This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer File: UTBvX0bb20E2BCor440F0iKnx2E.cer (raw, json) Hash identifier: BUggZTGTUq2RE3z3MkEUlG2MKkkOHqa9TyTRd2iZsYQ= Subject key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758ABC6F117300AAE32B85D8AD7DC38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211585 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ab:c6:f1:17:30:0a:ae:32:b8:5d:8a:d7:dc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51306f5f46dbdb4136042a2be38d05d222a7c761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:ff:c2:31:12:7b:ad:e9:a0:ee:ee:3f:8b: 91:22:08:17:53:c2:21:19:41:c9:0a:ba:c5:d6:e7: 33:a6:ce:94:84:7e:92:f0:a6:d3:e4:56:fc:1f:d8: 38:a7:0a:12:91:66:6b:6c:80:16:45:bb:ed:12:66: e0:90:16:c1:14:5d:5d:d3:3c:e2:d0:c7:2b:15:61: 63:0e:f7:6f:f3:cf:b7:ae:65:e1:ca:3c:96:44:eb: 7f:2a:05:ae:5f:90:4b:68:e7:86:01:1a:4a:12:33: 8c:43:c3:60:86:71:1c:e5:cc:77:e7:08:56:c6:35: e2:5c:ab:d8:61:56:57:2b:a5:10:51:0e:9b:57:3c: ad:ff:6f:4b:94:1e:4d:98:52:d9:e5:b3:84:9f:ef: 5c:12:d3:b4:27:3c:4e:9d:0e:9e:8f:83:2b:31:42: d1:11:9e:cf:43:c7:0f:c5:b3:43:77:ba:03:92:12: ac:4e:e5:85:92:d5:38:bd:c5:0a:bf:db:4d:1c:60: e1:a5:6e:3c:17:6b:b9:8f:5f:23:46:de:ea:bc:62: 3f:f7:83:ff:ce:8b:05:ef:23:22:e7:40:bb:da:b7: f8:b0:3a:af:5f:b6:f8:49:85:e4:5a:5b:a6:e2:3d: 13:ef:c4:17:98:43:bd:99:38:fa:e7:4a:0b:16:d4: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211585 Signature Algorithm: sha256WithRSAEncryption 42:85:1a:1d:52:1a:15:8a:70:cd:f5:97:d0:8d:76:d8:28:11: a1:bf:2c:9d:f3:0c:29:f2:35:2c:0f:c9:56:77:e7:8b:30:2c: 64:39:de:6f:b7:b0:73:93:82:a2:5d:f6:dc:00:7b:18:cd:23: 4f:1a:04:b4:a0:2c:52:53:b9:04:44:c1:3b:6d:ed:0a:16:b9: 03:96:95:01:85:50:64:b2:21:84:b1:19:f7:df:6a:7a:12:b4: 43:66:ac:f0:be:6f:51:f6:83:ac:c1:7a:bd:74:61:99:d4:83: 1d:bf:d9:3b:92:50:47:91:e0:3d:45:72:1f:f8:9d:80:7f:ce: 50:38:35:60:b1:c8:b9:14:bf:2d:2b:33:9e:81:d9:71:89:d9: 2f:42:d9:e1:d1:c2:39:c9:cc:9a:79:b8:de:a6:a2:22:40:48: d2:cb:2f:70:0c:88:be:db:e8:a0:16:9e:3c:ff:88:4a:b2:23: b7:0a:07:39:7d:7a:ff:52:c5:e5:82:81:17:50:77:a2:10:4c: 5f:46:dc:2f:9f:90:9e:93:be:ef:27:f6:3e:a9:b9:89:f9:d9: 1f:3f:a8:ef:68:75:c1:64:8e:4f:2d:2d:d9:c8:f0:a0:12:ed: 18:ab:6f:cd:50:8f:d9:04:45:8a:42:36:bc:c8:f1:9f:7f:f3: 58:0a:a3:e3 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WKvG8RcwCq4yuF2K19w4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTMwNmY1ZjQ2ZGJkYjQxMzYwNDJhMmJlMzhkMDVkMjIyYTdjNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9//wjESe63poO7uP4uRIggXU8Ih GUHJCrrF1uczps6UhH6S8KbT5Fb8H9g4pwoSkWZrbIAWRbvtEmbgkBbBFF1d0zzi 0McrFWFjDvdv88+3rmXhyjyWROt/KgWuX5BLaOeGARpKEjOMQ8NghnEc5cx35whW xjXiXKvYYVZXK6UQUQ6bVzyt/29LlB5NmFLZ5bOEn+9cEtO0JzxOnQ6ej4MrMULR EZ7PQ8cPxbNDd7oDkhKsTuWFktU4vcUKv9tNHGDhpW48F2u5j18jRt7qvGI/94P/ zosF7yMi50C72rf4sDqvX7b4SYXkWlum4j0T78QXmEO9mTj650oLFtTlXwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFEwb19G29tBNgQqK+ONBdIip8dhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzI3NDNl Yi1jOTZlLTQ5MjQtODVmYy02MGIzYTU5YzYwNzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMjc0M2Vi LWM5NmUtNDkyNC04NWZjLTYwYjNhNTljNjA3Ny8xL1VUQnZYMGJiMjBFMkJDb3I0 NDBGMGlLbngyRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6gTANBgkqhkiG9w0BAQsFAAOCAQEAQoUaHVIaFYpw zfWX0I122CgRob8snfMMKfI1LA/JVnfnizAsZDneb7ewc5OCol323AB7GM0jTxoE tKAsUlO5BETBO23tCha5A5aVAYVQZLIhhLEZ999qehK0Q2as8L5vUfaDrMF6vXRh mdSDHb/ZO5JQR5HgPUVyH/idgH/OUDg1YLHIuRS/LSsznoHZcYnZL0LZ4dHCOcnM mnm43qaiIkBI0ssvcAyIvtvooBaePP+ISrIjtwoHOX16/1LF5YKBF1B3ohBMX0bc L5+QnpO+7yf2Pqm5ifnZHz+o72h1wWSOTy0t2cjwoBLtGKtvzVCP2QRFikI2vMjx n3/zWAqj4w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:38 2026 by rpki-client