This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer File: uGWF0IuX5nnwgovxAr6rUdza-oc.cer (raw, json) Hash identifier: n+FgGDDq07g4J2NXEyYmysaweQ0h0FuChr79+3qK+IY= Subject key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAE6712956B998C4BD4FA820B8B020 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.180.156.0/22 IP: 2a0a:a980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e6:71:29:56:b9:98:c4:bd:4f:a8:20:b8:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b86585d08b97e679f0828bf102beab51dcdafa87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:7e:e1:aa:87:8b:6a:5f:98:dd:d5:b3:c0: c4:c9:86:7a:a8:cf:6f:52:41:14:8a:dc:93:78:72: b0:3a:a5:3a:e7:33:be:96:37:7f:02:fb:ab:f6:ad: a5:e9:34:d2:51:f4:81:b0:18:de:66:56:b4:c8:cd: 67:24:b7:5a:75:05:f7:c4:a2:0d:35:9e:0a:37:1b: ed:11:9b:d5:02:60:44:fd:8d:a8:1d:5b:85:63:c4: bd:27:c1:6c:db:54:57:7f:18:16:56:de:15:c6:03: fd:10:1d:d5:f1:1f:94:47:02:09:c6:95:45:a4:9f: 54:6c:ae:78:53:60:ee:5d:cb:d8:84:6e:6d:e6:76: 18:f0:c7:fd:46:20:11:67:21:35:6f:8b:0c:ad:a4: 05:00:da:60:58:ff:2d:b3:bc:42:66:a0:5d:c6:7f: 2f:66:ab:3a:95:8e:34:e5:90:c6:5e:e4:da:cb:e7: f3:5a:ba:e4:49:81:92:54:22:72:b4:de:76:d2:86: d3:2e:7c:5c:39:f5:3c:b4:70:9e:a1:93:f3:65:89: 11:ef:89:16:5d:c5:81:4e:a9:1e:c0:b2:9e:92:2c: 82:4d:70:8f:e7:15:60:77:16:7f:18:39:0c:3f:c1: 52:e3:ca:a5:75:d5:5c:7b:23:7f:82:2a:34:be:d8: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.156.0/22 IPv6: 2a0a:a980::/29 Signature Algorithm: sha256WithRSAEncryption 9c:70:18:3e:3c:7e:ff:08:1b:31:0f:84:9d:7e:e6:ce:c7:84: 16:b0:d8:70:f3:3d:a5:30:b5:54:3f:c7:63:07:02:c6:12:64: a8:3b:95:03:08:a9:74:7d:1b:9e:c8:d9:6b:00:1f:c4:b0:3c: 90:dd:a5:bb:cc:f9:85:95:2b:0b:17:34:d7:75:99:d0:6e:1b: 43:e2:96:4a:ff:83:b5:36:f6:f2:36:0c:6b:fd:85:b0:20:2f: c2:55:d0:6c:1c:3a:a7:72:54:30:bc:63:9a:6b:78:b7:44:a1: 58:43:f6:22:c6:64:b3:3b:69:8b:3e:45:41:a2:18:65:ca:e2: 51:72:df:07:a5:8c:a1:e1:37:16:2a:90:37:11:67:80:02:16: 9f:be:de:49:16:07:4e:0c:26:46:a3:56:51:b5:a8:50:6c:be: 44:e5:1f:5f:29:7b:36:95:27:3f:1c:1c:71:cb:a0:ee:68:d7: 78:15:73:04:1d:db:36:ec:43:e7:ba:e8:4c:a6:6c:ff:d5:43: 72:7a:4d:5e:2e:0f:e8:58:a8:a1:b5:63:d1:bc:6b:83:25:5a: 03:25:9d:27:49:94:45:e4:f1:75:75:1c:60:70:c3:1d:a2:af: de:29:fe:42:06:62:b2:24:0f:d2:a9:ae:cf:71:ad:6d:f6:b6: e6:88:31:7a -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt26uZxKVa5mMS9T6gguLAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODY1ODVkMDhiOTdlNjc5ZjA4MjhiZjEwMmJlYWI1MWRjZGFmYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5F+4aqHi2pfmN3Vs8DEyYZ6qM9v UkEUityTeHKwOqU65zO+ljd/Avur9q2l6TTSUfSBsBjeZla0yM1nJLdadQX3xKIN NZ4KNxvtEZvVAmBE/Y2oHVuFY8S9J8Fs21RXfxgWVt4VxgP9EB3V8R+URwIJxpVF pJ9UbK54U2DuXcvYhG5t5nYY8Mf9RiARZyE1b4sMraQFANpgWP8ts7xCZqBdxn8v Zqs6lY405ZDGXuTay+fzWrrkSYGSVCJytN520obTLnxcOfU8tHCeoZPzZYkR74kW XcWBTqkewLKekiyCTXCP5xVgdxZ/GDkMP8FS48qlddVceyN/gio0vth6YwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLhlhdCLl+Z58IKL8QK+q1Hc2vqHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzg5MzZk YS1mMjBiLTQ1ZTctOTk0OC00ZmFkY2IxODJjNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvODkzNmRh LWYyMGItNDVlNy05OTQ4LTRmYWRjYjE4MmM1YS8xL3VHV0YwSXVYNW5ud2dvdnhB cjZyVWR6YS1vYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubScMA0EAgACMAcDBQMqCqmAMA0GCSqGSIb3 DQEBCwUAA4IBAQCccBg+PH7/CBsxD4SdfubOx4QWsNhw8z2lMLVUP8djBwLGEmSo O5UDCKl0fRueyNlrAB/EsDyQ3aW7zPmFlSsLFzTXdZnQbhtD4pZK/4O1NvbyNgxr /YWwIC/CVdBsHDqnclQwvGOaa3i3RKFYQ/YixmSzO2mLPkVBohhlyuJRct8HpYyh 4TcWKpA3EWeAAhafvt5JFgdODCZGo1ZRtahQbL5E5R9fKXs2lSc/HBxxy6DuaNd4 FXMEHds27EPnuuhMpmz/1UNyek1eLg/oWKihtWPRvGuDJVoDJZ0nSZRF5PF1dRxg cMMdoq/eKf5CBmKyJA/Sqa7Pca1t9rbmiDF6 -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:20 2026 by rpki-client