This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer File: uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer (raw, json) Hash identifier: Zx1jB4QKCiejpHJjkL8dz0pdC5WItuUUoXpXZf+d2E8= Subject key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECDE87C76DDE4D5D29F48695402091 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.170.208.0/22 IP: 2a0a:68c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:de:87:c7:6d:de:4d:5d:29:f4:86:95:40:20:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bafed139df0fad6fde0d82869144104d204b92b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:70:a5:fc:64:a1:f0:f0:fd:6a:cc:43:ab: 34:d5:1f:ec:a0:cb:5d:de:8d:1c:ab:b6:26:a0:1c: 74:bd:85:fe:38:d4:c5:0b:76:05:b3:cf:97:43:23: 99:3b:ab:a7:f8:2b:23:57:9b:fb:a1:4b:d2:8f:b5: fa:18:da:b0:18:f1:1d:01:58:b4:b3:64:93:13:e2: d1:4a:b8:77:78:2c:33:1a:a9:b8:98:0f:0d:24:2c: c4:a9:17:45:c0:1c:e6:49:e3:e6:2b:2d:fb:25:79: 14:1a:dd:41:0d:b7:6d:1a:60:9c:45:e2:cb:9f:90: 77:1b:9c:b7:30:ef:4c:be:a7:ca:fe:27:23:3b:64: c8:e2:40:d1:a7:50:33:d5:3a:07:4f:48:92:3f:4b: df:61:b6:1f:df:a9:a6:b6:21:29:f9:80:19:65:c9: f1:e2:72:4b:89:7b:0a:27:52:99:e5:f0:44:fa:1b: 8c:9e:8c:e9:32:eb:a7:bd:94:8c:b8:c5:a6:33:8f: c4:d3:a6:62:3a:41:8a:c5:39:67:40:49:14:45:10: 8b:73:c5:7a:5e:b8:27:60:d0:f9:e9:85:81:e8:9f: 80:e6:5f:db:b0:82:5e:ad:fa:1e:70:2e:eb:dd:12: 3b:d3:a2:2c:9c:6f:f2:fd:63:c0:f1:7b:48:9f:15: 50:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.208.0/22 IPv6: 2a0a:68c0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:fb:6a:b9:7f:83:60:0b:bd:66:ec:c5:c7:0c:e5:be:c4:5e: b3:9a:a2:d5:8c:33:c1:d9:af:41:70:9e:a1:74:bd:e0:3a:9f: 9f:45:d4:a4:f9:fe:9b:b2:1b:74:e9:fd:f0:cd:6f:ca:4e:49: 07:45:d3:c9:ac:7c:26:0f:31:ec:be:47:c1:9f:ed:d4:89:6a: 43:cf:92:93:4f:4d:20:5d:38:61:5a:db:19:0a:d0:e0:e1:c6: 6c:ca:7a:54:87:77:18:16:97:34:6b:15:7a:80:c8:e4:86:ba: ef:12:8b:0a:9a:d8:70:06:b8:53:26:12:d7:9b:57:41:31:07: 9e:e2:74:77:45:54:19:b5:f1:54:52:89:ea:82:9e:ec:ce:ca: 3d:7f:69:6e:85:46:30:28:17:89:a2:1f:8c:c2:eb:eb:1b:b4: 06:87:6d:5d:5c:7e:32:49:af:59:f1:cf:b5:70:b6:54:64:99: da:95:b2:0b:6c:65:f8:44:94:f2:54:15:ba:98:6a:fc:90:33: 50:d0:8d:78:d0:14:36:71:43:ec:3f:f1:78:21:42:1b:b1:cc: 4e:c4:c1:b8:33:f2:e7:86:07:88:15:ab:8c:b3:1e:da:5b:67: e5:c2:e0:dd:6d:bc:b1:e4:8c:2c:4c:1a:fe:d1:86:6e:b1:00: 86:e0:b1:af -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57N6Hx23eTV0p9IaVQCCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWZlZDEzOWRmMGZhZDZmZGUwZDgyODY5MTQ0MTA0ZDIwNGI5MmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDlwpfxkofDw/WrMQ6s01R/soMtd 3o0cq7YmoBx0vYX+ONTFC3YFs8+XQyOZO6un+CsjV5v7oUvSj7X6GNqwGPEdAVi0 s2STE+LRSrh3eCwzGqm4mA8NJCzEqRdFwBzmSePmKy37JXkUGt1BDbdtGmCcReLL n5B3G5y3MO9MvqfK/icjO2TI4kDRp1Az1ToHT0iSP0vfYbYf36mmtiEp+YAZZcnx 4nJLiXsKJ1KZ5fBE+huMnozpMuunvZSMuMWmM4/E06ZiOkGKxTlnQEkURRCLc8V6 XrgnYND56YWB6J+A5l/bsIJerfoecC7r3RI706IsnG/y/WPA8XtInxVQ5QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFLr+0TnfD61v3g2ChpFEEE0gS5K1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2M1ODEx ZC0xZGEwLTRjMzItOWM0Yy1kODJhOTBlMzRjMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvYzU4MTFk LTFkYTAtNGMzMi05YzRjLWQ4MmE5MGUzNGMyZC8xL3V2N1JPZDhQcldfZURZS0dr VVFRVFNCTGtyVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuarQMA0EAgACMAcDBQAqCmjAMA0GCSqGSIb3 DQEBCwUAA4IBAQAO+2q5f4NgC71m7MXHDOW+xF6zmqLVjDPB2a9BcJ6hdL3gOp+f RdSk+f6bsht06f3wzW/KTkkHRdPJrHwmDzHsvkfBn+3UiWpDz5KTT00gXThhWtsZ CtDg4cZsynpUh3cYFpc0axV6gMjkhrrvEosKmthwBrhTJhLXm1dBMQee4nR3RVQZ tfFUUonqgp7szso9f2luhUYwKBeJoh+MwuvrG7QGh21dXH4ySa9Z8c+1cLZUZJna lbILbGX4RJTyVBW6mGr8kDNQ0I140BQ2cUPsP/F4IUIbscxOxMG4M/LnhgeIFauM sx7aW2flwuDdbbyx5IwsTBr+0YZusQCG4LGv -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:22 2026 by rpki-client