This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer File: uCiOqePWfcPTj6d1GBxLLIdym98.cer (raw, json) Hash identifier: 37I969jMqtYLjXWrnUZjxNoMFfhVry92CCrIZr0JlOg= Subject key identifier: B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EBA5F213FB783C2F2223D8FBA28EE6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50385 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a5:f2:13:fb:78:3c:2f:22:23:d8:fb:a2:8e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:7c:70:ff:f0:98:2c:bf:41:15:b3:7b:48: 7c:f6:4a:2b:8f:5c:e1:9d:74:48:48:c3:2b:89:60: 1f:56:7f:ea:dd:0d:82:74:84:07:0b:d9:9a:5d:f7: 60:64:5a:3b:19:35:2b:4d:ea:ed:e1:62:18:50:db: 90:2d:02:b2:04:e2:05:c3:2d:9e:76:d2:47:a3:a3: 85:79:f1:61:63:05:20:3f:43:0c:da:04:7e:54:69: 4c:45:e4:38:86:56:c5:4e:25:32:80:f5:24:db:fe: 34:70:f9:b2:f5:a0:6f:c9:46:12:6d:22:7f:12:fd: 5a:c9:bc:e4:02:fb:97:70:5d:3b:1d:df:36:6a:0e: b1:cd:99:fb:d0:15:b0:bc:8f:04:76:70:f3:b1:38: 29:83:a6:26:f9:07:49:2a:fb:33:86:c9:c5:1c:82: 08:39:3b:a7:93:b4:dd:29:cf:77:22:d9:fd:e2:71: 7f:c1:f9:61:5c:12:9a:b6:32:c9:0f:bf:28:89:b1: 59:ed:78:27:d3:f4:56:77:3b:45:08:40:fe:84:5a: 64:8b:7b:d5:95:d8:91:f9:ce:7e:d7:59:af:05:c9: 0f:ce:56:ce:9a:d0:df:9a:3b:b5:dd:6a:22:a2:18: 72:00:3f:4b:bb:cf:8f:e5:01:45:de:87:9e:95:d8: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 50385 Signature Algorithm: sha256WithRSAEncryption 42:15:05:a5:8d:dc:cb:ab:32:a0:e0:0f:04:af:a1:4d:e2:f7: e7:eb:94:9d:c1:f9:ea:fe:a2:45:56:36:6b:10:5d:1c:00:54: dd:5a:45:07:71:28:ff:fb:52:8c:d1:94:3c:fb:b1:ed:91:8d: 1c:b7:4b:16:00:c9:e6:4d:3e:33:42:6e:62:81:46:fa:8d:ea: 87:68:cc:61:ad:b0:83:52:d5:5e:7a:89:90:02:ea:8c:ad:5d: d1:0a:0a:01:22:92:9d:d8:3c:7f:1f:d7:77:de:18:bf:1e:de: 00:10:d9:9b:35:35:11:b3:c5:97:82:84:9c:06:68:cf:d7:17: e2:02:dc:a9:6e:7b:e1:f0:f7:ba:73:b6:02:b6:d5:86:13:4d: 49:d6:d9:74:a8:c8:e7:78:8d:37:fc:46:fe:52:58:d7:9d:84: e9:ab:e8:51:1a:34:e4:c2:b9:e9:9a:6f:2d:ac:12:74:1f:3a: eb:ae:93:96:12:28:33:f9:a9:45:47:ba:31:fa:07:7d:b7:70: 76:32:c7:59:b9:71:aa:86:da:98:f4:1b:3b:0d:a4:91:7f:04: 74:fa:19:d0:51:96:ad:50:c3:5e:95:6e:f1:ad:4b:d4:bf:d4: 8d:44:d2:e0:de:8b:41:ce:9e:b9:25:23:a8:20:28:a5:39:f5: d1:e5:4a:1b -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt266XyE/t4PC8iI9j7oo7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODI4OGVhOWUzZDY3ZGMzZDM4ZmE3NzUxODFjNGIyYzg3NzI5YmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwV8cP/wmCy/QRWze0h89korj1zh nXRISMMriWAfVn/q3Q2CdIQHC9maXfdgZFo7GTUrTert4WIYUNuQLQKyBOIFwy2e dtJHo6OFefFhYwUgP0MM2gR+VGlMReQ4hlbFTiUygPUk2/40cPmy9aBvyUYSbSJ/ Ev1aybzkAvuXcF07Hd82ag6xzZn70BWwvI8EdnDzsTgpg6Ym+QdJKvszhsnFHIII OTunk7TdKc93Itn94nF/wflhXBKatjLJD78oibFZ7Xgn0/RWdztFCED+hFpki3vV ldiR+c5+11mvBckPzlbOmtDfmju13WoiohhyAD9Lu8+P5QFF3oeeldjt3wIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFLgojqnj1n3D04+ndRgcSyyHcpvfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNjOGU0 ZTExLTNhY2EtNDMwNS1hY2Q0LWYwNWU2YzkwOTExNS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2M4 ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5MTE1LzAvQjgyODhFQTlFM0Q2 N0RDM0QzOEZBNzc1MTgxQzRCMkM4NzcyOUJERi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAxNEw DQYJKoZIhvcNAQELBQADggEBAEIVBaWN3MurMqDgDwSvoU3i9+frlJ3B+er+okVW NmsQXRwAVN1aRQdxKP/7UozRlDz7se2RjRy3SxYAyeZNPjNCbmKBRvqN6odozGGt sINS1V56iZAC6oytXdEKCgEikp3YPH8f13feGL8e3gAQ2Zs1NRGzxZeChJwGaM/X F+IC3Klue+Hw97pztgK21YYTTUnW2XSoyOd4jTf8Rv5SWNedhOmr6FEaNOTCuema by2sEnQfOuuuk5YSKDP5qUVHujH6B323cHYyx1m5caqG2pj0GzsNpJF/BHT6GdBR lq1Qw16VbvGtS9S/1I1E0uDei0HOnrklI6ggKKU59dHlShs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:16 2026 by rpki-client