This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yuMiUfEbz-mT0lR4AkweYd1Hp58.cer File: yuMiUfEbz-mT0lR4AkweYd1Hp58.cer (raw, json) Hash identifier: 4fwo9YaazIs1z8/C7JKkHVsjn25i4Z61gvAFq3VcIqU= Subject key identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596DF50914695AE2F4B1F893214FD9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216030 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6d:f5:09:14:69:5a:e2:f4:b1:f8:93:21:4f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cae32251f11bcfe993d25478024c1e61dd47a79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:e9:ef:bb:81:f0:79:c6:91:e5:99:be:21: 66:1b:6f:b1:2d:99:e9:47:7b:94:da:a7:41:a9:35: 91:c5:e0:1a:7b:4a:eb:40:5b:58:e3:d2:ab:b5:0e: ca:ab:a4:c9:9b:13:1b:7d:74:81:30:02:54:19:b2: e5:df:ee:bf:da:6a:ae:65:89:21:84:b5:fe:1e:81: 2c:a2:41:ea:07:4f:ca:66:d8:61:00:a4:12:dc:d9: f0:fa:a3:d0:62:83:35:02:97:ae:db:a5:f4:14:73: c5:88:2e:07:35:12:86:00:21:69:bc:ed:30:e8:e9: 3d:6a:b9:32:10:fd:04:55:c4:26:f9:7c:65:c9:5b: 3d:07:41:3b:0d:f7:b0:6a:50:9f:57:b2:f3:04:1c: 9a:8f:5c:fe:4a:07:22:08:aa:7f:c3:06:cd:e3:d2: 2d:f1:a0:01:12:fc:0c:88:bf:1f:be:4b:8d:d3:b4: c6:2e:a2:90:c7:4d:21:32:f9:e7:61:1f:00:ef:3c: 0e:e6:49:9e:a2:de:02:4f:97:70:91:f3:a3:a7:bd: ad:85:4a:39:7b:1d:c2:24:fd:30:94:e2:c4:80:5e: 21:c2:9a:cc:a7:af:3d:a2:aa:9c:e7:7f:b8:7c:12: de:62:c7:65:81:1a:d0:c2:4c:50:13:9c:fa:b1:06: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:22:51:F1:1B:CF:E9:93:D2:54:78:02:4C:1E:61:DD:47:A7:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/924ffb-b984-4990-a847-81f9966e4271/1/yuMiUfEbz-mT0lR4AkweYd1Hp58.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216030 Signature Algorithm: sha256WithRSAEncryption 26:d6:b3:eb:47:50:9c:b9:54:6b:4b:64:e5:8b:31:c3:8b:79: 52:71:2c:5d:0d:96:eb:c4:96:c8:df:c5:cb:53:56:80:b1:05: cf:f6:2b:bf:1b:e0:e2:f9:a0:02:a6:8d:11:07:6e:42:fb:32: 09:9e:09:8d:79:fa:19:bd:00:10:2c:30:1f:3e:5f:cd:71:f7: c4:9b:af:44:f6:c3:4b:e5:11:20:da:0f:92:28:81:1b:c6:27: 16:db:99:e6:76:3f:a8:ae:4f:9f:93:9d:e0:d9:02:0b:c6:7e: 27:f4:ba:c6:cc:80:01:19:42:91:be:27:c6:35:5c:fc:31:7e: 99:fe:c1:de:31:61:47:d3:e3:03:e4:6d:34:ad:62:5e:d4:43: ef:68:29:f9:81:24:b3:07:78:f7:7b:80:a6:ef:8c:83:1e:8e: df:cc:21:13:78:35:36:fc:33:b5:d1:ab:1c:00:4a:ca:44:c7: ab:10:bb:45:74:af:39:ee:40:b1:4c:cf:e1:0b:89:f7:ee:19: 7d:fa:00:d9:8a:86:6c:65:be:26:d4:7a:11:c2:2e:e7:54:81: 6c:64:c2:e6:52:b0:81:0e:3d:ec:bf:81:f1:13:14:11:51:ad: 5f:f3:b8:a0:4a:ee:0c:a6:d2:31:ca:b3:1f:a9:6d:97:88:08: 8d:c7:33:dd -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt3WW31CRRpWuL0sfiTIU/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWUzMjI1MWYxMWJjZmU5OTNkMjU0NzgwMjRjMWU2MWRkNDdhNzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8Lp77uB8HnGkeWZviFmG2+xLZnp R3uU2qdBqTWRxeAae0rrQFtY49KrtQ7Kq6TJmxMbfXSBMAJUGbLl3+6/2mquZYkh hLX+HoEsokHqB0/KZthhAKQS3Nnw+qPQYoM1Apeu26X0FHPFiC4HNRKGACFpvO0w 6Ok9arkyEP0EVcQm+XxlyVs9B0E7DfewalCfV7LzBByaj1z+SgciCKp/wwbN49It 8aABEvwMiL8fvkuN07TGLqKQx00hMvnnYR8A7zwO5kmeot4CT5dwkfOjp72thUo5 ex3CJP0wlOLEgF4hwprMp689oqqc53+4fBLeYsdlgRrQwkxQE5z6sQaEPQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMrjIlHxG8/pk9JUeAJMHmHdR6efMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzkyNGZm Yi1iOTg0LTQ5OTAtYTg0Ny04MWY5OTY2ZTQyNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvOTI0ZmZi LWI5ODQtNDk5MC1hODQ3LTgxZjk5NjZlNDI3MS8xL3l1TWlVZkViei1tVDBsUjRB a3dlWWQxSHA1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNL3jANBgkqhkiG9w0BAQsFAAOCAQEAJtaz60dQnLlU a0tk5Ysxw4t5UnEsXQ2W68SWyN/Fy1NWgLEFz/Yrvxvg4vmgAqaNEQduQvsyCZ4J jXn6Gb0AECwwHz5fzXH3xJuvRPbDS+URINoPkiiBG8YnFtuZ5nY/qK5Pn5Od4NkC C8Z+J/S6xsyAARlCkb4nxjVc/DF+mf7B3jFhR9PjA+RtNK1iXtRD72gp+YEkswd4 93uApu+Mgx6O38whE3g1NvwztdGrHABKykTHqxC7RXSvOe5AsUzP4QuJ9+4ZffoA 2YqGbGW+JtR6EcIu51SBbGTC5lKwgQ497L+B8RMUEVGtX/O4oEruDKbSMcqzH6lt l4gIjccz3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:42 2026 by rpki-client