This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer File: UF4vLV5wk_-NQAOgK30-ExznChI.cer (raw, json) Hash identifier: ++sXvNtUYWnlVJfoEKOrxVi0Y9Pd6fXWiCH2/I1y1tM= Subject key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE0D34B116A427AB8C31FF8D29E487 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.255.240.0/22 IP: 2a02:2150::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0d:34:b1:16:a4:27:ab:8c:31:ff:8d:29:e4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:66:05:b8:a6:54:1d:14:e6:a4:8b:a7:12: ac:d2:16:3e:5c:aa:cc:98:6b:a6:f6:cc:cd:81:fd: ba:44:95:1d:a9:f0:c1:68:6b:15:6a:1a:73:68:8c: 01:39:09:43:27:55:54:4c:3f:75:db:b9:c3:c9:8c: 24:62:d1:f5:90:35:71:ac:90:61:ad:48:1b:10:80: bc:a9:46:e3:47:7e:05:d6:5f:b4:70:f1:bc:42:56: 0d:33:e8:ab:4e:02:41:20:76:6e:c4:81:ba:5e:90: dc:cb:f8:1f:f8:df:24:27:7b:5d:35:3a:22:4e:d5: 19:90:99:de:ca:ac:1d:23:a5:f5:5f:b7:34:74:4f: 9a:d5:f2:63:b0:89:4a:17:ea:03:21:44:35:d3:46: 17:39:75:c2:6c:21:2f:90:99:97:ee:db:30:78:b7: 16:bf:c8:5e:f3:c5:b3:9a:85:89:62:e2:0e:9e:07: f5:c8:ef:75:ed:dc:44:55:fe:54:d3:e0:e5:31:4d: 53:52:00:48:16:99:43:ed:59:d5:08:ac:55:09:a2: c2:a1:c1:ea:22:9b:3a:c1:32:27:be:d9:fb:bd:0c: 24:9a:58:b4:12:76:92:a3:d2:62:2b:5c:f2:92:c3: db:f8:28:5b:5b:65:61:60:60:82:77:f5:95:76:eb: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.240.0/22 IPv6: 2a02:2150::/32 Signature Algorithm: sha256WithRSAEncryption 1a:09:90:e6:23:d0:14:7b:d9:1c:70:ed:c3:8b:74:45:0c:dd: 29:29:f3:07:4b:40:cd:56:e2:0b:04:93:7d:66:86:6f:ff:a4: 14:ed:34:c8:c9:7b:b3:2f:45:be:cd:8c:92:40:f9:99:b9:8a: 3f:26:a5:f4:46:a7:cf:3c:d5:b6:e1:2d:31:c4:d8:71:a7:bc: 42:52:22:f7:05:d9:ff:93:52:0b:f6:af:fe:ba:16:9e:cf:c9: 44:d7:58:f8:ba:73:97:fc:9e:4a:9b:59:cf:96:fd:88:77:73: 34:c4:1d:bc:55:ac:3a:a6:91:bd:60:c6:b0:cb:47:90:19:8e: a0:e5:2c:92:71:8d:d4:dd:14:85:52:f1:16:63:95:67:5a:57: b5:55:80:87:ef:83:a8:ad:d3:af:ca:72:06:2b:3d:f9:ef:5c: 54:f7:d5:48:be:4e:1b:a9:cf:9b:61:1c:88:ff:7e:c6:d8:f4: b0:d4:16:bf:11:4c:94:04:50:46:41:ff:6d:ca:0d:5e:04:bc: 8c:98:81:fe:37:6d:50:70:5a:a6:de:35:6e:05:8b:6f:5c:ab: c0:1f:f8:1a:4f:7c:f0:56:eb:ac:83:c5:b9:90:f0:50:ec:2c: 40:16:f1:d0:b5:8e:63:1e:93:f6:59:1a:57:33:6e:7d:61:24: 55:5c:3f:d8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87g00sRakJ6uMMf+NKeSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDVlMmYyZDVlNzA5M2ZmOGQ0MDAzYTAyYjdkM2UxMzFjZTcwYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnpmBbimVB0U5qSLpxKs0hY+XKrM mGum9szNgf26RJUdqfDBaGsVahpzaIwBOQlDJ1VUTD9127nDyYwkYtH1kDVxrJBh rUgbEIC8qUbjR34F1l+0cPG8QlYNM+irTgJBIHZuxIG6XpDcy/gf+N8kJ3tdNToi TtUZkJneyqwdI6X1X7c0dE+a1fJjsIlKF+oDIUQ100YXOXXCbCEvkJmX7tsweLcW v8he88WzmoWJYuIOngf1yO917dxEVf5U0+DlMU1TUgBIFplD7VnVCKxVCaLCocHq Ips6wTInvtn7vQwkmli0EnaSo9JiK1zyksPb+ChbW2VhYGCCd/WVdutWTQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFBeLy1ecJP/jUADoCt9PhMc5woSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzVhNzcz MS1lZjU0LTQ1MDEtODZmNC05OGU5ZTI1MTBiYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvNWE3NzMx LWVmNTQtNDUwMS04NmY0LTk4ZTllMjUxMGJiNi8xL1VGNHZMVjV3a18tTlFBT2dL MzAtRXh6bkNoSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCsv/wMA0EAgACMAcDBQAqAiFQMA0GCSqGSIb3 DQEBCwUAA4IBAQAaCZDmI9AUe9kccO3Di3RFDN0pKfMHS0DNVuILBJN9ZoZv/6QU 7TTIyXuzL0W+zYySQPmZuYo/JqX0RqfPPNW24S0xxNhxp7xCUiL3Bdn/k1IL9q/+ uhaez8lE11j4unOX/J5Km1nPlv2Id3M0xB28Vaw6ppG9YMawy0eQGY6g5SyScY3U 3RSFUvEWY5VnWle1VYCH74OordOvynIGKz3571xU99VIvk4bqc+bYRyI/37G2PSw 1Ba/EUyUBFBGQf9tyg1eBLyMmIH+N21QcFqm3jVuBYtvXKvAH/gaT3zwVuusg8W5 kPBQ7CxAFvHQtY5jHpP2WRpXM259YSRVXD/Y -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:08 2026 by rpki-client