This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer File: uJUchRS33SGzM6uzPKyjxNrp1wk.cer (raw, json) Hash identifier: BIFADpQCiiMXhYkRw2BJy6/asulud0ZfpHkZmS6sTnQ= Subject key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED4FC3FF15B60A4EA8758174434C49 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.221.160.0/23 IP: 195.242.171.0/24 IP: 2001:67c:6b0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4f:c3:ff:15:b6:0a:4e:a8:75:81:74:43:4c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:3d:d8:ce:b5:e3:d0:f8:0f:52:f8:62:4f: 8f:eb:f2:d4:e4:52:89:36:3a:2f:e0:21:f1:58:42: b8:e9:50:18:37:8a:ee:d3:83:14:e8:f2:01:5d:58: 8c:f7:db:61:9a:0e:95:19:5a:c4:b0:f4:0c:08:1c: 50:2f:a7:2a:4f:2d:b5:e3:3a:d7:27:ed:fc:c1:cc: 5a:ad:d5:87:da:1c:19:80:06:ca:b5:cb:5c:d4:f4: 2e:9b:d6:c5:63:d2:6c:a8:bc:0a:65:df:5c:70:e3: 4f:da:65:cb:74:ca:4c:a5:db:1b:93:2b:fb:ee:e1: 6b:09:0c:da:38:75:d1:30:de:a7:15:fd:54:d9:72: 36:a8:e9:f7:0a:59:93:cf:04:8f:15:a3:8f:71:68: 0f:df:f7:79:9b:b1:8c:62:80:58:ca:6a:29:c6:fa: 75:a9:14:28:e7:3c:07:cf:49:ba:a1:10:a1:91:41: 69:4f:6b:88:07:ce:b2:35:3e:b5:91:8d:55:a9:49: 8e:89:a0:60:f6:91:ff:14:07:36:1d:c0:1b:cc:f8: fb:d3:59:ef:a5:2f:c1:4a:26:51:86:03:12:2b:a7: 5a:e9:2e:c1:85:24:9f:a4:ce:5b:d3:9b:80:93:59: 10:60:79:75:74:58:67:67:00:36:02:34:f7:65:4f: d7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.160.0/23 195.242.171.0/24 IPv6: 2001:67c:6b0::/48 Signature Algorithm: sha256WithRSAEncryption 9e:24:c4:2b:08:2f:d0:9b:28:a5:c6:4d:f2:85:99:a8:68:01: 25:d1:dd:ff:fb:2b:c6:a5:54:2c:b0:a4:f3:ae:4d:9b:91:14: 92:ec:d5:c2:e9:f6:a6:d9:23:fe:d8:3c:b1:47:80:f0:0d:15: 76:90:e0:d6:33:61:c7:3b:50:1f:40:06:20:71:38:d9:da:ad: 97:bb:75:0f:e4:f0:17:13:60:c1:3f:16:c6:ff:3e:ee:89:12: 5f:c0:3e:a2:aa:13:c2:1c:17:16:a5:8c:2b:c9:ff:e2:8b:f3: a6:02:1d:b6:82:78:bd:bf:e0:f7:37:71:eb:72:ae:ed:9a:18: 16:2c:05:c4:de:28:94:97:a6:be:b4:3b:56:34:9a:00:11:88: ae:1d:9f:c7:4a:51:7a:54:c8:23:3c:9b:a5:d0:26:3c:ae:b9: 07:33:5c:06:55:42:ce:52:85:e1:b8:35:6e:15:38:b9:36:da: 79:72:0f:e5:cc:ff:ea:81:da:8f:d1:e2:fe:2d:31:96:79:27: 32:68:8a:86:67:33:a6:a1:f9:91:f4:7d:a2:57:12:97:6e:39: a0:03:3d:2c:94:53:11:f5:93:0d:c0:be:5e:9f:4c:d3:a1:d6: 3a:2f:46:1d:5a:40:29:dc:cc:05:24:96:f8:47:72:60:06:11: 4c:28:8a:27 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt87U/D/xW2Ck6odYF0Q0xJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODk1MWM4NTE0YjdkZDIxYjMzM2FiYjMzY2FjYTNjNGRhZTlkNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEM92M6149D4D1L4Yk+P6/LU5FKJ Njov4CHxWEK46VAYN4ru04MU6PIBXViM99thmg6VGVrEsPQMCBxQL6cqTy214zrX J+38wcxardWH2hwZgAbKtctc1PQum9bFY9JsqLwKZd9ccONP2mXLdMpMpdsbkyv7 7uFrCQzaOHXRMN6nFf1U2XI2qOn3ClmTzwSPFaOPcWgP3/d5m7GMYoBYymopxvp1 qRQo5zwHz0m6oRChkUFpT2uIB86yNT61kY1VqUmOiaBg9pH/FAc2HcAbzPj701nv pS/BSiZRhgMSK6da6S7BhSSfpM5b05uAk1kQYHl1dFhnZwA2AjT3ZU/XuQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFLiVHIUUt90hszOrszyso8Ta6dcJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzY0MmVi Mi0zZmI5LTRmMGUtYmFmNC04Y2Q3OTUyN2U1MzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvNjQyZWIy LTNmYjktNGYwZS1iYWY0LThjZDc5NTI3ZTUzMC8xL3VKVWNoUlMzM1NHek02dXpQ S3lqeE5ycDF3ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQBW92gAwQAw/KrMA8EAgACMAkDBwAgAQZ8BrAw DQYJKoZIhvcNAQELBQADggEBAJ4kxCsIL9CbKKXGTfKFmahoASXR3f/7K8alVCyw pPOuTZuRFJLs1cLp9qbZI/7YPLFHgPANFXaQ4NYzYcc7UB9ABiBxONnarZe7dQ/k 8BcTYME/Fsb/Pu6JEl/APqKqE8IcFxaljCvJ/+KL86YCHbaCeL2/4Pc3cetyru2a GBYsBcTeKJSXpr60O1Y0mgARiK4dn8dKUXpUyCM8m6XQJjyuuQczXAZVQs5SheG4 NW4VOLk22nlyD+XM/+qB2o/R4v4tMZZ5JzJoioZnM6ah+ZH0faJXEpduOaADPSyU UxH1kw3Avl6fTNOh1jovRh1aQCnczAUklvhHcmAGEUwoiic= -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:03 2026 by rpki-client