This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer File: uRRkdndz8SObZGu2a9z09_sSBs4.cer (raw, json) Hash identifier: DwA3h/+wTSRhObLUm6nzb7m5gBrWSCeKJI5kY8fR19w= Subject key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA11C9D26E46C6FECF9F045B1F8C9F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203735 IP: 91.192.4.0/22 IP: 2a0c:64c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:11:c9:d2:6e:46:c6:fe:cf:9f:04:5b:1f:8c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5c:0f:13:f9:b2:23:cd:26:80:15:a8:a4:ea: d0:7c:d8:70:97:3a:30:60:b4:a3:a2:52:4d:18:e8: c7:b1:4b:71:c9:70:31:98:ac:d5:9b:dc:cf:8a:46: bc:3a:2b:cb:81:f7:45:48:be:ab:18:cd:61:85:79: 2d:61:a0:9e:d9:34:53:db:84:1b:bb:7d:cb:8c:88: b7:b0:a9:00:2d:c4:43:fc:7e:7c:a3:f1:8c:b6:7c: c9:7b:96:14:52:41:68:83:73:dd:c6:82:45:be:05: 01:6e:34:5c:ca:66:72:f0:26:b4:35:17:22:df:d9: c6:04:25:ff:a9:9e:47:be:d8:5f:fe:24:7c:d7:c5: f1:a4:53:06:57:5e:64:a8:5a:fb:32:48:60:e6:bd: df:45:d5:08:68:5e:d3:9a:ac:3f:d2:a6:46:33:9e: c5:55:be:e2:b1:e9:f1:36:59:31:10:f0:15:e0:6e: bd:08:7b:79:66:b6:28:26:1f:b7:c6:df:db:7c:15: d9:62:e2:43:ea:39:39:3e:b1:c7:73:4f:26:4c:b1: 4a:7e:35:b5:46:9e:91:92:4e:f9:0d:33:8a:fe:fc: 34:49:2f:d2:18:bf:66:f6:44:56:3b:dd:12:29:8d: 1f:bc:5f:a0:7c:ac:ef:ca:1b:69:b2:e6:98:5c:b5: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.4.0/22 IPv6: 2a0c:64c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203735 Signature Algorithm: sha256WithRSAEncryption 25:89:10:cd:6b:4a:7d:18:06:22:7d:1d:da:48:3c:52:8f:3a: 15:29:82:34:ce:12:d3:86:86:8f:66:a4:e4:84:83:e5:65:4a: 18:1c:6d:c8:14:27:a3:7e:34:38:96:2c:2c:33:7c:fe:ad:94: 91:b9:e8:34:f7:ac:a0:5e:c2:23:8e:f6:d3:e6:cf:fa:3a:c6: 21:61:0b:6a:0d:98:9e:bb:b2:d4:8d:89:7c:55:55:d7:6f:3f: 9a:c9:bd:0c:b6:1d:ba:9c:54:5f:70:5d:ee:c9:7e:1a:2b:46: ab:c7:33:30:dc:1e:35:23:3d:38:14:86:04:2b:ce:21:d4:cb: ad:a0:32:95:b7:ea:b2:90:56:73:05:1f:ab:e8:a7:60:a6:eb: 41:96:e8:aa:c1:3d:db:64:7e:80:53:6f:9a:d6:0b:7b:5a:ef: 25:dd:90:a8:cd:8a:26:db:d5:11:06:e0:ff:c8:9d:c4:66:36: f7:a5:d3:82:fc:b1:b2:88:f8:61:9a:a7:7e:0a:74:fe:24:7e: 4b:a4:2d:c2:4e:6e:c8:09:b4:55:da:57:d3:8a:48:93:c3:91: cc:da:9c:4d:ba:ed:3e:7b:6f:8e:42:14:93:b3:a7:4a:83:17: cb:1f:45:fc:c0:e0:41:57:81:e8:8b:7e:f2:f0:5f:b6:db:e2: 50:ef:17:f7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yhHJ0m5Gxv7PnwRbH4yfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTE0NjQ3Njc3NzNmMTIzOWI2NDZiYjY2YmRjZjRmN2ZiMTIwNmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FwPE/myI80mgBWopOrQfNhwlzow YLSjolJNGOjHsUtxyXAxmKzVm9zPika8OivLgfdFSL6rGM1hhXktYaCe2TRT24Qb u33LjIi3sKkALcRD/H58o/GMtnzJe5YUUkFog3PdxoJFvgUBbjRcymZy8Ca0NRci 39nGBCX/qZ5Hvthf/iR818XxpFMGV15kqFr7Mkhg5r3fRdUIaF7Tmqw/0qZGM57F Vb7isenxNlkxEPAV4G69CHt5ZrYoJh+3xt/bfBXZYuJD6jk5PrHHc08mTLFKfjW1 Rp6Rkk75DTOK/vw0SS/SGL9m9kRWO90SKY0fvF+gfKzvyhtpsuaYXLXf7QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLkUZHZ3c/Ejm2Rrtmvc9Pf7EgbOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzEzZmNk MS1kODA2LTRlNTYtODUzMy00NzVkYmJiMGMwOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMTNmY2Qx LWQ4MDYtNGU1Ni04NTMzLTQ3NWRiYmIwYzA4Yy8xL3VSUmtkbmR6OFNPYlpHdTJh OXowOV9zU0JzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCW8AEMA0EAgACMAcDBQMqDGTAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMb1zANBgkqhkiG9w0BAQsFAAOCAQEAJYkQzWtKfRgG In0d2kg8Uo86FSmCNM4S04aGj2ak5ISD5WVKGBxtyBQno340OJYsLDN8/q2Ukbno NPesoF7CI4720+bP+jrGIWELag2Ynruy1I2JfFVV128/msm9DLYdupxUX3Bd7sl+ GitGq8czMNweNSM9OBSGBCvOIdTLraAylbfqspBWcwUfq+inYKbrQZboqsE922R+ gFNvmtYLe1rvJd2QqM2KJtvVEQbg/8idxGY296XTgvyxsoj4YZqnfgp0/iR+S6Qt wk5uyAm0VdpX04pIk8ORzNqcTbrtPntvjkIUk7OnSoMXyx9F/MDgQVeB6It+8vBf ttviUO8X9w== -----END CERTIFICATE-----Generated at Sun Jan 25 15:10:17 2026 by rpki-client