This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer File: uHu_jlx0pSa6r2GFq9lJ2vqPbcs.cer (raw, json) Hash identifier: naQxM/PZTsFK4hN3bVFDo2fEPHxZlSCzZRtc0KPPGcY= Subject key identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77588006A49F607A09B536AC4FEF20FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 85.158.232.0/21 IP: 2a02:21d8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:80:06:a4:9f:60:7a:09:b5:36:ac:4f:ef:20:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b87bbf8e5c74a526baaf6185abd949dafa8f6dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:17:3b:06:d4:9b:d1:9f:95:f2:5e:d0:e1: 42:a6:d6:27:04:76:3d:b3:96:2e:ad:ee:b9:99:a7: c8:82:71:2c:8e:02:f3:24:74:d1:16:66:e3:5d:e3: 8e:d3:cc:f7:3a:41:a7:8f:1c:67:43:0e:39:0e:ef: 5c:3a:28:da:06:23:0f:9b:a8:94:ac:02:ec:f5:47: 18:f3:8e:f0:40:b6:6d:45:af:bd:48:5b:c8:64:00: 70:14:12:54:a1:5f:52:3b:4e:5b:8f:af:77:0e:9f: b4:85:89:b5:b8:4b:34:8d:cf:06:21:6e:5c:98:39: e6:72:1e:9a:7d:77:58:65:5f:42:25:db:1d:5b:ec: a9:4d:3e:22:28:6d:e5:33:54:a6:d8:f5:91:2f:ea: 88:24:3b:66:89:2b:c5:1c:00:96:2f:b3:c5:6f:38: 14:ac:de:1e:ff:da:f1:e4:5f:6c:1e:69:19:23:d9: 06:50:7e:6d:4d:87:23:8f:31:50:78:17:ae:4a:29: 2b:01:0b:e9:f9:ab:71:e5:df:6e:b0:74:30:fb:29: 3d:c7:e0:13:24:97:2a:32:6d:15:16:b6:77:c8:29: 0e:12:88:29:3a:60:68:f1:e5:e0:61:c7:a3:9b:aa: c0:ed:d5:1a:c6:90:a7:a8:8b:5c:1d:95:c3:27:a3: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7B:BF:8E:5C:74:A5:26:BA:AF:61:85:AB:D9:49:DA:FA:8F:6D:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/808be1-a690-45e9-900e-5390f9f83620/1/uHu_jlx0pSa6r2GFq9lJ2vqPbcs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.232.0/21 IPv6: 2a02:21d8::/32 Signature Algorithm: sha256WithRSAEncryption 04:32:18:01:cc:8d:45:3c:17:e6:29:59:51:36:df:44:c6:d1: ba:c5:3f:ce:bf:51:87:75:a2:e0:fd:be:7e:ee:a8:9d:28:3c: 4b:61:e9:94:12:b9:8b:65:8c:57:7f:39:78:29:2b:e2:86:ae: 2b:2d:0c:27:74:5e:c6:6b:4b:e3:69:b2:9d:ce:a4:03:14:55: c2:ce:81:62:be:f4:70:15:53:22:27:e9:ca:3d:e5:56:a9:88: 37:0f:a2:aa:9d:36:b7:70:58:50:37:2f:f6:e7:24:ec:07:f6: 7e:7e:f6:f6:73:76:85:1a:c9:a4:d6:0b:ee:d0:05:67:ac:33: b2:71:a4:20:72:25:60:5f:e3:8d:99:0b:77:4e:bf:67:4b:df: 7c:7e:19:a3:fb:24:c1:fa:f8:83:4c:dd:6a:d4:80:9b:a5:8c: 82:ec:52:59:dd:9e:6d:93:04:27:31:14:64:70:3c:fc:f5:bf: bc:ac:e2:8d:3d:a9:bc:7b:3f:55:9b:0f:22:d2:82:cb:d3:be: c4:7b:56:11:cb:6a:24:dd:d2:36:ec:1f:ad:99:9e:6d:99:ab: 77:32:e5:35:3e:4f:97:c1:b1:d5:8a:ae:2e:be:1a:2a:54:5c: 04:01:d0:6a:ac:75:55:67:04:0d:dd:07:f5:b6:e5:be:8f:5b: d2:8a:2b:6e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WIAGpJ9gegm1NqxP7yD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODdiYmY4ZTVjNzRhNTI2YmFhZjYxODVhYmQ5NDlkYWZhOGY2ZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlsXOwbUm9GflfJe0OFCptYnBHY9 s5Yure65mafIgnEsjgLzJHTRFmbjXeOO08z3OkGnjxxnQw45Du9cOijaBiMPm6iU rALs9UcY847wQLZtRa+9SFvIZABwFBJUoV9SO05bj693Dp+0hYm1uEs0jc8GIW5c mDnmch6afXdYZV9CJdsdW+ypTT4iKG3lM1Sm2PWRL+qIJDtmiSvFHACWL7PFbzgU rN4e/9rx5F9sHmkZI9kGUH5tTYcjjzFQeBeuSikrAQvp+atx5d9usHQw+yk9x+AT JJcqMm0VFrZ3yCkOEogpOmBo8eXgYcejm6rA7dUaxpCnqItcHZXDJ6MV0QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLh7v45cdKUmuq9hhavZSdr6j23LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzgwOGJl MS1hNjkwLTQ1ZTktOTAwZS01MzkwZjlmODM2MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvODA4YmUx LWE2OTAtNDVlOS05MDBlLTUzOTBmOWY4MzYyMC8xL3VIdV9qbHgwcFNhNnIyR0Zx OWxKMnZxUGJjcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDVZ7oMA0EAgACMAcDBQAqAiHYMA0GCSqGSIb3 DQEBCwUAA4IBAQAEMhgBzI1FPBfmKVlRNt9ExtG6xT/Ov1GHdaLg/b5+7qidKDxL YemUErmLZYxXfzl4KSvihq4rLQwndF7Ga0vjabKdzqQDFFXCzoFivvRwFVMiJ+nK PeVWqYg3D6KqnTa3cFhQNy/25yTsB/Z+fvb2c3aFGsmk1gvu0AVnrDOycaQgciVg X+ONmQt3Tr9nS998fhmj+yTB+viDTN1q1ICbpYyC7FJZ3Z5tkwQnMRRkcDz89b+8 rOKNPam8ez9Vmw8i0oLL077Ee1YRy2ok3dI27B+tmZ5tmat3MuU1Pk+XwbHViq4u vhoqVFwEAdBqrHVVZwQN3Qf1tuW+j1vSiitu -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:39 2026 by rpki-client