This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer (raw, json) Hash identifier: Y82rETuldtg1V+tYm9wGeve3EyqKzgreuULhUUznZUs= Subject key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B790FF6F47CE7B86718A38F2A9E071F1D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.151.148.0/22 IP: 185.171.72.0/22 IP: 185.173.172.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f6:f4:7c:e7:b8:67:18:a3:8f:2a:9e:07:1f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50c9da1483fe3993d1985260619735c4cfd38033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:ef:c7:8d:a6:75:91:a5:63:63:dc:36:7b: a2:9b:57:38:ba:7b:2f:e1:19:f8:bd:68:37:15:77: 83:bf:1e:07:94:e2:b3:98:f4:7e:d0:97:20:fa:a1: 60:c7:68:58:e9:d8:3f:9f:4f:c9:ff:de:87:da:36: 3a:4b:ff:4e:b5:9a:ee:cc:bc:f0:0e:45:6c:af:ad: 5a:6a:f8:8e:2a:45:ce:e3:9b:1a:ab:0f:3c:b2:2d: 7c:da:29:ba:e8:26:63:f8:99:a6:1d:92:bc:1d:81: d5:fd:86:19:24:e3:11:00:fb:bc:0f:74:b5:7a:cd: 50:42:ac:29:e9:5b:42:09:c2:b7:88:5c:27:b1:0c: bc:5c:5a:84:b0:f3:6e:b1:51:ce:70:f5:cf:ff:73: 72:88:77:92:62:4a:a7:80:f3:15:99:b1:a9:20:6f: bf:48:60:1a:d7:da:48:1e:01:18:d8:ab:a8:c1:ef: 23:7e:75:d3:3e:a9:f6:fd:41:b2:c3:cf:9a:4b:c1: b1:08:44:f4:24:e5:be:0c:be:db:21:d5:68:0c:d1: 20:b5:17:1e:a5:0e:27:85:2c:73:cb:ca:94:42:55: dc:3b:32:52:d2:b2:2f:93:70:4f:26:54:db:47:18: a0:0e:00:6e:ce:10:45:b5:ca:84:4d:0c:ac:1c:df: 67:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.148.0/22 185.171.72.0/22 185.173.172.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:d1:31:83:4b:6d:73:93:b0:89:5e:bc:e5:ec:29:78:ee:f6: 6f:ff:62:96:84:5a:0f:2d:a6:b8:96:c7:df:83:c5:85:dc:34: 82:54:39:a0:0b:4c:ff:d1:23:26:ee:cd:d2:6d:e2:b3:a2:bf: d9:ca:4b:3c:62:8e:44:d3:c3:60:19:87:0f:52:92:6b:23:d1: 1e:5a:88:fa:20:64:be:72:14:41:6c:f0:c7:f8:e8:58:36:42: 83:aa:be:07:77:05:3b:57:63:f7:2f:ef:d7:d8:2e:f3:5f:fe: aa:24:ab:83:28:4b:55:2e:2c:f1:80:b5:01:f2:b6:b4:cb:53: 90:0e:37:31:06:e2:69:a5:75:c6:39:9b:5d:c5:5c:a3:e9:46: 56:f1:a8:c5:d0:b2:b3:cc:1c:d5:d9:d3:84:a6:4f:f5:62:b3: 8d:42:b2:07:0f:d1:38:f7:28:bc:52:57:e6:9b:7d:ab:de:75: 1d:47:7a:6d:a0:87:ce:b2:bc:9b:5b:77:25:a6:b8:b5:f0:df: a7:ab:54:10:b4:ef:86:98:ed:a4:66:e2:d2:6f:1d:ea:63:0a: c0:4a:e7:59:7a:df:43:bc:c8:bd:a3:90:fd:89:c1:1c:3d:4e: 55:1a:53:2a:86:e1:60:40:0b:78:81:c1:ac:15:0c:00:59:76: 44:68:14:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt5D/b0fOe4ZxijjyqeBx8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGM5ZGExNDgzZmUzOTkzZDE5ODUyNjA2MTk3MzVjNGNmZDM4MDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Lvx42mdZGlY2PcNnuim1c4unsv 4Rn4vWg3FXeDvx4HlOKzmPR+0Jcg+qFgx2hY6dg/n0/J/96H2jY6S/9OtZruzLzw DkVsr61aaviOKkXO45saqw88si182im66CZj+JmmHZK8HYHV/YYZJOMRAPu8D3S1 es1QQqwp6VtCCcK3iFwnsQy8XFqEsPNusVHOcPXP/3NyiHeSYkqngPMVmbGpIG+/ SGAa19pIHgEY2Kuowe8jfnXTPqn2/UGyw8+aS8GxCET0JOW+DL7bIdVoDNEgtRce pQ4nhSxzy8qUQlXcOzJS0rIvk3BPJlTbRxigDgBuzhBFtcqETQysHN9n0wIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFFDJ2hSD/jmT0ZhSYGGXNcTP04AzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzBmY2Ji OC0yNzY1LTQ2ZmItOGI2ZC1jODU1ZGFmYWRkNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvMGZjYmI4 LTI3NjUtNDZmYi04YjZkLWM4NTVkYWZhZGQ1Yy8xL1VNbmFGSVAtT1pQUm1GSmdZ WmMxeE1fVGdETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCuZeUAwQCuatIAwQCua2sMA0GCSqGSIb3DQEB CwUAA4IBAQA80TGDS21zk7CJXrzl7Cl47vZv/2KWhFoPLaa4lsffg8WF3DSCVDmg C0z/0SMm7s3SbeKzor/Zyks8Yo5E08NgGYcPUpJrI9EeWoj6IGS+chRBbPDH+OhY NkKDqr4HdwU7V2P3L+/X2C7zX/6qJKuDKEtVLizxgLUB8ra0y1OQDjcxBuJppXXG OZtdxVyj6UZW8ajF0LKzzBzV2dOEpk/1YrONQrIHD9E49yi8Ulfmm32r3nUdR3pt oIfOsrybW3clpri18N+nq1QQtO+GmO2kZuLSbx3qYwrASudZet9DvMi9o5D9icEc PU5VGlMqhuFgQAt4gcGsFQwAWXZEaBTn -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:46 2026 by rpki-client