This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer (raw, json) Hash identifier: pXEm/0uwwSafPnse6tB0qDrx5luyzI71EvIUS7SUnVc= Subject key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA317CC9898B911D0FD9A4188669E28 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212441 IP: 77.232.36.0 -- 77.232.43.255 IP: 91.142.76.0/22 IP: 185.173.36.0/22 IP: 193.163.175.0/24 IP: 2a10:9200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:17:cc:98:98:b9:11:d0:fd:9a:41:88:66:9e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9930359b5469112e6e2bfae8595b05485551d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:7c:11:6c:e2:80:49:4c:99:eb:97:2c:17: 10:ef:8c:f6:69:db:33:65:ba:f1:ad:05:df:4c:af: 70:bb:f5:22:a8:02:79:78:60:26:6c:cc:25:3c:0a: 34:06:6b:36:65:44:95:58:78:58:6a:60:4e:05:db: d1:24:23:23:c1:16:9d:49:7c:b7:f5:96:9d:9b:ef: 2d:2e:c2:63:e6:dc:9d:48:5d:67:3b:b8:95:16:79: 22:21:e6:bf:49:80:0c:e3:d0:ee:53:c2:b0:be:9d: f1:0f:20:fd:3b:31:71:69:e4:5b:f5:46:aa:86:ff: 6a:09:39:21:af:9a:ad:e8:18:20:86:ad:b4:32:be: 42:72:be:5f:8c:f2:55:0c:ab:14:f2:ec:90:8a:b2: e9:ac:9d:1f:51:f6:12:c4:5e:88:81:ca:ce:25:cd: a2:fb:ad:d9:21:f5:b7:bf:ce:c9:cb:6f:87:a6:d4: 67:c6:c7:53:65:04:78:49:e2:47:b7:3e:ee:34:a0: 53:8c:86:57:63:02:7c:bd:d1:a4:3a:22:5e:a0:fe: e8:5f:b3:92:b8:b8:ac:17:fa:6d:b0:36:9c:4a:02: 5e:0a:3e:cf:60:3b:77:aa:dc:fc:ec:64:87:bf:28: 9b:47:cb:24:bf:fd:70:91:a6:1e:d6:86:a5:02:81: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.232.36.0-77.232.43.255 91.142.76.0/22 185.173.36.0/22 193.163.175.0/24 IPv6: 2a10:9200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212441 Signature Algorithm: sha256WithRSAEncryption a0:09:57:26:d0:74:0b:c4:0d:e7:e7:19:40:5b:e6:3f:a8:55: 43:cb:0f:bf:b0:5d:28:79:da:44:a0:9b:1b:50:49:35:96:98: 2a:f3:8b:6c:05:6c:28:e6:0a:61:f0:7e:c9:98:36:5d:df:37: 70:1f:a8:ec:8d:5a:89:d4:c7:43:59:e9:e5:44:ea:87:03:46: 37:49:43:90:0c:35:0f:dc:23:37:c3:5a:7a:2d:3b:a9:34:f8: 04:81:0e:e4:1e:29:53:be:c5:07:c7:13:ba:02:fb:f2:ae:01: c1:7c:90:3d:36:2e:a6:93:2c:34:30:53:9b:97:6b:f7:b7:a8: ab:89:00:8d:5e:65:c7:92:d9:58:35:af:8f:67:99:35:88:a3: 0f:66:2a:0d:11:14:42:5a:c2:dd:21:e3:6f:81:bb:d7:fc:df: ee:5d:88:10:62:e5:7d:45:eb:f8:55:cb:33:c6:28:59:28:7e: cf:e9:67:98:09:56:93:ea:92:91:2d:8f:4b:a2:7d:4f:de:7d: 31:d1:2f:f1:b2:39:f5:37:ce:fb:d9:89:bd:3e:31:b0:ec:89: a9:82:49:57:3b:01:38:fe:66:e1:d7:e2:8c:52:38:40:78:a9: 4c:74:f8:af:69:2e:23:a3:fa:e4:3f:cf:26:29:d2:7f:09:90: 74:9c:ff:a9 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAZt7oxfMmJi5EdD9mkGIZp4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTkzMDM1OWI1NDY5MTEyZTZlMmJmYWU4NTk1YjA1NDg1NTUxZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LN8EWzigElMmeuXLBcQ74z2adsz ZbrxrQXfTK9wu/UiqAJ5eGAmbMwlPAo0Bms2ZUSVWHhYamBOBdvRJCMjwRadSXy3 9Zadm+8tLsJj5tydSF1nO7iVFnkiIea/SYAM49DuU8Kwvp3xDyD9OzFxaeRb9Uaq hv9qCTkhr5qt6Bgghq20Mr5Ccr5fjPJVDKsU8uyQirLprJ0fUfYSxF6IgcrOJc2i +63ZIfW3v87Jy2+HptRnxsdTZQR4SeJHtz7uNKBTjIZXYwJ8vdGkOiJeoP7oX7OS uLisF/ptsDacSgJeCj7PYDt3qtz87GSHvyibR8skv/1wkaYe1oalAoEU5QIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFLmTA1m1RpES5uK/roWVsFSFVR03MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzE1MmVl Ny04ZDdhLTRlMTEtYjU5Mi1iZTVmMTI5ZWE4MWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvMTUyZWU3 LThkN2EtNGUxMS1iNTkyLWJlNWYxMjllYTgxYS8xL3VaTURXYlZHa1JMbTRyLXVo Wld3VklWVkhUYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgMAwDBAJN6CQDBAJN6CgDBAJbjkwDBAK5rSQDBADB o68wDQQCAAIwBwMFAyoQkgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAz3ZMA0G CSqGSIb3DQEBCwUAA4IBAQCgCVcm0HQLxA3n5xlAW+Y/qFVDyw+/sF0oedpEoJsb UEk1lpgq84tsBWwo5gph8H7JmDZd3zdwH6jsjVqJ1MdDWenlROqHA0Y3SUOQDDUP 3CM3w1p6LTupNPgEgQ7kHilTvsUHxxO6AvvyrgHBfJA9Ni6mkyw0MFObl2v3t6ir iQCNXmXHktlYNa+PZ5k1iKMPZioNERRCWsLdIeNvgbvX/N/uXYgQYuV9Rev4Vcsz xihZKH7P6WeYCVaT6pKRLY9Lon1P3n0x0S/xsjn1N8772Ym9PjGw7ImpgklXOwE4 /mbh1+KMUjhAeKlMdPivaS4jo/rkP88mKdJ/CZB0nP+p -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:24 2026 by rpki-client