.33.0/24 146.19.168.0/24 193.3.190.0/24 IPv6: 2a0e:1e40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64484 Signature Algorithm: sha256WithRSAEncryption 71:38:82:60:dc:d5:53:f1:19:25:27:0f:da:56:1f:27:ae:f3: 12:c8:e5:0c:97:e6:c1:86:9b:f0:bf:05:e2:6a:b4:00:f0:9f: 36:08:c0:fb:da:c2:51:9e:82:60:48:d2:48:58:25:8d:2c:8c: 6b:c8:e9:74:27:eb:3c:26:41:53:ed:ac:e4:a5:0a:6a:f5:5e: b8:a5:aa:3e:35:46:0a:ad:ba:35:91:52:6d:16:15:20:12:0b: 3d:0a:84:57:7f:b8:ec:b1:05:53:6e:88:a6:56:06:61:52:99: 54:58:7c:87:e1:3a:c7:b9:7d:84:18:9a:3f:46:62:57:f9:8b: fa:6c:ad:5a:b3:41:fa:11:2a:3d:52:72:ff:0a:62:46:99:10: 08:33:f4:a8:77:7d:b9:b0:6e:72:eb:b0:d8:47:53:e0:59:69: 02:be:38:b3:53:93:29:0c:c6:1c:f6:d5:fb:6d:a6:4d:f1:66: db:27:21:4c:54:d5:2e:0e:94:15:4c:48:03:d7:06:f0:89:1b: 53:d5:81:b8:ec:9e:5e:46:f9:50:16:31:ee:28:5b:32:e6:bd: f6:4a:a0:2d:5f:6e:d9:95:ee:ed:6d:dd:5e:b1:67:31:70:20: 1e:dc:6d:a4:b1:60:55:74:d0:0d:3c:85:ea:5e:44:1c:78:21: 78:65:9b:88 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt/8X4JvckCewJ+EqE6UZDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODE3MTYyODc3ZGE5ZjQwMzBiYmNiOWZlOGFjMTQzZTZhYjI4NzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vqD2eTXXpI0uukF5SkfqdfN/djd Zs1uaFt1vT9bt9RK7feEeZTrHF4U8uem7Sj8bMKO92Hb4SrAFnHbdpmlbrdj3jyg e/fZnM+Zkc0cWBXrBXsbQOw3eii97t3EbmEziQQ8DvoLIFUZXWydLe3r8UN70PRl Iqx/PJBJkWPjAjoDTDugz0bJ3lp24NiER+ueVb3Luh5Apwt+klUiP9JQ3AVTqWHB Gi+lqy8vpdV+l09l5L0KPHfr70BqagDVH5tTSMT6W8tQzbrVqDwD5/z3cWTaUjmm +eIA2vTtqUQ0t+myNafLO7UdWKDH1T6mY9CLGXqNAD2Cysci43jT/mOCFQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFLgXFih32p9AMLvLn+isFD5qsocbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzE2Yjdi NC1iYjIxLTRiM2UtYWViNC1iMjdjYTI5MWJkNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvMTZiN2I0 LWJiMjEtNGIzZS1hZWI0LWIyN2NhMjkxYmQ3Ny8xL3VCY1dLSGZhbjBBd3U4dWY2 S3dVUG1xeWh4cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLZGkAwQAPgMhAwQAkhOoAwQAwQO+MA0EAgAC MAcDBQMqDh5AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD75DANBgkqhkiG9w0B AQsFAAOCAQEAcTiCYNzVU/EZJScP2lYfJ67zEsjlDJfmwYab8L8F4mq0APCfNgjA +9rCUZ6CYEjSSFgljSyMa8jpdCfrPCZBU+2s5KUKavVeuKWqPjVGCq26NZFSbRYV IBILPQqEV3+47LEFU26IplYGYVKZVFh8h+E6x7l9hBiaP0ZiV/mL+mytWrNB+hEq PVJy/wpiRpkQCDP0qHd9ubBucuuw2EdT4FlpAr44s1OTKQzGHPbV+22mTfFm2ych TFTVLg6UFUxIA9cG8IkbU9WBuOyeXkb5UBYx7ihbMua99kqgLV9u2ZXu7W3dXrFn MXAgHtxtpLFgVXTQDTyF6l5EHHgheGWbiA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:39 2026 by rpki-client