This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer File: Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.cer (raw, json) Hash identifier: /WqZKNLsPiB6jXOlT1kvVmCkzfDu1+e24QkiIgY99Jk= Subject key identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AEBE5BC9E0EE7ADC457898292C762 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209569 IP: 2001:678:dcc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:eb:e5:bc:9e:0e:e7:ad:c4:57:89:82:92:c7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51f83b800bf5d66cc76d0e624847fb668e177c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:a9:0d:44:37:1b:87:ee:f2:ac:f0:be:2c: df:bb:d9:52:7e:30:21:44:60:54:2d:ae:6d:eb:f2: 78:f6:e3:05:c4:55:6c:16:ae:3e:50:7e:36:72:5d: c1:44:50:43:6a:73:5b:5e:07:69:0d:27:6d:0f:79: 51:93:d4:05:65:a3:b3:96:c0:2d:5e:ae:fc:f1:3a: 8c:c7:07:28:52:2c:34:bb:8a:72:9c:43:e5:18:3f: a1:8f:f9:81:87:2c:84:66:31:5e:8d:da:60:a5:be: f1:96:cc:25:2a:3d:54:65:07:38:96:07:02:26:66: eb:64:ca:75:89:23:95:38:1d:5c:29:52:b1:d3:d2: 96:49:97:bf:0a:24:2e:dc:fc:72:ae:bc:61:d4:de: d4:e1:5c:64:b1:73:aa:7d:df:d2:60:d3:13:c3:48: 9d:29:fb:b7:ad:23:ab:f3:a8:f1:87:c0:c3:29:a5: 88:ad:24:55:73:ea:48:ed:34:0d:06:e6:e9:04:8d: 38:64:94:21:0f:bf:f6:d0:1d:30:2a:35:3f:e7:6f: 98:d6:79:f4:2e:95:e8:d4:c6:65:2e:7d:24:66:82: 35:53:36:5f:be:04:23:76:bd:f1:0f:48:99:07:8e: e2:75:27:bc:1c:cb:1d:81:49:b5:f4:d6:b4:82:19: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F8:3B:80:0B:F5:D6:6C:C7:6D:0E:62:48:47:FB:66:8E:17:7C:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/893887-f863-4a8b-bd96-e6958ed5a7a0/1/Ufg7gAv11mzHbQ5iSEf7Zo4XfHE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:dcc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209569 Signature Algorithm: sha256WithRSAEncryption 8b:22:a0:2d:85:8f:84:38:8e:19:dc:8a:8f:95:93:80:70:53: 66:bb:6c:92:84:7d:8f:05:3a:14:6b:bf:be:03:39:09:97:33: f2:40:73:75:b2:16:d4:52:48:db:37:49:90:0c:13:26:0a:7d: 30:04:4e:50:22:28:22:f6:1b:a2:a2:04:61:68:a2:ab:9a:fc: bc:38:d8:f3:0a:a3:84:31:45:32:da:7d:0a:3a:2d:68:db:e5: e8:01:53:cd:c2:51:87:71:5b:05:ef:e2:c9:dd:99:51:8c:da: 74:4c:c9:9f:1d:18:ee:88:09:46:90:c9:fd:54:ef:c1:42:f2: fa:c8:3e:21:94:36:71:d6:44:a6:3b:29:e5:5e:31:3a:5e:37: 14:70:47:3b:9b:c5:ea:51:ed:18:32:24:52:15:a2:b0:58:41: 6c:37:08:ca:a9:39:f3:79:c5:1f:e8:28:8a:03:ca:ef:1f:08: fb:8d:de:5a:01:53:76:b5:42:9a:b9:c2:53:d9:92:64:63:90: 6a:e4:9d:96:47:f1:52:0a:49:b3:96:38:da:3b:1a:df:09:47: d1:ef:90:13:68:1a:e3:72:15:10:09:6e:9a:e7:8f:2d:17:4c: 32:e0:31:7d:25:e4:14:20:de:c1:2e:63:bd:3a:a7:9d:78:91: 18:bb:1a:02 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt6WuvlvJ4O563EV4mCksdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWY4M2I4MDBiZjVkNjZjYzc2ZDBlNjI0ODQ3ZmI2NjhlMTc3YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZupDUQ3G4fu8qzwvizfu9lSfjAh RGBULa5t6/J49uMFxFVsFq4+UH42cl3BRFBDanNbXgdpDSdtD3lRk9QFZaOzlsAt Xq788TqMxwcoUiw0u4pynEPlGD+hj/mBhyyEZjFejdpgpb7xlswlKj1UZQc4lgcC JmbrZMp1iSOVOB1cKVKx09KWSZe/CiQu3Pxyrrxh1N7U4VxksXOqfd/SYNMTw0id Kfu3rSOr86jxh8DDKaWIrSRVc+pI7TQNBubpBI04ZJQhD7/20B0wKjU/52+Y1nn0 LpXo1MZlLn0kZoI1UzZfvgQjdr3xD0iZB47idSe8HMsdgUm19Na0ghnKzwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFFH4O4AL9dZsx20OYkhH+2aOF3xxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzg5Mzg4 Ny1mODYzLTRhOGItYmQ5Ni1lNjk1OGVkNWE3YTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvODkzODg3 LWY4NjMtNGE4Yi1iZDk2LWU2OTU4ZWQ1YTdhMC8xL1VmZzdnQXYxMW16SGJRNWlT RWY3Wm80WGZIRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA3MMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMyoTANBgkqhkiG9w0BAQsFAAOCAQEAiyKgLYWPhDiOGdyKj5WTgHBTZrts koR9jwU6FGu/vgM5CZcz8kBzdbIW1FJI2zdJkAwTJgp9MAROUCIoIvYboqIEYWii q5r8vDjY8wqjhDFFMtp9CjotaNvl6AFTzcJRh3FbBe/iyd2ZUYzadEzJnx0Y7ogJ RpDJ/VTvwULy+sg+IZQ2cdZEpjsp5V4xOl43FHBHO5vF6lHtGDIkUhWisFhBbDcI yqk583nFH+goigPK7x8I+43eWgFTdrVCmrnCU9mSZGOQauSdlkfxUgpJs5Y42jsa 3wlH0e+QE2ga43IVEAlumuePLRdMMuAxfSXkFCDewS5jvTqnnXiRGLsaAg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:02 2026 by rpki-client