This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer File: uNr6fqVTF4Ez5-hP7risOp28-co.cer (raw, json) Hash identifier: uUiuh4mwmXSzaKfJmSKF5njBMavse1TtjjwoN1M3TMQ= Subject key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E2FC33E19E07C727361E4ACC275F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208124 AS: 211627 AS: 212679 IP: 91.209.161.0/24 IP: 185.160.205.0/24 IP: 2a10:b240::/29 IP: 2a10:c4c0::/29 IP: 2a12:8840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e2:fc:33:e1:9e:07:c7:27:36:1e:4a:cc:27:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e6:57:21:39:29:87:49:1c:bf:c8:41:ed:e9: 41:e1:59:56:f2:4f:e5:d3:e2:80:ec:d5:87:d4:e5: f8:94:54:1c:26:5e:dd:f2:a0:16:61:9d:fc:53:86: 36:f4:4a:24:77:0c:0d:94:45:07:be:de:bb:fd:60: ba:ad:18:86:63:63:e5:f4:ac:b6:53:42:91:7e:17: a6:a9:91:30:d1:2e:f0:ee:02:15:7c:99:f4:e9:98: 94:11:28:65:82:1c:e7:01:5c:10:ad:ba:47:0b:55: 8d:81:74:da:6a:3c:57:ce:82:fd:54:4e:b6:37:63: 34:23:c8:68:46:11:9a:30:af:30:11:d0:96:a8:7f: f6:ec:6c:04:94:ff:6b:e4:63:7a:90:1e:56:aa:bf: 21:da:87:e6:30:42:05:ef:3a:7a:17:4b:3e:04:aa: 46:9a:f1:83:07:b4:22:46:62:21:42:4b:fa:34:6b: 63:20:b3:4d:c7:0c:66:19:00:21:92:bc:12:ce:6a: a0:96:75:3d:41:15:6b:e5:30:8d:14:91:c8:9b:9f: a6:d7:b5:e3:08:ba:ff:9d:48:91:70:bd:ac:22:45: e4:7a:d4:26:49:0f:4d:b4:e8:11:f7:cb:fd:8d:39: e6:96:21:04:0f:3c:de:82:14:1e:a4:b9:78:78:8c: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.161.0/24 185.160.205.0/24 IPv6: 2a10:b240::/29 2a10:c4c0::/29 2a12:8840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208124 211627 212679 Signature Algorithm: sha256WithRSAEncryption 75:e3:9d:0a:74:4e:8e:07:fc:f1:f2:9e:4b:c3:f7:1f:71:35: ca:6c:42:92:0c:d5:54:f0:21:b9:2d:1d:3a:38:fa:6c:1a:7a: 96:60:b6:91:2a:73:dc:87:76:f1:e6:6e:54:22:50:d3:b7:2f: ec:21:94:e9:49:b3:da:82:fd:6b:74:69:ff:90:13:9b:4f:81: 42:86:08:77:7e:46:a9:67:7d:3b:8e:72:3f:b1:79:36:ee:78: d6:ac:dd:4b:f5:65:d7:43:f0:32:48:9a:5b:83:78:08:c3:de: 2b:2b:86:9c:b2:31:ad:ef:a2:bd:07:2f:41:94:93:13:37:b7: 7b:9c:c6:2e:75:d8:93:d2:a5:10:1a:01:ec:cb:e1:68:98:c2: d9:7b:ae:bf:bf:98:8b:61:bb:52:9a:4e:8a:b4:ac:30:65:e1: 2e:f3:67:e5:90:27:f5:7b:4e:c3:29:19:c9:58:c5:07:c5:27: ef:8b:df:ec:55:c6:97:4a:b1:a0:4a:3c:49:46:0d:21:de:8f: b7:5f:d2:51:fa:78:3b:ef:a2:3a:f2:38:90:23:ce:ac:9b:eb: aa:21:6e:b7:f8:49:4c:7d:29:4e:c9:80:af:4c:78:36:38:ba: 8d:c4:b9:71:f4:93:c3:53:47:52:23:8e:32:ab:36:2d:71:d1: 44:df:42:b5 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt7NeL8M+GeB8cnNh5KzCdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGRhZmE3ZWE1NTMxNzgxMzNlN2U4NGZlZWI4YWMzYTlkYmNmOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+ZXITkph0kcv8hB7elB4VlW8k/l 0+KA7NWH1OX4lFQcJl7d8qAWYZ38U4Y29EokdwwNlEUHvt67/WC6rRiGY2Pl9Ky2 U0KRfhemqZEw0S7w7gIVfJn06ZiUEShlghznAVwQrbpHC1WNgXTaajxXzoL9VE62 N2M0I8hoRhGaMK8wEdCWqH/27GwElP9r5GN6kB5Wqr8h2ofmMEIF7zp6F0s+BKpG mvGDB7QiRmIhQkv6NGtjILNNxwxmGQAhkrwSzmqglnU9QRVr5TCNFJHIm5+m17Xj CLr/nUiRcL2sIkXketQmSQ9NtOgR98v9jTnmliEEDzzeghQepLl4eIwPUwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFLja+n6lUxeBM+foT+64rDqdvPnKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2Y1N2I5 My1kMjUzLTRmYmItYTMxZS02Yjg5ZmE0Njc1N2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvZjU3Yjkz LWQyNTMtNGZiYi1hMzFlLTZiODlmYTQ2NzU3Yy8xL3VOcjZmcVZURjRFejUtaFA3 cmlzT3AyOC1jby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTASBAIAATAMAwQAW9GhAwQAuaDNMBsEAgACMBUDBQMqELJAAwUD KhDEwAMFAyoSiEAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAyz8AgMDOqsCAwM+ xzANBgkqhkiG9w0BAQsFAAOCAQEAdeOdCnROjgf88fKeS8P3H3E1ymxCkgzVVPAh uS0dOjj6bBp6lmC2kSpz3Id28eZuVCJQ07cv7CGU6Umz2oL9a3Rp/5ATm0+BQoYI d35GqWd9O45yP7F5Nu541qzdS/Vl10PwMkiaW4N4CMPeKyuGnLIxre+ivQcvQZST Eze3e5zGLnXYk9KlEBoB7MvhaJjC2Xuuv7+Yi2G7UppOirSsMGXhLvNn5ZAn9XtO wykZyVjFB8Un74vf7FXGl0qxoEo8SUYNId6Pt1/SUfp4O++iOvI4kCPOrJvrqiFu t/hJTH0pTsmAr0x4Nji6jcS5cfSTw1NHUiOOMqs2LXHRRN9CtQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:35:35 2026 by rpki-client