This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer File: fUOw7HmVHV1VgBM-UympDy_uHFs.cer (raw, json) Hash identifier: l99c3cJxnxHzYnE9/PyI8IZ+R3m3OX3AU+quraKWIRY= Subject key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59C59CDE10E582468FDED7B01200A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.130.192.0/21 IP: 185.45.80.0/22 IP: 2a04:dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:c5:9c:de:10:e5:82:46:8f:de:d7:b0:12:00:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:6f:4e:d4:e2:e1:4e:53:64:7c:ed:05:81: f8:32:36:71:20:bc:f6:44:e5:6f:8d:48:11:58:92: 72:46:83:91:64:1d:67:63:c8:6d:0d:38:3c:9f:62: 59:3a:8d:b0:11:1a:be:a2:73:71:92:b3:d5:23:39: de:8a:8b:59:0d:62:9c:91:e6:2f:b1:f0:a0:d2:11: 26:60:34:39:40:23:79:0c:02:8e:92:f6:5a:28:8a: 3e:f6:ff:ec:f2:da:59:da:d0:2f:0e:c4:b4:2e:36: dc:52:ac:27:08:85:12:90:51:20:d0:f8:45:7f:4a: 73:f0:bd:5e:3e:21:a5:d8:34:67:9d:92:4f:85:21: 89:0d:33:00:91:49:be:2e:1a:40:06:c5:89:67:76: 0c:08:da:74:cc:d8:a9:a2:62:6e:cf:d0:c6:f2:70: be:f7:21:4a:80:fd:db:2b:53:c0:0c:1a:59:5a:27: 80:26:35:f4:0b:df:b2:9c:26:cc:cb:08:36:0a:92: 16:cd:30:df:87:09:5f:a3:04:1a:9e:13:79:6f:2c: 64:58:47:6a:ac:62:fa:20:f0:b4:06:51:ab:78:a9: 3d:9c:52:01:08:89:bc:8a:be:f2:78:e4:21:e3:6e: c0:89:ef:ec:33:02:77:a2:92:a7:a6:16:92:d4:56: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.192.0/21 185.45.80.0/22 IPv6: 2a04:dc0::/29 Signature Algorithm: sha256WithRSAEncryption 00:e7:a2:3a:84:53:08:7f:71:ff:c6:ce:aa:b3:88:37:87:5e: f6:e7:75:43:43:df:ed:38:54:48:06:1b:e7:5b:ad:9d:53:9f: 6d:d6:f0:a2:2b:4a:f5:ee:be:0f:bb:a0:5c:c1:1b:aa:8f:5b: 2c:c9:68:33:b4:e6:54:6b:e8:db:3e:e9:9a:76:95:81:b1:79: 2d:e7:7c:00:7b:16:04:df:61:67:80:46:df:9c:72:9d:ad:51: a7:b1:a2:f9:53:60:b1:d3:a9:f8:a7:e7:aa:63:d7:25:c1:2c: 86:f2:f8:8f:e5:e6:c6:7d:54:b9:b1:ab:42:02:fd:03:57:0c: 6d:d7:23:d6:76:ad:bd:62:0a:f3:53:c9:30:1f:e1:27:83:92: c1:fc:e9:40:b5:0e:c1:bf:a2:e0:08:27:c0:72:21:c2:56:bc: d7:c4:50:1a:a7:8c:1a:48:44:04:65:d5:e9:30:4b:02:01:0f: 15:60:c9:03:aa:1a:fa:3d:c2:ff:d0:ad:68:65:59:25:94:48: f0:49:c6:1e:ba:8b:da:c6:1b:ec:36:b5:a0:cc:94:18:72:14: 4d:9a:21:e2:49:39:af:a5:a9:08:a6:c9:5d:db:7d:02:ac:35: f8:0d:e5:09:2c:ad:4b:89:e6:ab:f1:e2:f1:27:f4:3a:cd:d1: 3c:e7:d3:db -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6WcWc3hDlgkaP3tewEgCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQzYjBlYzc5OTUxZDVkNTU4MDEzM2U1MzI5YTkwZjJmZWUxYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty1vTtTi4U5TZHztBYH4MjZxILz2 ROVvjUgRWJJyRoORZB1nY8htDTg8n2JZOo2wERq+onNxkrPVIzneiotZDWKckeYv sfCg0hEmYDQ5QCN5DAKOkvZaKIo+9v/s8tpZ2tAvDsS0LjbcUqwnCIUSkFEg0PhF f0pz8L1ePiGl2DRnnZJPhSGJDTMAkUm+LhpABsWJZ3YMCNp0zNipomJuz9DG8nC+ 9yFKgP3bK1PADBpZWieAJjX0C9+ynCbMywg2CpIWzTDfhwlfowQanhN5byxkWEdq rGL6IPC0BlGreKk9nFIBCIm8ir7yeOQh427Aie/sMwJ3opKnphaS1FatyQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFH1DsOx5lR1dVYATPlMpqQ8v7hxbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzI2MDRl MC05MWZhLTRmZTktYmIyOC05M2E2MTkyYjE3ODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvMjYwNGUw LTkxZmEtNGZlOS1iYjI4LTkzYTYxOTJiMTc4NS8xL2ZVT3c3SG1WSFYxVmdCTS1V eW1wRHlfdUhGcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJYLAAwQCuS1QMA0EAgACMAcDBQMqBA3AMA0G CSqGSIb3DQEBCwUAA4IBAQAA56I6hFMIf3H/xs6qs4g3h17253VDQ9/tOFRIBhvn W62dU59t1vCiK0r17r4Pu6BcwRuqj1ssyWgztOZUa+jbPumadpWBsXkt53wAexYE 32FngEbfnHKdrVGnsaL5U2Cx06n4p+eqY9clwSyG8viP5ebGfVS5satCAv0DVwxt 1yPWdq29YgrzU8kwH+Eng5LB/OlAtQ7Bv6LgCCfAciHCVrzXxFAap4waSEQEZdXp MEsCAQ8VYMkDqhr6PcL/0K1oZVkllEjwScYeuovaxhvsNrWgzJQYchRNmiHiSTmv pakIpsld230CrDX4DeUJLK1Liear8eLxJ/Q6zdE859Pb -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:32 2026 by rpki-client