This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UBgkf7zuOIV32aTE3_wTdEYb-Jo.cer File: UBgkf7zuOIV32aTE3_wTdEYb-Jo.cer (raw, json) Hash identifier: 97MMIzOWDkYTaHDwy35oZg+yxcMfGgVfcR6EHlSOnJQ= Subject key identifier: 50:18:24:7F:BC:EE:38:85:77:D9:A4:C4:DF:FC:13:74:46:1B:F8:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B9D512502E2C53302CC3FADB5641E5AC9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/UBgkf7zuOIV32aTE3_wTdEYb-Jo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 08 Jan 2026 11:14:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.152.236.0/22 IP: 193.53.96.0/23 IP: 193.53.104.0/23 IP: 2a0f:6b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:51:25:02:e2:c5:33:02:cc:3f:ad:b5:64:1e:5a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 8 11:14:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5018247fbcee388577d9a4c4dffc1374461bf89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:ac:f8:a1:6c:2a:1b:30:99:04:31:32:13: 9e:1f:75:0b:5c:0a:42:88:09:82:2a:3e:2b:6f:a4: 92:53:20:ec:91:58:26:1a:68:86:c1:d0:80:5b:9f: 8e:fb:bf:55:43:c9:db:16:77:1b:e6:6e:22:6a:b7: 9a:4f:6e:d9:b3:a3:64:1a:0c:ee:d3:bf:22:df:6c: 3d:6b:23:78:51:46:47:22:9c:39:da:0c:da:57:61: ce:cf:5a:96:2a:7e:31:a8:ff:10:14:43:8c:52:a4: b9:a0:48:03:c2:8e:06:db:68:68:92:24:1e:18:da: fe:31:1f:b4:84:5c:50:85:a5:e8:17:66:bf:d4:a8: e9:55:24:f6:69:c3:6a:6a:0f:b1:53:b5:8d:a3:30: ee:01:2b:65:30:a8:5c:fa:21:6a:e3:68:df:79:3a: 61:0e:cc:fb:51:a8:c7:93:0b:8f:1b:48:72:9a:84: 34:7d:98:67:bf:bd:16:c7:f0:08:6c:bc:20:f6:3b: a2:61:0a:b8:97:63:16:b9:99:c0:61:1d:de:77:04: 69:9d:47:58:72:4d:d6:0b:16:01:16:77:59:b8:6f: f0:3c:09:af:1a:8b:00:f8:37:5c:1b:52:be:31:a8: 23:12:d6:53:7c:ae:b6:dd:4a:84:35:38:a4:a8:fe: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:18:24:7F:BC:EE:38:85:77:D9:A4:C4:DF:FC:13:74:46:1B:F8:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/150033-06ed-474f-a9e9-9162feb43a0a/1/UBgkf7zuOIV32aTE3_wTdEYb-Jo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.236.0/22 193.53.96.0/23 193.53.104.0/23 IPv6: 2a0f:6b00::/29 Signature Algorithm: sha256WithRSAEncryption 9b:42:ff:d2:b3:99:65:6f:31:e9:46:76:df:f9:4b:1e:b4:61: 9b:f4:47:b7:e5:ac:08:18:3b:c3:81:57:49:db:df:6b:fb:75: 4d:3a:5e:b7:5e:9c:38:33:98:dd:3d:93:4a:13:21:bf:fc:05: dc:ad:f7:5a:86:e1:e7:78:29:b4:96:c0:c7:e7:04:f7:c6:ae: c2:26:e3:87:c5:0a:82:ce:18:6e:f2:ae:85:dc:31:85:b6:ef: bc:e1:38:0a:d2:fb:95:b9:8a:03:d8:30:c6:54:f9:7c:43:5f: 20:e0:60:f7:ad:5e:80:68:2e:86:2c:8f:9d:1e:eb:09:20:0d: dc:76:09:6e:59:50:05:bc:64:ab:80:8b:85:91:2d:fe:3a:17: ed:d7:3d:94:36:a1:17:ca:13:d1:cf:36:65:81:1c:f4:a7:8a: 6d:46:f8:29:b4:34:bb:5b:59:2b:31:d5:3b:b9:61:9b:60:1c: 28:d6:96:a1:6a:8f:a5:71:46:fc:20:83:0a:50:8c:a1:b8:79: 0c:37:61:d4:cb:ce:09:ea:c0:c2:62:88:7a:56:8a:f1:b9:be: 01:cc:b6:6f:5d:de:c8:46:68:e2:17:78:66:79:cb:42:a1:0b: a7:28:06:26:5f:40:b2:ef:98:d8:5e:6b:d6:93:03:bb:a1:ce: 4d:d2:18:07 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZudUSUC4sUzAsw/rbVkHlrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTA4MTExNDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDE4MjQ3ZmJjZWUzODg1NzdkOWE0YzRkZmZjMTM3NDQ2MWJmODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZGs+KFsKhswmQQxMhOeH3ULXApC iAmCKj4rb6SSUyDskVgmGmiGwdCAW5+O+79VQ8nbFncb5m4iareaT27Zs6NkGgzu 078i32w9ayN4UUZHIpw52gzaV2HOz1qWKn4xqP8QFEOMUqS5oEgDwo4G22hokiQe GNr+MR+0hFxQhaXoF2a/1KjpVST2acNqag+xU7WNozDuAStlMKhc+iFq42jfeTph Dsz7UajHkwuPG0hymoQ0fZhnv70Wx/AIbLwg9juiYQq4l2MWuZnAYR3edwRpnUdY ck3WCxYBFndZuG/wPAmvGosA+DdcG1K+MagjEtZTfK623UqENTikqP7I1QIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFAYJH+87jiFd9mkxN/8E3RGG/iaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzE1MDAz My0wNmVkLTQ3NGYtYTllOS05MTYyZmViNDNhMGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvMTUwMDMz LTA2ZWQtNDc0Zi1hOWU5LTkxNjJmZWI0M2EwYS8xL1VCZ2tmN3p1T0lWMzJhVEUz X3dUZEVZYi1Kby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLZjsAwQBwTVgAwQBwTVoMA0EAgACMAcDBQMq D2sAMA0GCSqGSIb3DQEBCwUAA4IBAQCbQv/Ss5llbzHpRnbf+UsetGGb9Ee35awI GDvDgVdJ299r+3VNOl63Xpw4M5jdPZNKEyG//AXcrfdahuHneCm0lsDH5wT3xq7C JuOHxQqCzhhu8q6F3DGFtu+84TgK0vuVuYoD2DDGVPl8Q18g4GD3rV6AaC6GLI+d HusJIA3cdgluWVAFvGSrgIuFkS3+Ohft1z2UNqEXyhPRzzZlgRz0p4ptRvgptDS7 W1krMdU7uWGbYBwo1pahao+lcUb8IIMKUIyhuHkMN2HUy84J6sDCYoh6Vorxub4B zLZvXd7IRmjiF3hmectCoQunKAYmX0Cy75jYXmvWkwO7oc5N0hgH -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:42 2026 by rpki-client