This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer File: KUoc22jxVM-VQYowjILY2lB3UQk.cer (raw, json) Hash identifier: ryesmuj3NUnrgGAXwHPsDyTGK+cycuY9Nomx2gU8qAo= Subject key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED1840ECF742B58FEE04112ADD7B18 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.16.245.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:18:40:ec:f7:42:b5:8f:ee:04:11:2a:dd:7b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=294a1cdb68f154cf95418a308c82d8da50775109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:0e:75:0d:ec:a6:6b:8e:28:14:c4:e0:77: 4a:51:99:aa:61:a8:f9:e0:bd:02:98:80:cd:cd:3c: 6c:fc:d1:8a:81:e5:73:81:14:5d:c1:ca:6a:77:8a: 9b:88:36:4b:ee:8b:bb:9b:27:d4:01:a2:ac:e3:8a: e6:05:50:03:9e:8f:7a:41:68:2c:12:8f:8e:1c:ed: 02:8d:03:95:d8:91:29:99:a5:cd:97:5f:ba:6d:f6: 98:90:0b:0d:82:cf:dd:b2:67:71:d1:34:86:ab:7e: b7:17:fe:f8:64:df:37:c5:73:cc:c9:db:5e:17:fd: ff:81:8f:a6:70:5c:4e:0c:14:d4:cd:df:c8:01:69: bf:b5:68:fe:83:2d:09:1e:63:7c:9d:fc:91:e6:a4: d7:e8:4f:c2:d5:86:dc:c7:56:4a:8b:dd:b3:29:30: 80:34:4f:4e:5c:4c:dc:05:df:0a:97:7c:59:4a:2f: 6d:cd:37:4b:43:d6:93:01:9d:0e:f5:1d:96:ca:ac: 0e:c3:bd:24:45:2e:7f:95:6f:fc:9c:1f:ec:44:d3: 8c:0b:4f:cb:1f:28:b5:77:b4:e9:c7:8e:55:b0:a5: 36:50:88:57:f2:57:1e:8f:f1:d3:5a:b9:dc:6f:e8: db:a0:60:d4:23:de:b5:49:35:7b:63:68:ec:04:15: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.245.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:5f:81:d2:f9:2a:ac:62:a1:ef:e7:33:3f:5b:c4:52:0d:95: 8a:68:35:d7:d5:39:4d:89:09:32:86:60:0f:59:56:67:a5:81: c7:db:11:26:e5:d5:74:e4:60:58:bb:4c:9f:84:98:f9:33:a9: f6:7a:f2:6d:3c:0a:c5:ab:e4:ac:c0:aa:b9:c9:ec:7c:02:55: 94:4f:41:88:b0:f4:01:86:f9:8f:c3:0f:22:d1:09:2f:c4:bd: 82:aa:63:98:cb:93:54:7f:16:8c:51:e8:a9:72:cd:0e:d2:a0: 79:ca:6c:32:be:7b:92:77:30:5b:5a:52:a0:b4:49:58:b9:c1: 50:1c:34:2b:31:95:e1:a5:18:19:de:fa:c5:01:f7:46:eb:24: 49:03:84:2a:cb:b8:3b:bd:c9:98:e4:93:a5:a9:2e:c0:c5:ca: 87:89:c9:38:8b:e7:d6:62:22:7a:7f:85:85:73:b4:74:7b:c1: 3d:8e:64:1c:3a:4d:ca:b0:be:70:37:39:61:b6:87:7f:11:fb: 05:b0:e8:8c:b5:84:bd:cb:58:d1:ea:7f:82:6c:98:26:16:e2: 7f:89:7f:df:22:2e:08:f8:23:31:98:64:a0:37:37:47:46:6a: 20:5e:fb:18:a9:58:c6:9d:e5:c8:df:9e:ba:ef:ff:8b:41:da: 5a:30:5d:bc -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87RhA7PdCtY/uBBEq3XsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTRhMWNkYjY4ZjE1NGNmOTU0MThhMzA4YzgyZDhkYTUwNzc1MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGUOdQ3spmuOKBTE4HdKUZmqYaj5 4L0CmIDNzTxs/NGKgeVzgRRdwcpqd4qbiDZL7ou7myfUAaKs44rmBVADno96QWgs Eo+OHO0CjQOV2JEpmaXNl1+6bfaYkAsNgs/dsmdx0TSGq363F/74ZN83xXPMydte F/3/gY+mcFxODBTUzd/IAWm/tWj+gy0JHmN8nfyR5qTX6E/C1Ybcx1ZKi92zKTCA NE9OXEzcBd8Kl3xZSi9tzTdLQ9aTAZ0O9R2WyqwOw70kRS5/lW/8nB/sRNOMC0/L Hyi1d7Tpx45VsKU2UIhX8lcej/HTWrncb+jboGDUI961STV7Y2jsBBUXDwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFClKHNto8VTPlUGKMIyC2NpQd1EJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzA0ZjQ3 NC1lM2I1LTQ1OTUtYTA0NC02NTdlNDFjNjNjYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMDRmNDc0 LWUzYjUtNDU5NS1hMDQ0LTY1N2U0MWM2M2NhOS8xL0tVb2MyMmp4Vk0tVlFZb3dq SUxZMmxCM1VRay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRD1MA0GCSqGSIb3DQEBCwUAA4IBAQAvX4HS +SqsYqHv5zM/W8RSDZWKaDXX1TlNiQkyhmAPWVZnpYHH2xEm5dV05GBYu0yfhJj5 M6n2evJtPArFq+SswKq5yex8AlWUT0GIsPQBhvmPww8i0QkvxL2CqmOYy5NUfxaM Ueipcs0O0qB5ymwyvnuSdzBbWlKgtElYucFQHDQrMZXhpRgZ3vrFAfdG6yRJA4Qq y7g7vcmY5JOlqS7AxcqHick4i+fWYiJ6f4WFc7R0e8E9jmQcOk3KsL5wNzlhtod/ EfsFsOiMtYS9y1jR6n+CbJgmFuJ/iX/fIi4I+CMxmGSgNzdHRmogXvsYqVjGneXI 35667/+LQdpaMF28 -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:24 2026 by rpki-client