This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer File: UfKdGEvMUP5lTd70AV3hfSRv0qM.cer (raw, json) Hash identifier: i6Xzi4wAzZFgARqSy0WXk7LhBVAs+cY0bftfhLMz4zc= Subject key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77591EDBE77551D674F6F48D087BFD53 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206033 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1e:db:e7:75:51:d6:74:f6:f4:8d:08:7b:fd:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:9d:f4:ef:1d:2b:86:90:24:8c:f4:9f:45: 8f:55:56:42:48:fd:7d:48:38:8a:2a:08:58:4f:8f: ca:08:b2:95:79:8d:f8:b2:fe:2e:d6:75:d9:ec:c9: 15:43:04:2a:0e:2c:92:81:dd:16:fc:ba:4b:f0:bf: db:e8:b3:bd:d3:12:4b:2c:d1:2d:5b:7d:8a:e8:0e: 54:d0:b5:70:36:f5:52:2a:26:0f:5b:50:d5:10:a9: 36:d7:1c:bc:27:5f:29:ff:20:3a:47:44:ee:b6:5c: 70:72:4b:74:e7:d5:bb:8b:d2:2f:ba:bd:f1:92:96: 21:13:4d:f1:94:fb:97:b8:d7:41:11:17:73:f6:b7: 65:bc:19:ce:f0:d0:26:a3:31:a4:af:ac:5a:a9:4a: f4:f8:5f:47:68:fe:8f:6f:72:13:76:ec:8c:db:d4: 07:ec:57:b1:ab:13:73:0a:97:cc:22:a7:0a:5b:b4: ed:60:1b:e3:5a:72:91:14:f7:3d:09:b2:0f:2f:1c: d1:f8:a2:a2:8c:9b:6f:41:6e:34:8d:b0:9e:3c:68: ea:be:97:fa:f8:25:4c:79:44:97:26:0b:4e:71:07: 67:7f:e4:e7:bb:9c:a8:95:ea:f3:cf:52:53:df:50: 73:ee:c2:fe:25:3a:6d:fc:43:69:e1:9e:ce:e1:e9: 44:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206033 Signature Algorithm: sha256WithRSAEncryption 12:38:c0:6b:69:aa:26:60:89:8e:c1:40:c9:38:ca:61:6c:2b: 67:63:4f:57:83:47:ce:d2:79:88:dd:fc:af:e3:31:aa:ab:48: 44:90:8a:4e:71:cc:5d:2f:e2:ea:0d:c5:dd:90:35:86:71:c6: 4c:58:d1:31:72:9a:91:9e:e3:4e:bb:6c:7b:88:2e:c4:a7:f2: bd:b6:fc:0e:c7:33:fe:dd:c3:27:2c:dc:14:9b:e5:4a:76:1e: d0:4b:d7:9c:59:8c:5a:6a:a7:88:e9:7e:6c:61:5f:69:55:d5: ec:45:d4:e5:00:03:25:8b:30:f8:86:5c:ac:c7:5f:48:bb:21: e5:71:2e:c7:fd:0c:b3:ba:72:b7:60:94:e3:8f:6d:13:87:03: e0:dc:4c:ed:aa:ca:ec:fc:da:a1:c9:dd:75:42:cf:aa:8e:67: ba:d8:89:b8:e5:e7:36:07:d9:21:a9:06:b0:6b:30:ba:1e:c3: 0a:4d:98:4d:ec:58:54:38:11:6d:b0:62:2a:54:46:36:d0:dc: b5:b7:93:11:3f:6c:b8:de:bf:55:9c:7c:48:5e:1d:6f:21:89: b6:68:9e:e9:2f:12:a9:5f:6c:36:10:04:8a:84:c6:3e:a7:68: c6:b5:11:d1:04:aa:f1:90:95:b3:87:73:f3:fb:c0:d3:2d:cb: 69:ee:55:ea -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WR7b53VR1nT29I0Ie/1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWYyOWQxODRiY2M1MGZlNjU0ZGRlZjQwMTVkZTE3ZDI0NmZkMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuud9O8dK4aQJIz0n0WPVVZCSP19 SDiKKghYT4/KCLKVeY34sv4u1nXZ7MkVQwQqDiySgd0W/LpL8L/b6LO90xJLLNEt W32K6A5U0LVwNvVSKiYPW1DVEKk21xy8J18p/yA6R0Tutlxwckt059W7i9Ivur3x kpYhE03xlPuXuNdBERdz9rdlvBnO8NAmozGkr6xaqUr0+F9HaP6Pb3ITduyM29QH 7FexqxNzCpfMIqcKW7TtYBvjWnKRFPc9CbIPLxzR+KKijJtvQW40jbCePGjqvpf6 +CVMeUSXJgtOcQdnf+Tnu5yolerzz1JT31Bz7sL+JTpt/ENp4Z7O4elE2wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFHynRhLzFD+ZU3e9AFd4X0kb9KjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzNiNTBj OC02NzhiLTRjNzItYmMwYy1iMzNhMWY3ZDljMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvM2I1MGM4 LTY3OGItNGM3Mi1iYzBjLWIzM2ExZjdkOWMyNi8xL1VmS2RHRXZNVVA1bFRkNzBB VjNoZlNSdjBxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMk0TANBgkqhkiG9w0BAQsFAAOCAQEAEjjAa2mqJmCJ jsFAyTjKYWwrZ2NPV4NHztJ5iN38r+MxqqtIRJCKTnHMXS/i6g3F3ZA1hnHGTFjR MXKakZ7jTrtse4guxKfyvbb8Dscz/t3DJyzcFJvlSnYe0EvXnFmMWmqniOl+bGFf aVXV7EXU5QADJYsw+IZcrMdfSLsh5XEux/0Ms7pyt2CU449tE4cD4NxM7arK7Pza ocnddULPqo5nutiJuOXnNgfZIakGsGswuh7DCk2YTexYVDgRbbBiKlRGNtDctbeT ET9suN6/VZx8SF4dbyGJtmie6S8SqV9sNhAEioTGPqdoxrUR0QSq8ZCVs4dz8/vA 0y3Lae5V6g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:26 2026 by rpki-client