This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer (raw, json) Hash identifier: NaO3babdAsoZzG4vb22fAPPAjeSKxt973FrsIW/RIOc= Subject key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA74E1E19DC2E6626BB3335E76856B8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.26.125.0/24 IP: 2001:67c:cd8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4e:1e:19:dc:2e:66:26:bb:33:35:e7:68:56:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b68f940f1cc577f370f28428850dc7bf7418f121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:cf:c0:97:c3:87:74:7e:d7:4d:a3:ef:1a: e7:44:a1:63:93:e4:bf:7f:ba:21:ec:cc:91:ab:75: d8:a5:94:ff:d5:8c:9b:c8:6f:7b:01:f4:d6:fa:86: 0f:cf:25:64:13:13:87:5c:5c:c4:e8:a5:89:d4:40: 11:3d:b7:2b:0e:0b:e6:20:3b:6d:7b:11:a6:f6:15: 12:fa:ed:fe:bc:ad:2c:bb:81:8a:10:4f:06:82:38: 4a:e8:d5:36:71:7f:df:b5:2d:80:ee:12:f7:f6:15: 3d:ae:d9:b7:5d:03:0c:b0:0e:b9:f3:d6:3a:ef:02: 6e:dc:e4:97:39:2b:64:da:89:6c:49:68:05:a1:49: 01:14:7d:10:0e:d8:58:14:e8:ae:48:1c:92:76:49: 71:c1:52:6b:19:58:2d:3d:f6:ba:33:b7:b1:7a:ae: 7c:b3:15:ac:e1:fa:91:3a:6b:12:b5:79:e7:29:2b: 52:b4:ec:6a:cb:f5:af:1f:3f:17:d7:3c:c0:62:25: ed:51:94:f7:fc:b8:52:32:c4:85:01:99:1a:e0:bb: 1a:43:25:b2:25:e4:fb:26:cc:f1:c2:b2:26:eb:d1: 8a:05:c9:9e:cd:30:97:e7:f7:5e:c8:33:a8:bc:2f: c4:ff:a4:4d:89:da:fc:09:78:62:41:9c:06:c1:76: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.125.0/24 IPv6: 2001:67c:cd8::/48 Signature Algorithm: sha256WithRSAEncryption 10:38:1c:5a:c4:75:a2:30:b8:73:11:32:2e:20:65:5f:2d:cd: 0d:93:12:13:58:4e:4d:0e:5a:58:2c:c7:44:25:d4:2d:b1:47: ab:78:d1:bd:8a:b2:a2:9e:de:19:f3:ea:dc:d3:3b:d6:ba:24: db:f2:30:1a:63:d0:7d:7b:7f:19:a4:fb:ae:e7:3f:84:6d:06: 3c:3a:52:2b:99:0f:14:a5:9f:30:e8:18:44:5d:c7:c7:29:c4: 73:07:54:8d:5f:93:aa:88:69:f0:eb:61:e7:eb:ab:37:bf:76: ed:8b:23:e6:b8:09:34:05:44:7d:b3:7f:44:52:c9:6f:3c:d7: ac:76:1d:68:2b:7f:47:a1:4f:dc:37:31:71:d6:46:21:07:b1: 6d:1a:4a:ba:cf:15:63:df:d7:11:b5:3f:09:69:2b:29:1d:25: 44:3e:b6:e3:00:2d:ec:70:9b:ee:81:68:a6:a9:39:70:af:d0: e2:b0:40:ed:bf:18:c4:59:9f:84:4f:42:64:52:d0:c4:26:3f: ea:8e:f5:3e:de:94:fa:9d:c8:76:03:e3:8f:c2:08:70:f7:f6: 55:ab:7a:c5:28:5c:8c:e6:ca:e6:b7:97:0c:f7:1e:82:d4:48: 40:29:b9:f4:dc:97:b4:b9:c1:f1:03:b9:65:cc:e2:2a:b9:37: c2:83:7a:7f -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt+p04eGdwuZia7MzXnaFa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjhmOTQwZjFjYzU3N2YzNzBmMjg0Mjg4NTBkYzdiZjc0MThmMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1vPwJfDh3R+102j7xrnRKFjk+S/ f7oh7MyRq3XYpZT/1YybyG97AfTW+oYPzyVkExOHXFzE6KWJ1EARPbcrDgvmIDtt exGm9hUS+u3+vK0su4GKEE8GgjhK6NU2cX/ftS2A7hL39hU9rtm3XQMMsA6589Y6 7wJu3OSXOStk2olsSWgFoUkBFH0QDthYFOiuSBySdklxwVJrGVgtPfa6M7exeq58 sxWs4fqROmsStXnnKStStOxqy/WvHz8X1zzAYiXtUZT3/LhSMsSFAZka4LsaQyWy JeT7JszxwrIm69GKBcmezTCX5/deyDOovC/E/6RNidr8CXhiQZwGwXZLowIDAQAB o4IClTCCApEwHQYDVR0OBBYEFLaPlA8cxXfzcPKEKIUNx790GPEhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzRiMmMy My1mNTM1LTRiNmQtYTQ0NS1lMDRkYWM2MWNlOWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvNGIyYzIz LWY1MzUtNGI2ZC1hNDQ1LWUwNGRhYzYxY2U5ZC8xL3RvLVVEeHpGZF9OdzhvUW9o UTNIdjNRWThTRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwRp9MA8EAgACMAkDBwAgAQZ8DNgwDQYJKoZI hvcNAQELBQADggEBABA4HFrEdaIwuHMRMi4gZV8tzQ2TEhNYTk0OWlgsx0Ql1C2x R6t40b2KsqKe3hnz6tzTO9a6JNvyMBpj0H17fxmk+67nP4RtBjw6UiuZDxSlnzDo GERdx8cpxHMHVI1fk6qIafDrYefrqze/du2LI+a4CTQFRH2zf0RSyW8816x2HWgr f0ehT9w3MXHWRiEHsW0aSrrPFWPf1xG1PwlpKykdJUQ+tuMALexwm+6BaKapOXCv 0OKwQO2/GMRZn4RPQmRS0MQmP+qO9T7elPqdyHYD44/CCHD39lWresUoXIzmyua3 lwz3HoLUSEApufTcl7S5wfEDuWXM4iq5N8KDen8= -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:17 2026 by rpki-client