This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer File: ulPKGOOgSNWfps9ZZnz9OaBXlz4.cer (raw, json) Hash identifier: Q/cohcH36/Ph3oZnOmwxDYEoYrT/hwhFpn2EpNmz15A= Subject key identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A35DCFB9DFE30D737232DD5531EDF2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211670 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5d:cf:b9:df:e3:0d:73:72:32:dd:55:31:ed:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba53ca18e3a048d59fa6cf59667cfd39a057973e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:85:cd:34:51:f2:7c:8e:dc:62:08:b7:1f:63: 66:d3:b5:4e:6d:08:8c:d9:80:91:07:8e:1b:78:62: d0:5d:0e:6e:8b:60:b4:27:fd:2f:32:30:d0:d4:4f: 66:f9:1e:c7:c5:aa:8c:f8:64:17:0f:32:1c:40:6c: a4:05:03:c9:59:da:9e:fb:aa:49:39:26:27:ac:fb: b7:e6:22:a9:c0:77:c2:b4:fd:57:b7:09:8f:9a:3b: 69:02:3f:84:95:ed:88:4f:51:5d:5f:59:06:7a:3e: 6e:8e:70:e8:da:0e:13:5b:ba:3f:6d:9f:fc:68:ec: f8:69:85:8c:5f:5c:0e:da:bb:b2:95:3a:9a:71:97: ad:bc:84:8f:0d:55:6a:34:71:13:0e:8c:1a:b3:ca: e6:41:e6:fd:6c:5c:79:34:15:b7:06:6a:29:aa:20: 67:6a:4b:6e:4f:cc:4e:6e:f5:d6:77:16:80:6c:0c: a4:bc:b3:6b:42:a6:7b:2e:dc:ef:5d:f0:8f:bf:be: dd:df:82:74:4f:2c:e6:71:75:10:77:63:f6:1e:95: 66:51:76:5d:4d:9a:1f:a3:f2:e3:9d:a7:08:92:48: b9:14:4b:10:a4:82:22:c7:53:72:a7:9f:4a:6b:ea: ed:30:4d:2f:05:f6:90:8c:56:38:ac:da:65:9a:39: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:53:CA:18:E3:A0:48:D5:9F:A6:CF:59:66:7C:FD:39:A0:57:97:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/688ce0-10ec-4937-9443-1b20454a2862/1/ulPKGOOgSNWfps9ZZnz9OaBXlz4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211670 Signature Algorithm: sha256WithRSAEncryption 7c:ab:e1:c6:b3:11:ac:96:d2:ee:36:38:46:e9:00:11:1a:6d: 98:d2:8b:03:cb:54:8e:c0:b1:29:19:07:62:c1:32:05:e2:aa: 74:31:b0:57:72:af:22:42:43:a0:e6:31:18:f2:06:2b:1c:a2: 2b:bb:de:9c:52:92:89:06:70:08:0d:f1:f8:01:57:54:32:31: 60:9c:5f:f1:de:c2:2b:84:91:58:a0:c1:b4:bf:f1:2b:9b:73: 38:be:2b:a5:c2:c5:61:32:67:2d:cd:d7:ed:f4:f3:04:89:b8: d0:ed:9e:3a:7a:52:44:dd:48:3b:f4:6b:9d:d3:3c:4a:08:ed: f2:b9:04:75:ed:63:3a:57:f0:97:da:f5:bb:81:a9:cf:d7:20: e6:7c:35:ce:e4:b0:b6:f6:b5:88:fe:07:f2:05:3a:3b:59:5e: 3f:da:6f:e6:c3:5b:99:86:97:5c:5c:c9:61:a7:f4:75:7d:66: 4b:ff:48:96:f2:59:77:41:36:3c:35:97:d3:19:8b:69:29:0b: 67:56:20:b9:8a:bb:a1:78:8e:0a:a5:58:57:4e:47:4d:7f:21: de:9b:a8:5b:74:e6:18:28:81:b9:57:09:5f:b6:f5:07:92:36: cc:c2:3a:40:f5:26:6d:21:1f:77:18:72:0b:4f:7b:80:bf:73: 2c:36:44:0a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4o13Pud/jDXNyMt1VMe3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTUzY2ExOGUzYTA0OGQ1OWZhNmNmNTk2NjdjZmQzOWEwNTc5NzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4XNNFHyfI7cYgi3H2Nm07VObQiM 2YCRB44beGLQXQ5ui2C0J/0vMjDQ1E9m+R7HxaqM+GQXDzIcQGykBQPJWdqe+6pJ OSYnrPu35iKpwHfCtP1XtwmPmjtpAj+Ele2IT1FdX1kGej5ujnDo2g4TW7o/bZ/8 aOz4aYWMX1wO2ruylTqacZetvISPDVVqNHETDowas8rmQeb9bFx5NBW3BmopqiBn aktuT8xObvXWdxaAbAykvLNrQqZ7LtzvXfCPv77d34J0TyzmcXUQd2P2HpVmUXZd TZofo/LjnacIkki5FEsQpIIix1Nyp59Ka+rtME0vBfaQjFY4rNplmjmNDwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLpTyhjjoEjVn6bPWWZ8/TmgV5c+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzY4OGNl MC0xMGVjLTQ5MzctOTQ0My0xYjIwNDU0YTI4NjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvNjg4Y2Uw LTEwZWMtNDkzNy05NDQzLTFiMjA0NTRhMjg2Mi8xL3VsUEtHT09nU05XZnBzOVpa bno5T2FCWGx6NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM61jANBgkqhkiG9w0BAQsFAAOCAQEAfKvhxrMRrJbS 7jY4RukAERptmNKLA8tUjsCxKRkHYsEyBeKqdDGwV3KvIkJDoOYxGPIGKxyiK7ve nFKSiQZwCA3x+AFXVDIxYJxf8d7CK4SRWKDBtL/xK5tzOL4rpcLFYTJnLc3X7fTz BIm40O2eOnpSRN1IO/RrndM8Sgjt8rkEde1jOlfwl9r1u4Gpz9cg5nw1zuSwtva1 iP4H8gU6O1leP9pv5sNbmYaXXFzJYaf0dX1mS/9IlvJZd0E2PDWX0xmLaSkLZ1Yg uYq7oXiOCqVYV05HTX8h3puoW3TmGCiBuVcJX7b1B5I2zMI6QPUmbSEfdxhyC097 gL9zLDZECg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:02 2026 by rpki-client