This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer File: Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.cer (raw, json) Hash identifier: Dqn44Pu8b0Dc1hwBuqXL+j23U5QyFYchy72SQGlpxeY= Subject key identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12B60DE89856477EFB2BB1266E6538 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20509 IP: 193.178.232.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b6:0d:e8:98:56:47:7e:fb:2b:b1:26:6e:65:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51da3d32597b5051932f6ca9182d4b9a2fb05b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:fe:c1:38:f3:f6:09:e3:cc:50:b1:fa:02: 81:61:23:97:cb:b2:c4:b4:18:38:41:cf:dd:ab:0f: 8c:7a:ec:c3:39:83:76:86:0b:74:54:6a:c5:df:8d: 8f:71:62:db:3d:1f:03:6a:74:f3:7a:b3:2b:c2:e5: 6b:12:73:2c:e4:bd:91:47:a8:5e:3e:a6:9c:b2:b7: 5d:2a:76:3f:8c:4a:82:ff:c9:86:2a:7f:e4:70:55: 9f:6e:ed:02:c9:e1:b9:44:15:9f:66:4b:71:f0:2a: 2b:9a:70:24:0f:d3:35:fe:b8:6e:b2:32:ea:80:c7: f4:49:e8:10:ee:68:4c:e5:5d:6d:8b:5d:44:29:9f: 58:5e:7a:f8:44:df:e9:79:b6:2e:94:fa:18:24:43: 93:58:20:38:0b:cd:56:90:d7:44:3a:77:ac:d3:1d: c8:17:26:5b:86:21:6f:de:6d:7b:d3:8c:0d:85:c5: 3c:ea:5c:be:48:49:7b:fc:9d:26:24:98:4b:25:82: c1:a8:e6:5c:69:fb:32:18:e6:d0:da:a8:f0:c3:0c: a4:cd:3b:7e:3f:cc:70:f5:39:9e:33:5b:c7:d6:b2: 3e:0d:b8:61:31:87:9e:64:f1:fb:70:49:cf:96:25: e0:6e:0b:08:69:49:93:04:9b:c1:bd:41:9e:5d:1f: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DA:3D:32:59:7B:50:51:93:2F:6C:A9:18:2D:4B:9A:2F:B0:5B:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c22a3e-fcdb-4a71-8976-00a549e1b1d7/1/Udo9Mll7UFGTL2ypGC1Lmi-wW1Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.232.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20509 Signature Algorithm: sha256WithRSAEncryption 5e:99:3a:83:9f:81:06:37:7b:0a:3d:6f:a0:42:84:35:84:2c: 10:35:72:80:41:51:9c:6a:16:ee:2b:f8:14:19:a5:31:9f:82: fc:f5:a9:1b:d8:d2:d9:09:45:bf:85:8c:92:7d:bb:d0:db:0f: 85:28:27:d9:b8:83:07:ab:3c:70:ed:27:cb:f0:b4:dc:67:7f: c1:d4:07:56:1d:13:9a:bb:db:57:ee:12:ff:e4:b5:08:a1:ef: 0d:b6:5f:7f:5c:dc:6d:0b:79:7e:70:ac:31:35:92:d8:c2:7b: 5a:9d:5e:40:13:d9:cc:71:1b:c6:0b:aa:11:01:1c:69:c4:8a: c8:b5:6c:c1:22:7c:f5:56:a2:0b:76:ee:3c:82:81:e0:e0:9e: ec:7a:e2:01:17:c4:21:ea:cc:26:c8:7e:33:35:7d:ae:52:12: d3:3b:98:b0:42:4b:b4:7d:d0:fb:9a:83:1e:2a:6e:e3:0f:75: e4:da:21:37:bd:10:e7:15:03:f6:d5:6b:c5:7c:4b:43:e9:c8: 26:8a:f7:9d:5d:ba:b6:33:98:fc:f2:f5:5d:3a:31:96:67:ea: d1:1c:e1:a1:8d:24:15:7e:33:a4:71:1f:f6:2f:97:80:b9:cc: f3:99:9b:be:7e:2e:60:73:05:35:0e:3a:59:94:73:3f:56:76: 19:c9:a5:78 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8ErYN6JhWR377K7EmbmU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWRhM2QzMjU5N2I1MDUxOTMyZjZjYTkxODJkNGI5YTJmYjA1YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTL+wTjz9gnjzFCx+gKBYSOXy7LE tBg4Qc/dqw+MeuzDOYN2hgt0VGrF342PcWLbPR8DanTzerMrwuVrEnMs5L2RR6he PqacsrddKnY/jEqC/8mGKn/kcFWfbu0CyeG5RBWfZktx8CormnAkD9M1/rhusjLq gMf0SegQ7mhM5V1ti11EKZ9YXnr4RN/pebYulPoYJEOTWCA4C81WkNdEOnes0x3I FyZbhiFv3m1704wNhcU86ly+SEl7/J0mJJhLJYLBqOZcafsyGObQ2qjwwwykzTt+ P8xw9TmeM1vH1rI+DbhhMYeeZPH7cEnPliXgbgsIaUmTBJvBvUGeXR/wyQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFFHaPTJZe1BRky9sqRgtS5ovsFtWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2MyMmEz ZS1mY2RiLTRhNzEtODk3Ni0wMGE1NDllMWIxZDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvYzIyYTNl LWZjZGItNGE3MS04OTc2LTAwYTU0OWUxYjFkNy8xL1VkbzlNbGw3VUZHVEwyeXBH QzFMbWktd1cxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwbLoMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlAdMA0GCSqGSIb3DQEBCwUAA4IBAQBemTqDn4EGN3sKPW+gQoQ1hCwQNXKAQVGc ahbuK/gUGaUxn4L89akb2NLZCUW/hYySfbvQ2w+FKCfZuIMHqzxw7SfL8LTcZ3/B 1AdWHROau9tX7hL/5LUIoe8Ntl9/XNxtC3l+cKwxNZLYwntanV5AE9nMcRvGC6oR ARxpxIrItWzBInz1VqILdu48goHg4J7seuIBF8Qh6swmyH4zNX2uUhLTO5iwQku0 fdD7moMeKm7jD3Xk2iE3vRDnFQP21WvFfEtD6cgmivedXbq2M5j88vVdOjGWZ+rR HOGhjSQVfjOkcR/2L5eAuczzmZu+fi5gcwU1DjpZlHM/VnYZyaV4 -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:13 2026 by rpki-client