This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer File: uo1nmL3QsriAXUOzRV92c5uUbx0.cer (raw, json) Hash identifier: RjjHAZBpSOaPwDss91IHMk4eUZ6sdGb23hpVjFguJnM= Subject key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C129CEC99B07A28D9D1FD1C39D1B3C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:13 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.42.114.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9c:ec:99:b0:7a:28:d9:d1:fd:1c:39:d1:b3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:7a:53:b9:de:62:38:53:ab:f6:b5:0f:21: ce:79:2e:cd:9b:ce:1b:cc:34:46:ae:46:cd:4e:e2: 97:d0:da:e7:60:c4:c1:c0:7a:bd:ba:0c:4a:b3:18: df:3b:ed:98:b9:4d:85:4f:7e:5f:1a:44:36:87:83: b6:78:66:9c:66:72:e5:8c:e5:e7:24:7e:59:8c:ab: 24:5b:6d:1a:3c:4b:a8:e2:ab:d8:93:fa:36:1f:ac: 25:10:04:e4:59:f0:be:7c:19:22:f3:63:26:79:21: c4:de:7a:67:6c:f9:b3:a0:51:7e:77:8e:9a:8f:5e: 63:2f:aa:9f:02:97:88:91:1b:fb:40:48:e6:c3:44: 33:c1:f4:33:28:22:ac:e2:ba:10:8f:89:9c:5d:c7: 11:07:6a:19:64:77:d1:ba:64:94:e4:39:46:35:9d: 9f:3c:8a:6a:b2:d8:a4:3f:ec:91:75:7e:f7:27:ef: 3c:29:25:eb:49:6e:92:5d:b8:94:c5:25:21:95:a0: fb:d7:70:d7:29:9e:a1:f7:84:64:98:29:7b:c9:89: 5e:26:b3:01:ba:5e:3e:e6:a1:52:88:8d:8c:d0:8b: 20:9e:b5:a4:b7:da:94:c0:d5:08:18:38:19:77:8c: 3d:58:5a:1c:ed:d2:1c:e2:79:09:44:0d:0e:c9:ff: 6c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.42.114.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:bc:9d:1d:38:a9:f0:90:98:ca:80:26:a7:95:92:18:76:82: 14:c7:36:ee:72:d0:b0:55:ad:46:63:04:46:34:95:75:f3:55: 63:34:e8:e4:16:26:e3:78:e9:e4:9d:05:ae:8e:7b:b0:e0:b0: c2:8e:77:b4:88:94:99:5a:70:df:1f:0d:8b:e9:4b:1a:dd:d8: 5a:a4:13:5b:3e:67:e7:a5:39:55:f3:e1:20:53:0c:be:a3:65: 75:9d:29:b9:b3:01:ac:6a:c4:68:79:33:fb:e8:88:94:59:be: 7e:f8:ca:af:b8:5b:4b:df:b9:53:4e:ca:eb:a1:0e:c4:20:85: eb:eb:97:b0:36:ea:1b:b7:eb:d0:7c:0b:14:ab:de:ba:00:ff: e1:79:d1:0f:0a:b4:e2:cb:38:0d:ad:6b:f0:5d:2c:7a:25:db: 41:20:d6:eb:44:16:57:33:de:24:65:bc:e8:ca:da:c6:4c:c1: 50:6b:4e:6e:25:1b:82:92:96:c4:37:28:73:7a:6c:6b:c4:fc: 22:04:6b:99:51:e2:72:0d:f2:35:f6:05:4e:f5:d5:dd:0a:12: 6e:c2:8e:ab:bc:8f:d0:8a:bb:5e:38:92:d6:02:16:76:e4:17: f1:1b:00:45:e5:bf:c7:b1:c8:dc:4f:55:87:45:da:b3:17:8a: 33:1c:c4:2b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EpzsmbB6KNnR/Rw50bPFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYThkNjc5OGJkZDBiMmI4ODA1ZDQzYjM0NTVmNzY3MzliOTQ2ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG16U7neYjhTq/a1DyHOeS7Nm84b zDRGrkbNTuKX0NrnYMTBwHq9ugxKsxjfO+2YuU2FT35fGkQ2h4O2eGacZnLljOXn JH5ZjKskW20aPEuo4qvYk/o2H6wlEATkWfC+fBki82MmeSHE3npnbPmzoFF+d46a j15jL6qfApeIkRv7QEjmw0QzwfQzKCKs4roQj4mcXccRB2oZZHfRumSU5DlGNZ2f PIpqstikP+yRdX73J+88KSXrSW6SXbiUxSUhlaD713DXKZ6h94RkmCl7yYleJrMB ul4+5qFSiI2M0IsgnrWkt9qUwNUIGDgZd4w9WFoc7dIc4nkJRA0Oyf9srwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLqNZ5i90LK4gF1Ds0VfdnOblG8dMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjLzY4YjU3 Yi1kMThkLTQ3ODUtOTdiMC1lYzU2YzBiMDgxYWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvNjhiNTdi LWQxOGQtNDc4NS05N2IwLWVjNTZjMGIwODFhZS8xL3VvMW5tTDNRc3JpQVhVT3pS VjkyYzV1VWJ4MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwCpyMA0GCSqGSIb3DQEBCwUAA4IBAQBMvJ0d OKnwkJjKgCanlZIYdoIUxzbuctCwVa1GYwRGNJV181VjNOjkFibjeOnknQWujnuw 4LDCjne0iJSZWnDfHw2L6Usa3dhapBNbPmfnpTlV8+EgUwy+o2V1nSm5swGsasRo eTP76IiUWb5++MqvuFtL37lTTsrroQ7EIIXr65ewNuobt+vQfAsUq966AP/hedEP CrTiyzgNrWvwXSx6JdtBINbrRBZXM94kZbzoytrGTMFQa05uJRuCkpbENyhzemxr xPwiBGuZUeJyDfI19gVO9dXdChJuwo6rvI/QirteOJLWAhZ25BfxGwBF5b/Hscjc T1WHRdqzF4ozHMQr -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:58 2026 by rpki-client