This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer (raw, json) Hash identifier: licVw9XZ66nI0aSSY8QQLzxoTCkfo4j6HdVv0JPWeuE= Subject key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA5B992EFEF39B59CE0A24736EFE4A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.97.0.0/16 IP: 69.62.64.0/18 IP: 72.60.0.0 -- 72.62.255.255 IP: 76.13.0.0/16 IP: 103.199.184.0/22 IP: 148.222.52.0/22 IP: 148.230.64.0/18 IP: 168.231.64.0/18 IP: 194.164.148.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:b9:92:ef:ef:39:b5:9c:e0:a2:47:36:ef:e4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:70:1b:37:4d:72:d9:14:c5:d8:56:3e:71: e7:27:8c:5e:cd:71:a8:20:7b:e0:9a:2b:3d:b1:f9: 40:a7:b2:fc:a9:d7:e1:fa:e0:2f:84:f0:da:ac:7d: a0:c3:7d:50:0b:54:96:d4:94:f6:7a:7c:42:a3:ef: 1f:a2:7d:b1:4a:0b:f3:fb:22:15:00:19:9d:0f:52: 69:bb:2c:66:be:d5:89:8b:a1:6d:3f:ff:f7:ef:98: 2d:56:45:c0:c1:33:17:91:8f:f0:e2:91:e3:33:e3: a3:30:ac:5c:b3:e3:c9:90:78:f0:cf:82:75:bb:a7: af:2a:ce:57:f8:d1:81:0e:aa:df:a5:e8:19:0d:64: 4a:0a:2d:e6:d4:58:ed:41:32:21:5e:b0:59:8a:4b: 4a:4f:d4:ec:47:3a:31:c2:34:02:79:6e:fd:69:f6: cf:03:6e:1a:db:29:83:92:5f:14:57:40:41:fb:13: 3c:1b:81:0e:45:53:19:24:22:07:f7:eb:b3:bc:78: 22:83:cf:70:ec:7e:5f:5f:0b:0a:06:14:1a:d8:ea: 9f:01:06:ee:71:19:06:bd:05:03:67:ba:5f:6d:1d: c0:68:7d:1a:e5:da:ea:98:d8:11:fe:bf:08:89:a9: 5e:33:89:6c:2f:fc:5d:a6:79:c9:a1:67:64:50:01: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.97.0.0/16 69.62.64.0/18 72.60.0.0-72.62.255.255 76.13.0.0/16 103.199.184.0/22 148.222.52.0/22 148.230.64.0/18 168.231.64.0/18 194.164.148.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:c1:ed:23:3d:01:fc:2a:d5:27:b5:6d:f6:c3:0d:cd:60:7b: ee:53:3d:33:48:37:87:03:fd:05:9b:0f:3f:42:8b:26:50:7c: 7b:f4:1c:d0:aa:8d:62:e6:a8:1c:c4:0b:e3:e5:9a:f8:65:b4: 55:b0:31:b3:84:7d:e3:a9:43:91:25:5c:b8:d6:75:a6:b1:eb: d8:d3:41:a7:77:4b:00:ee:c2:25:34:ac:8c:c8:58:4c:19:2d: 50:aa:07:5b:c1:58:a8:5d:3e:af:ab:cb:c7:34:c1:44:be:b7: af:c0:ec:fe:e4:56:77:89:b3:ca:6e:00:7f:1c:00:71:bc:16: 23:ac:b3:d2:31:02:82:38:50:c8:cd:45:a6:a1:36:a8:93:af: 54:bb:eb:8b:73:a4:39:2d:43:1c:e3:65:5e:3e:e7:d9:8d:6d: 42:0c:e8:35:82:66:c6:c3:fb:23:06:4c:cd:d9:7d:8f:ac:5b: 60:fa:48:a6:c3:77:85:76:95:23:2f:69:c3:c3:32:48:23:1c: be:89:d9:62:eb:26:ee:43:8b:f2:ab:c4:df:f8:54:b8:c5:1f: a2:58:04:6f:3e:1d:2a:c1:ca:de:94:34:a2:5e:5b:0e:b5:6e: ee:71:d3:c9:33:a4:10:da:3b:8d:16:44:b8:6d:c8:ea:f1:3d: 91:74:c9:4a -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt+pbmS7+85tZzgokc27+SpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTE0MTY2YjY4NWFjMDE1Yjk0MTI2Y2RiOGIxOGM4M2ExMmVkODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTFwGzdNctkUxdhWPnHnJ4xezXGo IHvgmis9sflAp7L8qdfh+uAvhPDarH2gw31QC1SW1JT2enxCo+8fon2xSgvz+yIV ABmdD1JpuyxmvtWJi6FtP//375gtVkXAwTMXkY/w4pHjM+OjMKxcs+PJkHjwz4J1 u6evKs5X+NGBDqrfpegZDWRKCi3m1FjtQTIhXrBZiktKT9TsRzoxwjQCeW79afbP A24a2ymDkl8UV0BB+xM8G4EORVMZJCIH9+uzvHgig89w7H5fXwsKBhQa2OqfAQbu cRkGvQUDZ7pfbR3AaH0a5drqmNgR/r8IialeM4lsL/xdpnnJoWdkUAGNGwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFLkUFmtoWsAVuUEmzbixjIOhLthiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiL2QzYmU3 MC1kZGYxLTQ4ZjUtODY2Zi1lYTY3YTk4NjI1ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvZDNiZTcw LWRkZjEtNDhmNS04NjZmLWVhNjdhOTg2MjVmZS8xL3VSUVdhMmhhd0JXNVFTYk51 TEdNZzZFdTJHSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjBABAIAATA6AwMAH2EDBAZFPkAwCgMDAkg8AwMASD4DAwBMDQME AmfHuAMEApTeNAMEBpTmQAMEBqjnQAMEAsKklDANBgkqhkiG9w0BAQsFAAOCAQEA ncHtIz0B/CrVJ7Vt9sMNzWB77lM9M0g3hwP9BZsPP0KLJlB8e/Qc0KqNYuaoHMQL 4+Wa+GW0VbAxs4R946lDkSVcuNZ1prHr2NNBp3dLAO7CJTSsjMhYTBktUKoHW8FY qF0+r6vLxzTBRL63r8Ds/uRWd4mzym4AfxwAcbwWI6yz0jECgjhQyM1FpqE2qJOv VLvri3OkOS1DHONlXj7n2Y1tQgzoNYJmxsP7IwZMzdl9j6xbYPpIpsN3hXaVIy9p w8MySCMcvonZYusm7kOL8qvE3/hUuMUfolgEbz4dKsHK3pQ0ol5bDrVu7nHTyTOk ENo7jRZEuG3I6vE9kXTJSg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:39 2026 by rpki-client