This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer File: UoVvOOBRP5_qsFeMd3170GOidKo.cer (raw, json) Hash identifier: g8mMQGw5ipL4k6XlvVmFsc8INHDoLvdxRNZtJNv+E70= Subject key identifier: 52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C097E221B5707522D65512CE5F3507FAB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 29 Jan 2026 11:23:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208267 IP: 212.73.149.0/24 IP: 2a0b:bac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:7e:22:1b:57:07:52:2d:65:51:2c:e5:f3:50:7f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 29 11:23:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52856f38e0513f9feab0578c777d7bd063a274aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:a1:d8:c9:63:da:45:3d:cb:52:88:8b:3d: f5:80:ee:7e:c8:58:a2:c5:9b:94:dc:cf:c0:7a:27: 29:69:29:d9:25:84:33:8a:69:25:57:75:c0:41:0c: 52:36:bd:1a:dd:c6:ec:3e:ec:cb:b4:15:86:79:66: bc:5f:11:6e:9e:14:a1:37:fe:c6:2d:22:9c:02:ae: cb:ca:8b:50:1b:46:3d:99:c5:6f:10:f9:88:62:69: 45:64:15:fc:02:a5:7b:63:81:ff:5b:89:ae:a4:72: 8c:db:c9:cd:0a:a3:69:cc:fc:f5:10:6b:7a:fb:57: 91:f0:c8:86:92:5b:47:01:45:84:5f:a5:c2:90:30: 14:3b:15:02:52:08:b9:14:06:84:ae:4c:c1:38:a2: cd:4f:30:02:af:67:ef:73:99:f8:0e:d4:7e:35:a7: 6c:07:64:2a:fc:d9:b3:56:8b:34:91:09:18:95:b2: 96:17:ac:13:f4:ea:7d:63:36:1e:06:f6:91:ba:3d: 0b:f1:1c:78:2c:92:2e:02:60:2f:1b:95:9c:3f:64: 8d:cb:6f:33:78:b1:97:43:65:f0:d7:ca:3c:21:ef: b0:2e:22:7e:ae:0a:ba:9f:1d:0e:5c:c6:2c:0d:51: d4:89:7f:42:88:93:9d:33:b9:a2:b7:b7:be:e7:1a: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.73.149.0/24 IPv6: 2a0b:bac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208267 Signature Algorithm: sha256WithRSAEncryption 4c:be:ef:88:b3:e6:6b:e5:62:6c:1f:21:8a:02:f2:18:7a:25: a6:c5:27:08:1a:ef:c4:2f:5c:aa:d5:af:37:ff:d4:9b:f4:7a: 4a:ed:cd:09:ec:e6:b7:70:f1:0e:06:3c:4a:9f:7a:fe:01:c8: a4:7e:b1:26:28:ce:8b:30:56:ee:49:91:0b:cb:df:8e:fa:36: e8:27:cf:04:ff:4d:27:cb:e3:11:d0:0f:67:3f:a7:66:84:a5: af:7d:7b:b5:2f:23:f7:60:7c:da:0e:e1:9c:df:df:65:fd:3c: 71:3e:bf:ec:8e:bb:ad:27:47:90:67:f9:d5:71:66:cc:d9:e7: ab:13:b9:33:fd:42:d6:76:6f:02:1a:7f:43:3f:31:11:93:88: b7:10:0c:5a:9d:ad:c7:6a:06:60:a1:42:c2:0f:04:12:9b:52: 2d:f3:14:3f:42:06:53:26:97:2b:80:7c:3d:64:36:e4:ff:26: 91:23:98:43:45:46:3f:96:1e:f7:0e:e0:8f:c3:fa:06:6b:49: 46:df:ee:9f:21:56:0b:89:b7:40:a1:7b:57:6b:9d:68:89:0f: 97:b2:4a:fc:be:f4:1c:4a:cf:03:6d:d8:d0:06:a9:8c:56:cc: 6b:99:49:3c:69:d4:24:14:e0:1e:33:84:03:6d:a1:ea:d6:25: c0:31:1d:8c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZwJfiIbVwdSLWVRLOXzUH+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI5MTEyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mjg1NmYzOGUwNTEzZjlmZWFiMDU3OGM3NzdkN2JkMDYzYTI3NGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE6h2Mlj2kU9y1KIiz31gO5+yFii xZuU3M/AeicpaSnZJYQzimklV3XAQQxSNr0a3cbsPuzLtBWGeWa8XxFunhShN/7G LSKcAq7LyotQG0Y9mcVvEPmIYmlFZBX8AqV7Y4H/W4mupHKM28nNCqNpzPz1EGt6 +1eR8MiGkltHAUWEX6XCkDAUOxUCUgi5FAaErkzBOKLNTzACr2fvc5n4DtR+Nads B2Qq/NmzVos0kQkYlbKWF6wT9Op9YzYeBvaRuj0L8Rx4LJIuAmAvG5WcP2SNy28z eLGXQ2Xw18o8Ie+wLiJ+rgq6nx0OXMYsDVHUiX9CiJOdM7mit7e+5xoXtwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFKFbzjgUT+f6rBXjHd9e9BjonSqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyL2M0Mzky OS0wYzMwLTRiOWYtYjExOC05MTRhMTZlNmEzNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvYzQzOTI5 LTBjMzAtNGI5Zi1iMTE4LTkxNGExNmU2YTM0ZS8xL1VvVnZPT0JSUDVfcXNGZU1k MzE3MEdPaWRLby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1EmVMA0EAgACMAcDBQMqC7rAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtizANBgkqhkiG9w0BAQsFAAOCAQEATL7viLPma+Vi bB8higLyGHolpsUnCBrvxC9cqtWvN//Um/R6Su3NCezmt3DxDgY8Sp96/gHIpH6x JijOizBW7kmRC8vfjvo26CfPBP9NJ8vjEdAPZz+nZoSlr317tS8j92B82g7hnN/f Zf08cT6/7I67rSdHkGf51XFmzNnnqxO5M/1C1nZvAhp/Qz8xEZOItxAMWp2tx2oG YKFCwg8EEptSLfMUP0IGUyaXK4B8PWQ25P8mkSOYQ0VGP5Ye9w7gj8P6BmtJRt/u nyFWC4m3QKF7V2udaIkPl7JK/L70HErPA23Y0AapjFbMa5lJPGnUJBTgHjOEA22h 6tYlwDEdjA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:56 2026 by rpki-client