This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer File: uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer (raw, json) Hash identifier: g671narWKHZ+QghFDID4GHaV+xu5Ezpd1OPLIrdbrbk= Subject key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC948085BFCA4E381AA03F969740B5D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39906 IP: 5.59.0.0/16 IP: 77.104.192.0/18 IP: 80.82.144.0/20 IP: 81.92.144.0/20 IP: 94.138.96.0/19 IP: 178.23.232.0/21 IP: 185.67.132.0/22 IP: 2a02:da8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:48:08:5b:fc:a4:e3:81:aa:03:f9:69:74:0b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:9d:f4:1c:0f:80:46:ea:f0:94:71:7e:1d: 27:da:e8:47:fe:ab:6d:22:03:53:cf:c0:bd:f0:5a: d2:59:02:8d:f1:15:69:80:f8:67:17:61:e2:88:17: 8f:cd:72:b8:ec:97:f2:fe:65:b8:ba:e3:14:9f:5e: 53:cc:c1:f8:4b:90:8e:4d:64:ec:6b:e7:ae:eb:e5: 85:6e:9f:5f:4e:77:cc:1d:ed:33:b5:4b:a3:33:f3: d8:3b:44:46:81:10:25:84:0e:33:6f:30:9c:05:fd: 3e:a0:a6:57:aa:b9:6e:b2:0b:c4:03:db:53:4d:ee: 8e:d3:24:1d:ca:5c:27:d5:b9:d5:7e:c0:0d:34:e4: 08:28:ad:14:04:03:da:1b:fc:69:7b:db:40:b9:86: 5a:74:09:c5:c3:50:88:c4:d3:74:56:d9:d5:57:4f: f2:32:96:a4:c6:69:01:90:aa:50:4a:72:8c:cc:22: 05:44:fb:2b:dc:bf:ac:21:c6:48:e6:ad:81:22:47: a9:3d:4c:6d:e8:ce:fd:55:a4:6c:d9:8d:21:7c:47: 03:f2:2d:04:8f:af:94:18:da:44:9a:71:87:b6:91: f8:70:65:86:8e:d3:81:2b:fe:ad:a2:2c:5f:64:60: 8a:1b:67:3a:5d:70:cd:fa:ee:fd:4a:71:7a:e0:a1: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.0.0/16 77.104.192.0/18 80.82.144.0/20 81.92.144.0/20 94.138.96.0/19 178.23.232.0/21 185.67.132.0/22 IPv6: 2a02:da8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39906 Signature Algorithm: sha256WithRSAEncryption 98:65:07:a8:e0:1e:ca:bb:c2:47:26:15:4f:ce:1f:32:73:e2: 27:d2:4e:9f:e3:df:75:88:62:66:29:c4:d4:2c:5f:29:8a:f9: f4:30:19:53:80:8e:bf:f3:53:e3:e1:d5:bf:13:4d:c4:62:6a: 03:f3:e0:44:2d:dc:af:8f:47:93:f0:66:7c:37:4b:9c:5e:f9: 55:35:25:46:25:43:5f:41:40:c1:09:86:e9:89:ab:1f:08:1f: 7d:99:d6:b6:28:ee:0d:9b:3a:63:d8:ec:d3:2b:04:08:f5:d7: 04:2b:ba:05:eb:7b:46:d8:82:75:86:ec:ea:18:0b:d3:a6:3b: ec:f4:df:9a:41:e4:04:b3:01:7d:61:7c:eb:8f:7d:26:34:b3: 0e:af:48:54:ce:02:a4:92:7b:08:45:64:8c:1b:60:9b:b6:6a: f6:88:ca:23:a7:31:d1:cb:da:54:2a:18:7c:97:70:89:24:46: 40:43:f0:cd:cb:a5:2a:5e:e0:29:4f:f6:91:d7:35:d7:15:4e: 48:bd:35:67:b0:c1:28:26:6f:cd:b6:c1:2c:bb:ab:7a:bc:00: 7d:35:b6:c5:92:0c:2c:01:5b:48:8f:9b:c4:4f:ba:32:be:19: 34:ad:05:10:52:5b:a6:be:a9:31:92:99:22:bb:16:75:1b:9b: 0c:60:1f:2e -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt6yUgIW/yk44GqA/lpdAtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTQ4MTExOWFmZTFiZmYyMjlmYWNkNGVmOWM4YzYxYjBmYWJlYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO+d9BwPgEbq8JRxfh0n2uhH/qtt IgNTz8C98FrSWQKN8RVpgPhnF2HiiBePzXK47Jfy/mW4uuMUn15TzMH4S5COTWTs a+eu6+WFbp9fTnfMHe0ztUujM/PYO0RGgRAlhA4zbzCcBf0+oKZXqrlusgvEA9tT Te6O0yQdylwn1bnVfsANNOQIKK0UBAPaG/xpe9tAuYZadAnFw1CIxNN0VtnVV0/y MpakxmkBkKpQSnKMzCIFRPsr3L+sIcZI5q2BIkepPUxt6M79VaRs2Y0hfEcD8i0E j6+UGNpEmnGHtpH4cGWGjtOBK/6toixfZGCKG2c6XXDN+u79SnF64KGOgwIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFLlIERmv4b/yKfrNTvnIxhsPq+ryMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2NiMDAw Ny0zZWE5LTQ3NTktOGQ3MC05YjliY2UxNWUwYzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvY2IwMDA3 LTNlYTktNDc1OS04ZDcwLTliOWJjZTE1ZTBjNi8xL3VVZ1JHYV9odl9JcC1zMU8t Y2pHR3ctcjZ2SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFEGCCsGAQUF BwEHAQH/BEIwQDAvBAIAATApAwMABTsDBAZNaMADBARQUpADBARRXJADBAVeimAD BAOyF+gDBAK5Q4QwDQQCAAIwBwMFACoCDagwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDAJviMA0GCSqGSIb3DQEBCwUAA4IBAQCYZQeo4B7Ku8JHJhVPzh8yc+In0k6f 4991iGJmKcTULF8pivn0MBlTgI6/81Pj4dW/E03EYmoD8+BELdyvj0eT8GZ8N0uc XvlVNSVGJUNfQUDBCYbpiasfCB99mda2KO4Nmzpj2OzTKwQI9dcEK7oF63tG2IJ1 huzqGAvTpjvs9N+aQeQEswF9YXzrj30mNLMOr0hUzgKkknsIRWSMG2Cbtmr2iMoj pzHRy9pUKhh8l3CJJEZAQ/DNy6UqXuApT/aR1zXXFU5IvTVnsMEoJm/NtsEsu6t6 vAB9NbbFkgwsAVtIj5vET7oyvhk0rQUQUlumvqkxkpkiuxZ1G5sMYB8u -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:16 2026 by rpki-client