This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer (raw, json) Hash identifier: IroKCGYuUTFRzemBP7h9MQOKhbftxxE4LtneDt+zSgs= Subject key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA393433E114EF57261693E6C022836 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12813 IP: 212.11.224.0/19 IP: 2a00:1278::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:93:43:3e:11:4e:f5:72:61:69:3e:6c:02:28:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bb:c5:d2:3a:6b:3b:5e:17:97:cc:94:d1:20: c2:61:99:01:c1:2f:6b:57:f3:08:0b:da:c5:05:06: cf:91:0d:8f:22:93:9f:34:19:a2:0a:c4:83:92:c4: 70:ce:46:ca:a4:79:b3:8b:00:85:8b:23:41:c8:31: 33:7e:22:65:35:22:ad:f8:01:71:5b:f5:68:f9:14: c0:9f:75:d7:17:0f:db:ed:20:b8:d8:e5:10:19:7e: d5:53:7f:b9:06:0c:e2:67:ec:b4:6a:b9:1d:5f:1e: c6:d1:07:84:f6:86:ec:b5:18:b0:b5:12:09:e3:7a: de:9d:e2:1d:51:9a:f8:49:37:7e:f5:2f:7e:b1:17: 26:da:a0:17:b9:f4:61:39:bb:7c:3b:c9:dc:25:69: d0:59:56:ed:a0:a6:37:1d:2d:58:ac:c5:a9:24:6c: 2d:af:36:cf:05:86:fc:09:c4:37:a7:db:ef:b4:c2: 68:63:73:3e:d0:72:f3:36:31:c8:7c:6d:3a:2b:f3: 6b:54:f7:b2:14:7b:a8:6c:94:b7:54:57:bb:d4:15: f0:b8:5d:01:60:57:1b:bc:0a:38:81:6d:fd:48:b0: 5d:c3:9e:8b:d1:f3:86:8e:23:d4:9a:6c:07:41:de: 67:a7:f9:2e:77:a9:9a:7c:4f:26:7b:27:6b:3c:4b: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.11.224.0/19 IPv6: 2a00:1278::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12813 Signature Algorithm: sha256WithRSAEncryption 96:17:fa:48:25:35:ce:9f:76:62:95:6d:4c:23:b8:92:6a:54: b3:42:96:b8:aa:48:a4:91:30:30:43:95:5d:a1:5e:5c:13:51: 1d:8e:47:28:79:d4:14:c3:ec:f5:dd:0d:37:47:fe:9e:f6:60: fd:b0:fa:ad:b9:11:54:cb:42:1b:71:7f:c0:a9:d6:09:79:96: 97:2e:75:f2:3b:78:dc:b3:b3:98:05:cc:60:da:32:b6:f8:a1: 57:ec:c6:ca:b4:7c:46:71:99:e2:ad:9e:dd:a2:19:6d:d1:b3: 7f:09:4d:cb:f8:45:1f:f3:aa:7e:c9:aa:49:2d:14:aa:3e:75: b6:7a:61:cf:be:a1:71:72:ab:74:ee:4c:d7:97:91:83:a0:52: 93:f4:03:c6:4c:6a:ac:f1:f0:15:49:c5:cd:19:8d:63:77:4f: 84:ef:e5:b5:13:98:ce:1a:c1:bf:2d:45:a7:ff:c1:e1:f1:7b: d7:91:44:9e:26:36:25:17:71:02:39:63:42:7b:07:5b:bd:f2: 00:5b:77:29:d8:a8:84:fc:ba:c5:d9:84:af:76:46:c0:e8:bb: 28:74:e1:bc:86:98:25:d6:5b:82:41:f4:cf:0d:5b:03:d6:71: 3c:00:6f:4e:d4:0e:94:8a:82:b6:8d:5a:53:b8:96:82:90:d8: e9:5d:dd:6a -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt7o5NDPhFO9XJhaT5sAig2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDI2NGMzZjA5ODMxY2NkODg5NzEyZjRmYWI1YzViMWJlMGNhZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rvF0jprO14Xl8yU0SDCYZkBwS9r V/MIC9rFBQbPkQ2PIpOfNBmiCsSDksRwzkbKpHmziwCFiyNByDEzfiJlNSKt+AFx W/Vo+RTAn3XXFw/b7SC42OUQGX7VU3+5BgziZ+y0arkdXx7G0QeE9obstRiwtRIJ 43reneIdUZr4STd+9S9+sRcm2qAXufRhObt8O8ncJWnQWVbtoKY3HS1YrMWpJGwt rzbPBYb8CcQ3p9vvtMJoY3M+0HLzNjHIfG06K/NrVPeyFHuobJS3VFe71BXwuF0B YFcbvAo4gW39SLBdw56L0fOGjiPUmmwHQd5np/kud6mafE8meydrPEsNKwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFFAmTD8JgxzNiJcS9Pq1xbG+DK1WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzAxODM1 Zi01MDRmLTQ1YmQtYTA1Mi03MTRmOTYyNmQwMjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvMDE4MzVm LTUwNGYtNDViZC1hMDUyLTcxNGY5NjI2ZDAyMS8xL1VDWk1Qd21ESE0ySWx4TDAt clhGc2I0TXJWWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQF1AvgMA0EAgACMAcDBQAqABJ4MBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjINMA0GCSqGSIb3DQEBCwUAA4IBAQCWF/pIJTXOn3Zi lW1MI7iSalSzQpa4qkikkTAwQ5VdoV5cE1EdjkcoedQUw+z13Q03R/6e9mD9sPqt uRFUy0IbcX/AqdYJeZaXLnXyO3jcs7OYBcxg2jK2+KFX7MbKtHxGcZnirZ7dohlt 0bN/CU3L+EUf86p+yapJLRSqPnW2emHPvqFxcqt07kzXl5GDoFKT9APGTGqs8fAV ScXNGY1jd0+E7+W1E5jOGsG/LUWn/8Hh8XvXkUSeJjYlF3ECOWNCewdbvfIAW3cp 2KiE/LrF2YSvdkbA6LsodOG8hpgl1luCQfTPDVsD1nE8AG9O1A6UioK2jVpTuJaC kNjpXd1q -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:55 2026 by rpki-client