This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer File: uFh0CVxMlCK5NZdacVZPB3HNKS4.cer (raw, json) Hash identifier: 4zC/ibrVjoh3h75SbT/nvX1Pvx0Z2s3EyaQyeAiNVJ8= Subject key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37574DB8652AF2ABFFB9D7E9237C66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.160.194.0/24 IP: 192.188.157.0 -- 192.188.158.255 IP: 192.195.42.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:57:4d:b8:65:2a:f2:ab:ff:b9:d7:e9:23:7c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b85874095c4c9422b935975a71564f0771cd292e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:7c:cc:b8:ea:3f:d5:22:1d:74:71:20:cf: 86:e9:2f:32:6f:a3:4f:fe:1c:af:98:d5:c8:99:73: c7:34:6e:a6:45:ab:64:cd:b5:c8:19:ee:a2:97:47: c8:63:b5:ab:f7:07:86:f9:58:de:0e:2b:de:27:73: 9d:f3:2a:ed:35:c4:a6:aa:4b:7b:3b:76:08:26:3e: 71:3c:f9:c6:70:9f:a2:fa:52:4a:ef:0d:1f:de:02: be:0d:5a:3c:fc:78:3a:b3:4d:22:de:8d:de:00:4f: 65:c4:9f:cc:a1:64:e1:d4:e1:22:05:ac:72:ea:cc: a0:f9:9c:4b:54:9d:69:9f:2c:a3:58:68:1c:c9:98: 3c:f1:4f:41:55:1e:de:77:28:b3:fd:0c:91:98:f6: 7e:ac:fc:11:e5:42:5c:c6:6e:77:5d:ca:d0:8e:d7: 0e:d5:f5:3c:1c:39:eb:74:bc:c0:be:79:b9:49:e8: 45:b7:83:d8:18:ff:6b:31:65:78:d0:54:5b:60:31: 7b:cf:62:13:31:fb:ec:24:5e:92:7d:72:f6:bf:67: bd:32:17:55:c0:c7:ad:f6:dc:17:b4:fa:09:30:70: b8:3d:63:c4:8d:0f:6e:70:22:9c:06:e0:3b:f9:49: 25:cb:4f:5a:5a:ee:0c:7c:40:7d:cc:17:83:e3:9e: ba:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.160.194.0/24 192.188.157.0-192.188.158.255 192.195.42.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:d5:d2:42:07:54:41:70:60:c4:00:84:29:46:dc:70:ac:d5: 57:0c:1b:10:ec:d6:93:ac:1e:f1:f6:42:e7:46:67:46:88:17: b8:42:ee:04:8d:30:8b:d3:f8:77:f3:56:55:45:93:4c:71:4d: 8c:55:f0:33:a4:d6:86:87:96:6f:c5:ab:6e:3c:de:c0:4a:0c: e8:f3:68:aa:bd:b6:4c:ca:d7:f8:f2:e7:07:b5:1a:12:cf:58: d8:c1:54:c1:bb:2d:55:6a:4f:6b:bb:db:16:4d:53:cd:fb:15: a2:bf:8c:11:cd:cb:dc:19:a9:77:2b:9b:56:48:03:f5:92:9d: 2a:c8:95:5a:9b:1d:e7:a6:43:04:ff:9c:bc:d8:07:8f:6c:c2: 48:81:5d:ed:85:69:4f:32:a7:a5:ad:8d:28:9c:0b:43:d2:e7: a0:d4:b3:24:42:b0:93:11:3e:66:0b:f2:1f:91:31:7a:48:de: 90:87:db:1e:7c:f3:33:83:3d:21:2a:e0:ec:71:2f:cc:1c:6c: fe:47:ae:65:e6:cd:29:5d:e5:58:f7:2c:49:17:70:64:ad:4c: d8:bb:91:ef:db:1c:6d:99:e5:16:57:69:ff:9c:1b:c2:ff:f0: 93:5b:06:44:33:94:3d:29:a2:a5:ff:df:b8:12:1b:41:12:1e: 55:b1:84:7c -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZt+N1dNuGUq8qv/udfpI3xmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODU4NzQwOTVjNGM5NDIyYjkzNTk3NWE3MTU2NGYwNzcxY2QyOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFJ8zLjqP9UiHXRxIM+G6S8yb6NP /hyvmNXImXPHNG6mRatkzbXIGe6il0fIY7Wr9weG+VjeDiveJ3Od8yrtNcSmqkt7 O3YIJj5xPPnGcJ+i+lJK7w0f3gK+DVo8/Hg6s00i3o3eAE9lxJ/MoWTh1OEiBaxy 6syg+ZxLVJ1pnyyjWGgcyZg88U9BVR7edyiz/QyRmPZ+rPwR5UJcxm53XcrQjtcO 1fU8HDnrdLzAvnm5SehFt4PYGP9rMWV40FRbYDF7z2ITMfvsJF6SfXL2v2e9MhdV wMet9twXtPoJMHC4PWPEjQ9ucCKcBuA7+Ukly09aWu4MfEB9zBeD4566vQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFLhYdAlcTJQiuTWXWnFWTwdxzSkuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4L2Q4MDg3 Ny03ZjFlLTRhNTAtOTk1Ny0wNzBhMWY3MTg4NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvZDgwODc3 LTdmMWUtNGE1MC05OTU3LTA3MGExZjcxODg1ZS8xL3VGaDBDVnhNbENLNU5aZGFj VlpQQjNITktTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUF BwEHAQH/BCQwIjAgBAIAATAaAwQAwKDCMAwDBADAvJ0DBADAvJ4DBAHAwyowDQYJ KoZIhvcNAQELBQADggEBAH3V0kIHVEFwYMQAhClG3HCs1VcMGxDs1pOsHvH2QudG Z0aIF7hC7gSNMIvT+HfzVlVFk0xxTYxV8DOk1oaHlm/Fq2483sBKDOjzaKq9tkzK 1/jy5we1GhLPWNjBVMG7LVVqT2u72xZNU837FaK/jBHNy9wZqXcrm1ZIA/WSnSrI lVqbHeemQwT/nLzYB49swkiBXe2FaU8yp6WtjSicC0PS56DUsyRCsJMRPmYL8h+R MXpI3pCH2x588zODPSEq4OxxL8wcbP5HrmXmzSld5Vj3LEkXcGStTNi7ke/bHG2Z 5RZXaf+cG8L/8JNbBkQzlD0poqX/37gSG0ESHlWxhHw= -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:09 2026 by rpki-client