This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer File: UFZxLM-od6u3YMt34nBBd0ywRzk.cer (raw, json) Hash identifier: D9xhGupXFo3SJ+mmHC2gKhP5qarnEehGI/9apORJezs= Subject key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35ACB22E23DAA798E131D512BEA724 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198863 IP: 91.240.2.0/23 IP: 185.198.132.0/22 IP: 2a03:7040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ac:b2:2e:23:da:a7:98:e1:31:d5:12:be:a7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5056712ccfa877abb760cb77e27041774cb04739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:76:1d:1a:7c:8d:05:4f:b4:3a:17:ef:0d: 17:99:2e:55:35:d7:18:44:32:8b:5d:a7:1e:29:9a: bc:c5:9e:67:cb:2d:33:e9:01:39:14:76:9b:37:38: 47:05:1b:f6:28:c4:fe:19:71:92:e5:f1:f1:23:48: 52:73:71:f6:42:2d:6a:4b:1d:01:51:31:b4:1e:56: 91:8b:e6:31:59:37:2c:da:6a:5d:81:75:d1:65:b5: d2:20:32:8f:67:a9:6b:6b:ed:54:81:73:5e:e5:e2: 7f:ce:e9:17:a7:74:84:b1:75:3b:c2:6d:b3:37:25: b8:34:b3:03:fc:a5:06:e4:f1:0e:74:ef:01:db:36: e3:c3:a2:5b:01:ef:c3:b1:d9:48:1f:45:aa:11:59: 3a:f8:30:b9:6c:53:c3:fc:69:35:c8:6a:9a:1b:68: 92:5a:6d:db:47:fe:10:2e:51:41:29:66:92:98:7e: 92:59:c9:e8:c1:8b:c9:67:2c:e8:c8:d9:c9:68:56: 00:da:86:27:7d:05:aa:ea:96:57:49:84:f5:d7:cc: db:68:0d:6a:57:9a:8a:df:de:3e:ce:a3:da:53:93: 77:7f:28:4c:91:9d:6c:db:b5:2c:59:e4:c0:ff:39: 5f:00:df:ac:d5:ca:21:98:e3:e9:9c:0d:a6:33:25: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.2.0/23 185.198.132.0/22 IPv6: 2a03:7040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198863 Signature Algorithm: sha256WithRSAEncryption 35:90:35:de:85:22:c4:ad:db:64:08:5f:51:09:d5:51:82:86: 2a:9e:53:28:6d:fb:40:7f:0f:b4:01:25:7f:64:30:26:09:e1: 33:66:4f:82:96:3e:ef:57:c2:a1:49:bc:9d:e7:85:5f:87:38: d3:13:07:45:3a:d3:de:81:f7:41:86:2c:06:44:25:10:6a:40: a5:a2:f3:2b:06:1b:fb:ba:af:20:4c:18:bc:e8:eb:7e:44:a9: a2:83:41:d1:71:9a:29:20:16:fb:33:56:e6:8f:cc:53:44:ad: bc:bf:31:74:56:5f:e4:45:7f:f2:62:0c:ee:8a:c0:82:0e:1b: 43:5e:08:77:7b:cd:29:58:e0:a0:42:c4:0e:96:e0:0c:1d:ac: 1c:70:71:58:1a:1a:6c:07:b2:ba:8f:71:0d:18:a9:b7:d1:c6: b7:83:41:00:37:20:e4:58:82:38:2a:04:c2:b9:62:3c:d3:e5: 34:16:c4:00:86:b3:a5:cc:d2:7a:29:66:6c:23:79:45:53:f6: c2:49:8e:9f:5a:b9:3a:42:b2:5b:b7:94:9e:df:a6:9d:b7:2f: 83:3c:87:4a:10:fd:e2:77:0a:4f:a2:ca:91:8b:9d:b3:c6:0f: 54:84:af:5d:4f:7b:fa:32:2c:97:d6:7b:50:26:44:58:7d:87: b2:5c:61:ea -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt7NayyLiPap5jhMdUSvqckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDU2NzEyY2NmYTg3N2FiYjc2MGNiNzdlMjcwNDE3NzRjYjA0NzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pl2HRp8jQVPtDoX7w0XmS5VNdcY RDKLXaceKZq8xZ5nyy0z6QE5FHabNzhHBRv2KMT+GXGS5fHxI0hSc3H2Qi1qSx0B UTG0HlaRi+YxWTcs2mpdgXXRZbXSIDKPZ6lra+1UgXNe5eJ/zukXp3SEsXU7wm2z NyW4NLMD/KUG5PEOdO8B2zbjw6JbAe/DsdlIH0WqEVk6+DC5bFPD/Gk1yGqaG2iS Wm3bR/4QLlFBKWaSmH6SWcnowYvJZyzoyNnJaFYA2oYnfQWq6pZXSYT118zbaA1q V5qK394+zqPaU5N3fyhMkZ1s27UsWeTA/zlfAN+s1cohmOPpnA2mMyUIHQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFBWcSzPqHert2DLd+JwQXdMsEc5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzhkNzk4 YS03M2Q3LTQ0YmEtOTdkYi1mODRiNjA1MjFkZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvOGQ3OThh LTczZDctNDRiYS05N2RiLWY4NGI2MDUyMWRmNS8xL1VGWnhMTS1vZDZ1M1lNdDM0 bkJCZDB5d1J6ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBW/ACAwQCucaEMA0EAgACMAcDBQAqA3BAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMIzzANBgkqhkiG9w0BAQsFAAOCAQEANZA1 3oUixK3bZAhfUQnVUYKGKp5TKG37QH8PtAElf2QwJgnhM2ZPgpY+71fCoUm8neeF X4c40xMHRTrT3oH3QYYsBkQlEGpApaLzKwYb+7qvIEwYvOjrfkSpooNB0XGaKSAW +zNW5o/MU0StvL8xdFZf5EV/8mIM7orAgg4bQ14Id3vNKVjgoELEDpbgDB2sHHBx WBoabAeyuo9xDRipt9HGt4NBADcg5FiCOCoEwrliPNPlNBbEAIazpczSeilmbCN5 RVP2wkmOn1q5OkKyW7eUnt+mnbcvgzyHShD94ncKT6LKkYuds8YPVISvXU97+jIs l9Z7UCZEWH2Hslxh6g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:17 2026 by rpki-client