This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer File: uTDaIVGBhBRfbXYhtaE71UA1rIM.cer (raw, json) Hash identifier: 93Y1XREOgxUm1y+g1Bf5S8v7C4l9JgevgzlkuraNy+g= Subject key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834D7781108319BCB68ABDBA075167B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202876 IP: 185.152.28.0/22 IP: 2a07:7d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d7:78:11:08:31:9b:cb:68:ab:db:a0:75:16:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b930da21518184145f6d7621b5a13bd54035ac83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:93:89:91:63:6b:f1:d2:6d:71:d9:c4:1f: ee:eb:e8:00:ab:81:09:2f:73:8e:0e:6b:d5:c3:7f: 4b:55:6d:fb:63:7e:93:53:7d:0b:a3:35:92:35:d8: 53:81:e3:7b:03:f2:c0:2e:68:21:d0:6d:89:36:5f: 1b:1e:cf:c1:05:da:c4:4d:c1:33:56:94:64:92:c6: 9d:73:09:1d:b1:be:b8:c1:59:3d:bc:9e:9c:86:86: 92:ab:93:29:a3:60:25:22:02:df:f8:2e:36:5c:d2: 5c:a8:4a:83:83:7c:dc:48:6a:a0:b9:92:67:d8:0b: d5:be:cc:88:7a:1b:1b:30:65:2d:04:65:1f:d5:fb: 6b:98:fe:44:8e:54:12:df:e0:d0:b3:61:2d:f4:fb: c0:a7:8a:a2:41:62:5d:92:b8:22:70:64:bf:21:f3: 09:04:58:84:de:df:be:86:e3:22:3b:fb:20:be:f0: 16:fc:55:e0:d4:10:6c:0e:ee:f8:29:9f:54:f0:84: 34:db:2e:0f:61:38:90:c1:79:99:6a:bb:eb:4e:1e: 9c:c2:79:72:bd:cc:ae:8d:a6:8d:2e:4a:4c:50:26: 1d:1c:73:d5:d5:7d:9d:1b:73:94:8d:40:b1:ab:06: f9:2d:50:01:f5:c5:7f:52:db:79:da:8d:02:b2:8a: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.28.0/22 IPv6: 2a07:7d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202876 Signature Algorithm: sha256WithRSAEncryption 2e:d3:6f:2c:58:c5:65:1c:2c:d5:94:06:21:3c:b6:09:35:07: 91:4b:01:9d:4e:c0:d7:ed:ad:2f:f7:85:63:05:4b:62:b9:72: 1f:7e:1c:6d:8f:a8:cb:2a:21:7e:e6:8a:ff:87:b6:61:02:49: 1f:b2:e4:f5:46:6c:47:48:6e:93:85:11:63:5d:e0:9e:18:fd: 39:59:e8:86:42:e0:12:11:82:e4:c9:58:d6:ee:2e:a6:d8:bd: 8d:59:64:b5:48:0e:92:9b:21:7f:21:ee:86:0d:55:73:be:19: 8d:3f:ee:8c:19:6a:49:a0:d8:4f:c0:4d:93:2c:c9:b9:e4:e7: ca:70:30:7d:5d:a5:2f:2c:e9:e0:94:c8:a1:c6:e5:57:d8:46: 40:f3:59:18:e7:10:51:b0:d2:da:5c:e3:84:1e:6f:57:da:7b: 98:68:2a:1b:01:8b:97:c9:fd:9d:21:ef:e0:cd:5f:81:3f:cf: 75:94:7d:6f:44:4f:d9:86:60:f7:6b:7c:9c:69:d2:1f:f5:c0: d1:10:9b:e7:b7:fb:99:0b:a1:35:d9:20:04:c4:e9:89:26:e1: ed:a6:4f:c2:60:25:11:57:ff:a5:18:c9:44:0f:21:7a:9c:08: 78:d5:f0:64:63:ae:88:e2:ae:d8:c7:f4:25:8f:01:4c:0f:56: a9:57:07:90 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NNd4EQgxm8toq9ugdRZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTMwZGEyMTUxODE4NDE0NWY2ZDc2MjFiNWExM2JkNTQwMzVhYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzeTiZFja/HSbXHZxB/u6+gAq4EJ L3OODmvVw39LVW37Y36TU30LozWSNdhTgeN7A/LALmgh0G2JNl8bHs/BBdrETcEz VpRkksadcwkdsb64wVk9vJ6choaSq5Mpo2AlIgLf+C42XNJcqEqDg3zcSGqguZJn 2AvVvsyIehsbMGUtBGUf1ftrmP5EjlQS3+DQs2Et9PvAp4qiQWJdkrgicGS/IfMJ BFiE3t++huMiO/sgvvAW/FXg1BBsDu74KZ9U8IQ02y4PYTiQwXmZarvrTh6cwnly vcyujaaNLkpMUCYdHHPV1X2dG3OUjUCxqwb5LVAB9cV/Utt52o0CsopyJwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLkw2iFRgYQUX212IbWhO9VANayDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzQ3MGNk YS1kMGVjLTQzMjMtYWU5Yi05OTRhZjVjMzQ0MDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNDcwY2Rh LWQwZWMtNDMyMy1hZTliLTk5NGFmNWMzNDQwMi8xL3VURGFJVkdCaEJSZmJYWWh0 YUU3MVVBMXJJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZgcMA0EAgACMAcDBQMqB31AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYfDANBgkqhkiG9w0BAQsFAAOCAQEALtNvLFjFZRws 1ZQGITy2CTUHkUsBnU7A1+2tL/eFYwVLYrlyH34cbY+oyyohfuaK/4e2YQJJH7Lk 9UZsR0huk4URY13gnhj9OVnohkLgEhGC5MlY1u4upti9jVlktUgOkpshfyHuhg1V c74ZjT/ujBlqSaDYT8BNkyzJueTnynAwfV2lLyzp4JTIocblV9hGQPNZGOcQUbDS 2lzjhB5vV9p7mGgqGwGLl8n9nSHv4M1fgT/PdZR9b0RP2YZg92t8nGnSH/XA0RCb 57f7mQuhNdkgBMTpiSbh7aZPwmAlEVf/pRjJRA8hepwIeNXwZGOuiOKu2Mf0JY8B TA9WqVcHkA== -----END CERTIFICATE-----Generated at Mon Jan 26 19:37:31 2026 by rpki-client