This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer File: uaxJ0czcrt2aE_SAPfGu3ObcERI.cer (raw, json) Hash identifier: uxxMLrY2JDfHA9dRUjLZOj2KgijVEZXuWIBtfzIhcJ4= Subject key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A53047109A4D8B904CC86C6E43B4757CB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 05 Nov 2025 07:56:31 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 48863 AS: 52157 AS: 61275 IP: 5.100.176.0/20 IP: 77.223.160.0/19 IP: 85.93.224.0/19 IP: 91.135.48.0/20 IP: 93.89.112.0/20 IP: 178.248.96.0/21 IP: 185.3.0.0/22 IP: 185.24.188.0/22 IP: 185.80.156.0/22 IP: 185.193.92.0/22 IP: 185.209.224.0/22 IP: 185.237.36.0/22 IP: 188.93.184.0/21 IP: 213.138.160.0/19 IP: 2a02:25e8::/29 IP: 2a03:ba00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:04:71:09:a4:d8:b9:04:cc:86:c6:e4:3b:47:57:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 5 07:56:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:89:9f:c8:09:7a:89:04:2d:e4:63:48:65: 79:87:01:32:8d:df:4e:53:e4:61:50:42:f8:f5:ae: cb:7f:a1:41:33:4b:d7:61:82:63:33:19:61:5c:57: 1f:7f:28:93:79:37:db:71:74:85:a9:ae:a8:3b:fc: c2:b8:64:c8:98:f8:36:a7:5d:25:eb:9a:af:c6:18: 3c:c7:c0:d1:2b:46:b9:54:e5:83:a0:51:f6:66:1b: 37:29:98:39:48:43:20:08:a3:2b:7e:6d:95:d4:ce: 64:75:81:c1:da:63:b5:24:e9:a4:40:e2:04:ec:99: cb:ca:50:74:a4:b6:12:3a:52:2e:9b:c1:cc:84:56: 1c:10:8a:42:66:84:9d:6d:52:c5:cd:e1:9e:17:44: 3d:2f:35:5f:05:0c:4c:e4:ba:9a:f6:dd:57:6a:60: 5f:19:16:93:63:fc:c7:5f:ca:9b:75:25:b5:6a:42: 19:eb:5e:87:af:be:fb:2d:cd:f9:b8:6d:b7:b0:51: 2b:85:04:78:52:5d:2a:5c:44:01:8a:eb:50:aa:e6: 0a:f4:9f:03:52:2b:12:91:d8:9e:09:19:4e:36:63: 4a:17:38:8a:5a:f7:3e:68:81:ab:1f:5a:f5:ab:93: a1:56:b6:53:54:ae:62:82:c1:14:5f:20:5b:c6:77: ba:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.100.176.0/20 77.223.160.0/19 85.93.224.0/19 91.135.48.0/20 93.89.112.0/20 178.248.96.0/21 185.3.0.0/22 185.24.188.0/22 185.80.156.0/22 185.193.92.0/22 185.209.224.0/22 185.237.36.0/22 188.93.184.0/21 213.138.160.0/19 IPv6: 2a02:25e8::/29 2a03:ba00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48863 52157 61275 Signature Algorithm: sha256WithRSAEncryption a8:01:52:03:48:8d:e9:3c:a3:bb:07:32:e1:18:71:14:04:34: 24:2e:34:ee:25:c1:ec:9d:f9:30:73:5c:c0:ce:88:d1:9f:b2: cf:ae:ff:4c:a9:1a:fc:4f:3f:23:f7:10:f6:da:72:d8:14:41: 12:83:53:3d:98:db:a4:f1:76:8d:9a:04:ed:09:dc:47:61:21: 29:b9:77:43:59:d6:96:20:0a:24:50:f8:dc:3f:5c:fa:20:b7: d3:eb:99:2c:8f:8e:26:81:b5:da:0d:b5:2f:8f:96:e7:9a:c0: 29:f6:94:24:2f:6a:5b:b9:f7:c7:26:31:7f:75:ff:9d:02:e4: 86:93:34:9c:e1:68:1e:8d:7a:c4:d4:fe:84:35:82:ca:fb:7c: 5c:8e:4a:9a:01:01:b2:f8:2f:a3:31:3e:bc:4b:eb:8c:48:54: a3:0f:44:8e:9a:5e:dd:0c:33:f6:3f:48:72:7b:a0:53:54:43: ef:ef:35:85:10:7c:79:8f:d6:0f:3d:0e:1b:c3:21:d8:79:b7: 77:bb:6a:2c:dc:b2:7a:6e:04:dd:f0:c1:e1:67:83:69:e7:d7: cc:75:01:43:97:7c:33:47:85:b7:71:8a:f9:97:58:bb:f9:33: 70:5c:da:10:e6:dc:6c:56:c3:e4:4e:38:58:96:0c:2f:3f:03: 06:00:73:15 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZpTBHEJpNi5BMyGxuQ7R1fLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA1MDc1NjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWFjNDlkMWNjZGNhZWRkOWExM2Y0ODAzZGYxYWVkY2U2ZGMxMTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylyJn8gJeokELeRjSGV5hwEyjd9O U+RhUEL49a7Lf6FBM0vXYYJjMxlhXFcffyiTeTfbcXSFqa6oO/zCuGTImPg2p10l 65qvxhg8x8DRK0a5VOWDoFH2Zhs3KZg5SEMgCKMrfm2V1M5kdYHB2mO1JOmkQOIE 7JnLylB0pLYSOlIum8HMhFYcEIpCZoSdbVLFzeGeF0Q9LzVfBQxM5Lqa9t1XamBf GRaTY/zHX8qbdSW1akIZ616Hr777Lc35uG23sFErhQR4Ul0qXEQBiutQquYK9J8D UisSkdieCRlONmNKFziKWvc+aIGrH1r1q5OhVrZTVK5igsEUXyBbxne68wIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFLmsSdHM3K7dmhP0gD3xrtzm3BESMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzUzNzE5 MS0xMTc5LTQ4ZWMtYWQ5Zi1mZmU0M2E1MmQzZjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNTM3MTkx LTExNzktNDhlYy1hZDlmLWZmZTQzYTUyZDNmNi8xL3VheEowY3pjcnQyYUVfU0FQ Zkd1M09iY0VSSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF BQcBBwEB/wR0MHIwWgQCAAEwVAMEBAVksAMEBU3foAMEBVVd4AMEBFuHMAMEBF1Z cAMEA7L4YAMEArkDAAMEArkYvAMEArlQnAMEArnBXAMEArnR4AMEArntJAMEA7xd uAMEBdWKoDAUBAIAAjAOAwUDKgIl6AMFAyoDugAwJAYIKwYBBQUHAQgBAf8EFTAT oBEwDwIDAL7fAgMAy70CAwDvWzANBgkqhkiG9w0BAQsFAAOCAQEAqAFSA0iN6Tyj uwcy4RhxFAQ0JC407iXB7J35MHNcwM6I0Z+yz67/TKka/E8/I/cQ9tpy2BRBEoNT PZjbpPF2jZoE7QncR2EhKbl3Q1nWliAKJFD43D9c+iC30+uZLI+OJoG12g21L4+W 55rAKfaUJC9qW7n3xyYxf3X/nQLkhpM0nOFoHo16xNT+hDWCyvt8XI5KmgEBsvgv ozE+vEvrjEhUow9Ejppe3Qwz9j9IcnugU1RD7+81hRB8eY/WDz0OG8Mh2Hm3d7tq LNyyem4E3fDB4WeDaefXzHUBQ5d8M0eFt3GK+ZdYu/kzcFzaEObcbFbD5E44WJYM Lz8DBgBzFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:11:52 2025 by rpki-client