This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer File: uMFf4eGcuByzRp_KpcYCOmxcRaM.cer (raw, json) Hash identifier: ljnGYWf3KMMRw7xuN1upD3uAUyasqXFxwCtnM0unRSA= Subject key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910F9ABDEE7AA1E697FFC92E6B60CF9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42162 IP: 85.31.152.0/21 IP: 185.70.80.0/22 IP: 2a03:3420::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f9:ab:de:e7:aa:1e:69:7f:fc:92:e6:b6:0c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:7e:95:4d:82:44:20:fa:8a:af:dd:25:48: ff:a1:89:0f:55:6b:a7:4c:1c:b8:f7:ed:21:d2:7a: d5:20:7a:56:9d:bf:b0:5b:38:a7:e8:ad:9d:32:ba: 48:ad:15:a5:16:bc:d0:56:2f:a6:48:18:85:20:97: 4c:7f:78:7b:a7:97:18:ec:e2:5b:f4:23:75:f0:c7: 01:1e:6d:13:33:c8:5e:66:5e:a2:46:65:b8:91:dc: e6:cb:2b:5a:6f:38:9f:05:69:a2:88:87:c9:c4:78: 3a:ba:19:71:aa:2b:c2:92:7e:77:c3:6f:f5:59:ca: 6c:c2:ae:12:28:f1:f1:f8:b8:c4:96:a4:6f:b8:61: 96:34:48:98:d4:a4:26:74:63:f0:32:a1:f1:1e:46: a0:07:9d:8a:af:cd:97:11:d4:c7:14:47:21:23:df: da:79:6c:df:37:fb:45:d6:78:51:2e:f8:30:f4:06: 06:7d:c4:95:93:d4:db:75:2b:25:29:d5:d7:1b:dd: d0:7d:a5:f0:4a:96:ad:2e:88:95:2a:63:94:8c:7a: 41:4a:95:5b:aa:3e:ac:d3:7e:e0:ad:59:11:f7:cf: 3f:f8:47:cf:b7:ef:bd:b9:01:0a:de:b7:fb:8e:89: 90:e0:24:83:97:a1:8c:65:7d:fe:4d:a8:b3:9c:48: 3e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.152.0/21 185.70.80.0/22 IPv6: 2a03:3420::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42162 Signature Algorithm: sha256WithRSAEncryption 6a:93:5c:cd:65:50:b9:d7:c0:dc:2b:23:2d:d6:45:ae:66:34: 04:a7:7b:24:7f:b5:5c:35:24:ec:d8:41:db:18:ac:6c:37:11: 5e:58:b6:83:fe:da:9a:cd:38:7c:6a:80:a6:14:71:0d:cc:11: 32:5a:a6:c6:02:6c:e3:bc:83:c4:13:b3:a6:0d:a7:17:e0:a1: 14:69:6e:e0:13:31:87:80:3c:7d:62:84:65:ce:e9:86:6f:1e: b6:6b:ef:e7:96:9b:ef:97:c5:c5:6c:a9:32:ee:67:bd:f8:7f: c3:cb:36:54:fc:91:48:0e:00:28:c6:ab:e8:84:e9:4c:f6:ab: af:0d:d5:be:6a:d1:46:a6:08:cf:96:a6:f3:0c:fe:ff:9f:1b: 3d:34:be:5b:2d:2a:34:e1:49:aa:23:11:7e:d1:41:17:5a:61: 9f:20:e4:89:c2:b4:3e:8c:9b:ee:66:c8:c4:bf:4c:ec:10:ef: 6f:f7:03:f7:e1:37:1e:ea:68:f0:10:ee:7b:db:67:9f:9b:ec: 96:f2:85:dd:5a:49:10:2b:5b:08:ff:de:3d:8e:3a:8d:f5:07: f0:91:34:13:33:d4:0f:42:48:bc:de:10:48:34:d9:9b:45:71: 6f:b2:0f:bf:7e:13:67:91:9b:be:ea:32:8c:d9:87:9e:34:c4: 91:95:77:08 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EPmr3ueqHml//JLmtgz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGMxNWZlMWUxOWNiODFjYjM0NjlmY2FhNWM2MDIzYTZjNWM0NWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaR+lU2CRCD6iq/dJUj/oYkPVWun TBy49+0h0nrVIHpWnb+wWzin6K2dMrpIrRWlFrzQVi+mSBiFIJdMf3h7p5cY7OJb 9CN18McBHm0TM8heZl6iRmW4kdzmyytabzifBWmiiIfJxHg6uhlxqivCkn53w2/1 Wcpswq4SKPHx+LjElqRvuGGWNEiY1KQmdGPwMqHxHkagB52Kr82XEdTHFEchI9/a eWzfN/tF1nhRLvgw9AYGfcSVk9TbdSslKdXXG93QfaXwSpatLoiVKmOUjHpBSpVb qj6s037grVkR988/+EfPt++9uQEK3rf7jomQ4CSDl6GMZX3+TaiznEg+mQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLjBX+HhnLgcs0afyqXGAjpsXEWjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1Lzc0MTky Zi1lN2Y0LTQ4YzAtODRjOS1mMjU4YzExY2U3N2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvNzQxOTJm LWU3ZjQtNDhjMC04NGM5LWYyNThjMTFjZTc3ZS8xL3VNRmY0ZUdjdUJ5elJwX0tw Y1lDT214Y1JhTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDVR+YAwQCuUZQMA0EAgACMAcDBQAqAzQgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCksjANBgkqhkiG9w0BAQsFAAOCAQEAapNc zWVQudfA3CsjLdZFrmY0BKd7JH+1XDUk7NhB2xisbDcRXli2g/7ams04fGqAphRx DcwRMlqmxgJs47yDxBOzpg2nF+ChFGlu4BMxh4A8fWKEZc7phm8etmvv55ab75fF xWypMu5nvfh/w8s2VPyRSA4AKMar6ITpTParrw3VvmrRRqYIz5am8wz+/58bPTS+ Wy0qNOFJqiMRftFBF1phnyDkicK0Poyb7mbIxL9M7BDvb/cD9+E3Hupo8BDue9tn n5vslvKF3VpJECtbCP/ePY46jfUH8JE0EzPUD0JIvN4QSDTZm0Vxb7IPv34TZ5Gb vuoyjNmHnjTEkZV3CA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:11 2026 by rpki-client