This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer (raw, json) Hash identifier: fBiX0XOpXsNEIum4FQkNUXF4z2ZxXklktx8GNSNlLQo= Subject key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA55C692265642065F7A47D09552809 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.77.0/24 IP: 194.38.8.0/22 IP: 2a10:4f00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:5c:69:22:65:64:20:65:f7:a4:7d:09:55:28:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3d:04:93:d0:bd:3b:f3:ad:10:50:10:35:ae: 1b:a8:27:cb:9c:16:00:d0:f8:e4:f2:d9:19:af:15: 5a:bb:2e:2e:48:02:e9:c2:8e:96:c7:c3:71:bc:51: d5:ac:2a:8e:49:ad:9e:c2:ba:02:19:9c:d3:55:8a: 0c:bc:55:8e:df:a2:7a:4c:5b:ce:63:34:24:a2:3f: 1a:c8:a8:87:75:e7:91:d7:20:d1:4f:cd:7c:84:e0: 88:6b:fa:47:73:5d:1e:33:2e:60:86:69:3d:23:e8: e6:c8:c7:9d:f8:d3:c9:3a:d4:b6:5c:25:84:af:97: 5a:64:a7:44:b0:b6:49:2f:ad:7b:47:3d:03:44:e7: cd:7a:d8:ed:d5:30:f0:14:00:50:6b:a5:55:a0:74: 02:09:58:17:d0:8d:b7:64:c6:16:57:47:8f:33:d7: ea:0f:53:a8:8e:df:0f:9c:f5:8e:6c:3a:88:6a:da: 7c:ce:08:93:a1:5f:20:b6:bb:ea:66:01:51:02:52: a5:93:2d:c9:21:0d:05:4d:bf:67:3c:fc:85:80:f8: 0e:f9:35:19:3a:c5:7f:04:6a:0f:3d:5f:93:84:5d: f9:65:b7:1d:05:d8:92:a9:ed:92:ba:8d:1a:93:49: 86:a9:f4:06:31:20:cc:41:23:f5:d7:36:3d:a1:6c: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.77.0/24 194.38.8.0/22 IPv6: 2a10:4f00::/32 Signature Algorithm: sha256WithRSAEncryption b1:59:47:a3:d5:34:4c:1f:57:b6:61:b1:8e:9e:bc:89:2b:d3: 75:bf:89:47:f1:b4:d2:66:4b:fd:fc:cd:cd:94:4d:06:3b:d8: 3c:4d:87:92:a8:65:a4:56:53:ec:30:b9:85:78:25:20:9b:d9: 10:8d:1c:39:12:59:c6:94:f7:f5:42:ea:a3:ec:bb:3d:cb:ea: 53:b0:43:44:b9:31:af:22:40:92:de:a4:07:d2:8b:3a:87:2f: 8c:f7:a9:4b:4a:d7:05:af:3b:2b:60:af:2a:01:75:a1:bc:11: 24:d9:46:ad:ac:62:71:a8:e3:70:d1:98:88:0e:24:d3:da:5e: 56:0a:35:dd:21:48:7f:60:29:3b:db:a3:ed:44:1b:8a:1c:53: be:4e:8c:5d:f5:1b:14:d8:3d:12:29:d5:60:36:26:7e:25:db: 15:15:b3:83:84:52:e2:2f:51:50:49:e1:2e:9c:15:a8:c4:1b: 85:82:99:ca:df:2a:29:6f:3d:26:c5:ce:14:cb:4e:aa:fd:57: c2:a4:6d:a5:b6:df:24:cf:d4:47:2a:1d:24:78:1b:2a:1c:75: e1:a0:56:07:39:31:59:f0:bf:d0:88:f4:35:33:34:6c:97:f4: c7:ba:47:af:5f:dc:e2:21:4c:f8:e9:0e:f8:df:99:12:f1:b6: 7d:b6:01:da -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt+pVxpImVkIGX3pH0JVSgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODIwNzY5N2QwYjdjMjQxOTllNmRkMTI4MmI0OWI1NmNlZjAyNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9j0Ek9C9O/OtEFAQNa4bqCfLnBYA 0Pjk8tkZrxVauy4uSALpwo6Wx8NxvFHVrCqOSa2ewroCGZzTVYoMvFWO36J6TFvO YzQkoj8ayKiHdeeR1yDRT818hOCIa/pHc10eMy5ghmk9I+jmyMed+NPJOtS2XCWE r5daZKdEsLZJL617Rz0DROfNetjt1TDwFABQa6VVoHQCCVgX0I23ZMYWV0ePM9fq D1Oojt8PnPWObDqIatp8zgiToV8gtrvqZgFRAlKlky3JIQ0FTb9nPPyFgPgO+TUZ OsV/BGoPPV+ThF35ZbcdBdiSqe2Suo0ak0mGqfQGMSDMQSP11zY9oWxBNQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFLggdpfQt8JBmebdEoK0m1bO8CRPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2I5OTNl Zi1hYWE3LTQwMGMtOGRiNy05NmQzMDRjOGRiMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvYjk5M2Vm LWFhYTctNDAwYy04ZGI3LTk2ZDMwNGM4ZGIwMi8xL3VDQjJsOUMzd2tHWjV0MFNn clNiVnM3d0pFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW9FNAwQCwiYIMA0EAgACMAcDBQAqEE8AMA0G CSqGSIb3DQEBCwUAA4IBAQCxWUej1TRMH1e2YbGOnryJK9N1v4lH8bTSZkv9/M3N lE0GO9g8TYeSqGWkVlPsMLmFeCUgm9kQjRw5ElnGlPf1Quqj7Ls9y+pTsENEuTGv IkCS3qQH0os6hy+M96lLStcFrzsrYK8qAXWhvBEk2UatrGJxqONw0ZiIDiTT2l5W CjXdIUh/YCk726PtRBuKHFO+Toxd9RsU2D0SKdVgNiZ+JdsVFbODhFLiL1FQSeEu nBWoxBuFgpnK3yopbz0mxc4Uy06q/VfCpG2ltt8kz9RHKh0keBsqHHXhoFYHOTFZ 8L/QiPQ1MzRsl/THukevX9ziIUz46Q7435kS8bZ9tgHa -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:31 2026 by rpki-client