This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer File: Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer (raw, json) Hash identifier: XYFDv1xqcg05aHblEuSPCgJcZVYq3Hf3b1Pc9YWVjjY= Subject key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910D9DC107F116C42859D8DA9FCFEE5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.204.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d9:dc:10:7f:11:6c:42:85:9d:8d:a9:fc:fe:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:66:45:d4:51:62:16:da:34:a1:c4:bd:69: b4:b8:86:9a:0a:02:33:76:65:31:2a:a8:ad:3a:cd: 29:a7:c2:c0:22:88:d9:ee:4a:e7:70:8c:88:e6:54: b4:59:21:a9:cf:be:a1:e2:93:f6:e2:cb:5f:33:cf: 07:be:f4:fb:f9:99:f8:ba:35:10:e2:9f:87:7b:bc: 5e:a2:8e:ce:8d:00:a6:29:ed:a7:5f:fb:aa:b9:30: c6:e6:75:00:c0:a2:60:8d:1a:3a:91:92:30:4b:26: 25:74:c6:7a:43:aa:7e:fb:cf:6c:20:23:77:5c:10: 21:e4:da:cd:14:e6:e1:da:c7:27:b9:3a:6b:8a:b6: cf:84:c1:28:4d:83:dd:ea:cc:65:00:85:3b:22:d9: 28:5b:f1:66:83:02:c8:c0:3e:1f:ca:9e:9e:df:c7: 51:37:f2:45:41:28:16:a8:be:b5:bf:5d:19:09:0f: 91:40:0d:5d:ce:06:c7:44:30:40:4a:f2:93:a6:a7: 3d:53:2d:23:3f:73:8c:0b:8e:e9:d4:c7:8a:38:00: 3a:48:0e:7e:03:10:ed:4d:01:76:be:46:da:70:55: cc:ac:07:3c:6d:47:d6:b1:1c:ee:98:f8:eb:cf:48: a4:42:64:83:c6:aa:96:64:9a:91:d8:a8:14:26:fe: 05:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.204.0/24 Signature Algorithm: sha256WithRSAEncryption 89:fd:aa:94:7e:4b:2b:d1:15:eb:de:00:66:b5:ca:20:55:d2: d4:a2:cf:45:94:2b:7c:2d:ed:73:61:63:61:aa:89:72:49:65: b0:e5:2c:e3:26:9a:73:12:6a:ae:8d:54:5e:34:ac:17:41:82: f9:89:92:07:2f:1a:cb:85:e0:d7:d0:e6:a5:1e:1a:69:94:89: fb:53:67:ca:ab:87:43:3b:0c:58:e7:07:ec:58:00:f5:5a:c8: 30:8f:64:ee:e5:9f:e3:51:d4:88:b4:ee:37:48:8d:4c:9b:be: eb:af:0d:0e:1e:0d:d1:d1:02:f7:a3:77:3b:6e:fa:c7:4c:13: 6f:8c:3e:82:40:10:a1:3a:90:69:19:89:38:fb:f8:d6:e6:2f: 50:fd:57:89:ff:41:78:84:17:67:c5:04:25:64:58:a5:70:50: 6d:20:36:94:d7:83:f0:56:23:14:a5:ff:1e:15:9a:4f:73:c8: c5:15:0a:56:f1:02:33:e4:e7:09:fe:d2:0b:c2:87:87:41:d2: 73:ee:ab:c4:e4:c0:bb:f0:f7:9e:f6:a3:e8:0d:00:61:3c:17: 04:10:7e:50:88:d0:1e:97:c3:d3:43:cf:a4:b7:47:32:57:05: 5a:c5:de:fe:8e:58:71:cf:20:c5:6e:68:fd:da:f1:dc:30:41: dc:de:8b:45 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ENncEH8RbEKFnY2p/P7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWZlNGQ0OGFhMDEzZDQwZTA2YzMxMmZmNzEwNDg5YjIwZGZlMDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jJmRdRRYhbaNKHEvWm0uIaaCgIz dmUxKqitOs0pp8LAIojZ7krncIyI5lS0WSGpz76h4pP24stfM88HvvT7+Zn4ujUQ 4p+He7xeoo7OjQCmKe2nX/uquTDG5nUAwKJgjRo6kZIwSyYldMZ6Q6p++89sICN3 XBAh5NrNFObh2scnuTprirbPhMEoTYPd6sxlAIU7ItkoW/FmgwLIwD4fyp6e38dR N/JFQSgWqL61v10ZCQ+RQA1dzgbHRDBASvKTpqc9Uy0jP3OMC47p1MeKOAA6SA5+ AxDtTQF2vkbacFXMrAc8bUfWsRzumPjrz0ikQmSDxqqWZJqR2KgUJv4FsQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFH+TUiqAT1A4GwxL/cQSJsg3+B/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2M3ZDcy Mi1kZDFiLTQ1Y2QtOTk4My1jYzNiNzhlNzdhMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvYzdkNzIy LWRkMWItNDVjZC05OTgzLWNjM2I3OGU3N2EwNy8xL1VmNU5TS29CUFVEZ2JERXY5 eEJJbXlEZjRIOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9HMMA0GCSqGSIb3DQEBCwUAA4IBAQCJ/aqU fksr0RXr3gBmtcogVdLUos9FlCt8Le1zYWNhqolySWWw5SzjJppzEmqujVReNKwX QYL5iZIHLxrLheDX0OalHhpplIn7U2fKq4dDOwxY5wfsWAD1Wsgwj2Tu5Z/jUdSI tO43SI1Mm77rrw0OHg3R0QL3o3c7bvrHTBNvjD6CQBChOpBpGYk4+/jW5i9Q/VeJ /0F4hBdnxQQlZFilcFBtIDaU14PwViMUpf8eFZpPc8jFFQpW8QIz5OcJ/tILwoeH QdJz7qvE5MC78Pee9qPoDQBhPBcEEH5QiNAel8PTQ8+kt0cyVwVaxd7+jlhxzyDF bmj92vHcMEHc3otF -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:02 2026 by rpki-client