This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer File: uhfrfV8E0nFV8gF4bzkPtAimquQ.cer (raw, json) Hash identifier: qwDGyR7HrmYz6TZT/3DxiHU7mcpX4r7iiwmMl4CLJb0= Subject key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB99AD60EAE1F97AF2F144811F7CB5B02 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 13 Jan 2026 23:04:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 213.177.186.0/24 IP: 2a14:6340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b9:9a:d6:0e:ae:1f:97:af:2f:14:48:11:f7:cb:5b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 13 23:04:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:80:a8:9b:a2:17:70:fb:27:3c:92:56:be: 7f:14:3a:e6:25:5f:b5:cb:ab:45:92:39:de:56:6c: 00:02:3f:3d:e0:1b:83:78:10:18:ae:af:33:72:3f: f0:c1:22:04:4c:9b:82:21:99:3c:83:d6:b4:c9:1f: 82:16:4f:30:29:c2:9e:67:45:1b:5c:81:c5:2d:03: d1:b5:e8:cf:27:76:50:4f:c1:cd:e4:f5:54:50:2c: 72:ff:e1:23:5a:24:fc:04:c1:7f:07:5a:1d:d5:b9: a7:97:b1:80:5b:ce:a0:ca:17:9e:db:26:85:4c:b0: e9:79:3f:34:1d:6f:4b:c8:e0:79:c1:84:e9:73:35: 96:2b:62:7a:f2:cc:bf:6e:67:16:ef:91:00:d3:4d: 4b:23:ee:2d:c2:10:b7:a5:75:83:5f:dd:71:56:bb: 72:ce:56:94:ac:3a:80:3e:ce:b9:a7:7d:3b:dd:5c: a6:eb:c5:fd:eb:b6:3a:9b:01:c6:d9:76:2a:ef:62: 26:58:38:d8:c5:56:59:07:25:8f:43:64:a8:ee:29: 73:3f:90:0c:d0:71:94:3e:f4:be:a6:7a:5f:85:8f: 2d:c1:de:c5:e5:d8:b4:ac:c5:74:e4:54:eb:e1:67: ff:ab:53:67:01:14:27:1c:da:39:4c:e0:33:f9:14: 96:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.186.0/24 IPv6: 2a14:6340::/29 Signature Algorithm: sha256WithRSAEncryption 2b:a9:66:a0:9a:06:18:56:6f:26:b3:dd:1c:85:ea:c3:71:35: a1:bd:fb:8e:d2:9b:c1:dd:78:86:3c:04:ec:15:1b:5f:94:1b: b1:14:1e:f7:76:22:66:e2:5b:93:3d:a5:c9:8b:8e:39:e1:f5: 80:c3:d1:f6:a9:91:e0:cc:96:9f:62:ee:80:49:35:25:a8:8d: 51:42:a5:d5:9c:93:ce:b8:8b:d4:13:de:28:c8:9a:25:e4:50: 62:df:7b:00:38:05:f4:6e:30:e6:ff:e0:be:ea:73:8f:e0:c1: db:c1:11:a0:f7:0c:91:2c:7f:f9:63:4b:d1:f3:df:d2:b1:a3: 92:5d:de:8b:8e:8b:63:5b:b9:9c:54:97:4b:dc:b1:4c:cf:45: 1e:67:bf:09:e3:9a:75:bc:94:89:38:db:02:8a:f9:b7:91:b1: 00:f5:84:aa:d9:96:46:cf:97:7c:22:f6:f2:1a:f2:81:5d:bd: 2c:96:30:b7:10:b8:5f:72:8b:ac:12:53:ce:d5:f1:44:a9:68: 0e:03:e5:63:08:37:ca:0a:d8:04:e9:bd:d9:ce:3a:f4:ec:88: f8:09:79:d5:a0:88:ea:3b:63:b7:f1:ce:8c:0f:4e:c9:77:b4: 7b:48:2f:7d:d9:41:e5:c4:0d:04:c0:0a:7f:58:b0:57:ec:5b: 34:cc:6d:cd -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZu5mtYOrh+Xry8USBH3y1sCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEzMjMwNDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTE3ZWI3ZDVmMDRkMjcxNTVmMjAxNzg2ZjM5MGZiNDA4YTZhYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aOAqJuiF3D7JzySVr5/FDrmJV+1 y6tFkjneVmwAAj894BuDeBAYrq8zcj/wwSIETJuCIZk8g9a0yR+CFk8wKcKeZ0Ub XIHFLQPRtejPJ3ZQT8HN5PVUUCxy/+EjWiT8BMF/B1od1bmnl7GAW86gyhee2yaF TLDpeT80HW9LyOB5wYTpczWWK2J68sy/bmcW75EA001LI+4twhC3pXWDX91xVrty zlaUrDqAPs65p3073Vym68X967Y6mwHG2XYq72ImWDjYxVZZByWPQ2So7ilzP5AM 0HGUPvS+pnpfhY8twd7F5di0rMV05FTr4Wf/q1NnARQnHNo5TOAz+RSWswIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLoX631fBNJxVfIBeG85D7QIpqrkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzEzZDE3 NS1mNjc1LTRiMmUtYTRiMC0zMGFlMTI2NDY0ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvMTNkMTc1 LWY2NzUtNGIyZS1hNGIwLTMwYWUxMjY0NjRmNy8xL3VoZnJmVjhFMG5GVjhnRjRi emtQdEFpbXF1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1bG6MA0EAgACMAcDBQMqFGNAMA0GCSqGSIb3 DQEBCwUAA4IBAQArqWagmgYYVm8ms90cherDcTWhvfuO0pvB3XiGPATsFRtflBux FB73diJm4luTPaXJi4454fWAw9H2qZHgzJafYu6ASTUlqI1RQqXVnJPOuIvUE94o yJol5FBi33sAOAX0bjDm/+C+6nOP4MHbwRGg9wyRLH/5Y0vR89/SsaOSXd6Ljotj W7mcVJdL3LFMz0UeZ78J45p1vJSJONsCivm3kbEA9YSq2ZZGz5d8IvbyGvKBXb0s ljC3ELhfcousElPO1fFEqWgOA+VjCDfKCtgE6b3Zzjr07Ij4CXnVoIjqO2O38c6M D07Jd7R7SC992UHlxA0EwAp/WLBX7Fs0zG3N -----END CERTIFICATE-----Generated at Mon Jan 26 09:41:05 2026 by rpki-client