This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer (raw, json) Hash identifier: dh+fW4JUetB/GM54IIyUSjWIexEsg09mnWFODkz4Vtg= Subject key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC94438E060735ABD920E2FB6EE55E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.89.223.0/24 IP: 2a14:1d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:44:38:e0:60:73:5a:bd:92:0e:2f:b6:ee:55:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:6f:0f:73:51:23:48:f5:a2:7e:3c:c4:64: b1:c2:10:c3:05:4d:2a:61:28:9a:11:c6:66:5f:d7: 81:31:a6:6a:a2:52:03:a2:42:76:04:d1:54:51:c6: 4f:61:a2:e3:e9:48:d3:84:d8:ff:c2:50:07:1c:cd: da:d6:a3:3f:a8:c0:7a:e3:6f:48:2f:2f:20:e8:6a: b0:69:91:e7:78:ac:f0:fd:ca:8a:4d:f3:44:2e:4b: 13:d9:36:34:4e:41:ea:18:65:d3:53:a3:c2:8c:2d: 02:d1:64:d1:67:6f:83:9b:3f:a0:9a:ed:23:30:0e: 53:98:97:82:fc:b9:61:97:cb:1c:98:51:a3:cc:9b: 28:af:8b:f8:a2:30:ca:e5:60:87:60:54:25:8a:93: 24:12:fd:6f:37:7a:61:e7:dd:2a:78:9a:27:cf:2f: 80:6e:f5:f5:d5:b5:26:77:a9:a1:80:00:29:b9:14: 25:91:04:02:5e:a4:6c:3e:a2:cc:41:65:86:01:12: 95:26:5e:fc:62:c8:3f:27:8f:c2:45:0b:1f:53:a8: c1:66:fa:04:e2:ff:9e:5b:b6:62:e2:3e:ca:59:96: 23:18:f4:d8:5e:b7:82:6f:8d:3a:7e:42:96:a1:a5: 8f:e5:56:3f:95:37:59:a1:6d:b1:3b:bd:16:62:82: 56:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.223.0/24 IPv6: 2a14:1d40::/29 Signature Algorithm: sha256WithRSAEncryption 9a:aa:16:c2:27:24:f5:6f:a9:11:4e:a4:4c:02:d5:bd:31:e7: 57:e2:ef:46:2a:a4:44:2b:d3:82:4d:da:ef:a7:e8:4a:bb:f6: 2e:6b:35:3f:6e:52:4f:75:de:3a:6c:ca:5d:9c:65:f3:65:6d: 87:54:ae:18:17:28:27:68:bd:dd:72:4c:29:d8:ab:90:18:7b: 8a:d6:49:1f:d4:25:70:1a:82:5f:38:b0:60:5c:8f:26:cd:ec: c1:83:f5:b2:ed:3c:2e:d8:51:ca:68:55:47:be:54:22:93:f6: 01:7e:a0:ed:2b:39:55:f2:36:c1:2b:1b:ae:0a:aa:d5:05:48: f1:73:64:67:9c:00:98:b3:9e:6d:7b:64:2f:30:65:3e:e4:dc: 65:71:9c:61:d1:ed:d9:f1:bc:bd:ba:56:18:72:fb:f5:63:3c: 71:31:42:27:c2:30:36:58:78:fc:04:26:fc:c8:70:6f:1f:31: 6a:3e:b1:18:af:d4:90:7e:df:1e:48:ed:59:c3:9a:62:0a:d7: 34:5c:4f:90:32:16:1b:e5:e4:5b:9c:50:c4:c0:82:08:4b:3f: 60:33:e1:07:08:7e:72:8f:fd:cf:d9:17:a2:55:c1:26:f8:c0: 61:99:88:10:54:72:72:aa:cc:45:94:63:ca:86:e8:22:89:49: 92:b5:9d:36 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6yUQ44GBzWr2SDi+27lXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTNkNDkwOGQ5YzQzYTg1Zjg1YmUxOTMzNGEyNmY1ZDUxMzUwYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGlvD3NRI0j1on48xGSxwhDDBU0q YSiaEcZmX9eBMaZqolIDokJ2BNFUUcZPYaLj6UjThNj/wlAHHM3a1qM/qMB6429I Ly8g6GqwaZHneKzw/cqKTfNELksT2TY0TkHqGGXTU6PCjC0C0WTRZ2+Dmz+gmu0j MA5TmJeC/Llhl8scmFGjzJsor4v4ojDK5WCHYFQlipMkEv1vN3ph590qeJonzy+A bvX11bUmd6mhgAApuRQlkQQCXqRsPqLMQWWGARKVJl78Ysg/J4/CRQsfU6jBZvoE 4v+eW7Zi4j7KWZYjGPTYXreCb406fkKWoaWP5VY/lTdZoW2xO70WYoJWEQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLk9SQjZxDqF+FvhkzSib11RNQvLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI1LzFkN2Iw Yy0yMjUxLTRkZDMtODY5MC01Mjg3NDYxMWNkMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUvMWQ3YjBj LTIyNTEtNGRkMy04NjkwLTUyODc0NjExY2QyMS8xL3VUMUpDTm5FT29YNFctR1RO S0p2WFZFMUM4cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALVnfMA0EAgACMAcDBQMqFB1AMA0GCSqGSIb3 DQEBCwUAA4IBAQCaqhbCJyT1b6kRTqRMAtW9MedX4u9GKqREK9OCTdrvp+hKu/Yu azU/blJPdd46bMpdnGXzZW2HVK4YFygnaL3dckwp2KuQGHuK1kkf1CVwGoJfOLBg XI8mzezBg/Wy7Twu2FHKaFVHvlQik/YBfqDtKzlV8jbBKxuuCqrVBUjxc2RnnACY s55te2QvMGU+5NxlcZxh0e3Z8by9ulYYcvv1YzxxMUInwjA2WHj8BCb8yHBvHzFq PrEYr9SQft8eSO1Zw5piCtc0XE+QMhYb5eRbnFDEwIIISz9gM+EHCH5yj/3P2Rei VcEm+MBhmYgQVHJyqsxFlGPKhugiiUmStZ02 -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:40 2026 by rpki-client