This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer File: UAm8siUutkaQLMv9TJhssMK5E5g.cer (raw, json) Hash identifier: 4cY9NWRprt7DK3sRDEK157PWhBW4d+ENw7jkOyovmrA= Subject key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36A8DBE5F2442C366169ED92262007 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212591 IP: 2001:67c:590::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a8:db:e5:f2:44:2c:36:61:69:ed:92:26:20:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:35:eb:84:f7:81:e8:f0:68:01:05:60:d1: c5:54:cc:1e:d1:8c:70:b0:5d:55:8d:af:2d:9a:c1: a6:36:12:23:2b:fe:72:74:59:63:03:1d:b4:f6:7c: 6b:0e:5a:6c:20:aa:d2:35:b5:5a:00:4f:81:1b:96: 4f:39:b1:2a:83:c8:1b:1b:f1:45:73:93:cb:c8:e0: 04:73:e5:e0:98:c0:c1:eb:f1:1d:43:df:f9:97:ba: f4:ce:72:ce:27:8a:cd:ca:13:26:46:61:be:5e:9d: da:39:16:88:c6:66:52:fa:c4:95:9a:77:dd:c5:34: bd:4f:6f:f6:85:fb:fb:e2:52:c1:69:98:69:25:18: 15:66:f9:8d:74:4b:23:68:f4:40:bf:45:1a:ac:ad: e0:d7:eb:88:4a:db:4f:65:e6:46:98:41:73:12:cb: a8:98:d5:ee:9f:90:3b:10:e2:9d:cc:ad:37:27:3f: 0e:82:93:87:c0:78:06:59:8e:51:68:3f:6e:86:ec: e9:bc:22:72:ea:82:44:e2:bb:04:7f:f9:df:b7:92: 1f:b8:2c:9e:f3:48:a3:c9:b5:e5:d6:96:f1:2b:4e: c4:b8:13:4c:6d:57:ff:31:12:32:1e:32:47:8a:e9: 5a:2f:b4:fc:60:d0:46:12:c7:25:a2:60:ac:99:81: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:590::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212591 Signature Algorithm: sha256WithRSAEncryption 44:06:1e:f7:cd:25:70:bb:49:c5:db:34:10:2c:e5:ca:45:a3: 21:00:a4:1f:15:11:40:a6:30:be:97:23:77:6f:5d:a6:c5:e4: fe:dc:b8:a4:1e:0d:b2:b2:c7:6b:1d:cc:49:e6:be:f7:8c:89: ea:74:b3:c4:e3:8e:69:43:c1:ac:43:a1:4b:82:73:60:21:7e: 63:84:99:a6:ad:3f:e9:1f:30:92:df:35:44:82:42:a2:08:8f: 78:9f:b6:4a:bd:bd:1a:2d:0e:d7:aa:84:c1:6f:c2:a5:dc:c0: cb:59:4f:3b:5f:42:87:fd:15:18:d5:ef:d7:1b:7b:49:6f:11: da:34:d1:df:9d:78:31:37:fc:6d:8c:27:f9:fd:46:4c:f9:9a: fd:93:9e:4f:3c:c3:f1:df:9e:4b:fd:37:f1:8c:bd:48:59:ba: df:dc:07:1b:2b:8a:09:e0:46:fe:84:b0:4c:2c:08:d4:ac:ce: 51:b2:6b:41:81:04:ad:40:08:3b:4c:05:c1:85:72:4b:f9:81: 7b:23:95:52:7a:74:dc:db:92:5a:15:c7:75:e9:fe:76:2d:e4: 48:80:05:16:80:d1:ff:22:58:0a:ba:07:82:02:cb:40:7d:6a: b1:c3:59:41:0d:14:f7:8d:29:99:bd:0a:dd:ae:59:25:e4:1f: 4d:d7:ec:8b -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt7Nqjb5fJELDZhae2SJiAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDA5YmNiMjI1MmViNjQ2OTAyY2NiZmQ0Yzk4NmNiMGMyYjkxMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz18164T3gejwaAEFYNHFVMwe0Yxw sF1Vja8tmsGmNhIjK/5ydFljAx209nxrDlpsIKrSNbVaAE+BG5ZPObEqg8gbG/FF c5PLyOAEc+XgmMDB6/EdQ9/5l7r0znLOJ4rNyhMmRmG+Xp3aORaIxmZS+sSVmnfd xTS9T2/2hfv74lLBaZhpJRgVZvmNdEsjaPRAv0UarK3g1+uISttPZeZGmEFzEsuo mNXun5A7EOKdzK03Jz8OgpOHwHgGWY5RaD9uhuzpvCJy6oJE4rsEf/nft5IfuCye 80ijybXl1pbxK07EuBNMbVf/MRIyHjJHiulaL7T8YNBGEsclomCsmYHaCQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFFAJvLIlLrZGkCzL/UyYbLDCuROYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2L2YxMmQ4 MC1kZWI2LTRiZjUtODUzYy1kNWRhODU4ZTE1ZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvZjEyZDgw LWRlYjYtNGJmNS04NTNjLWQ1ZGE4NThlMTVmYi8xL1VBbThzaVV1dGthUUxNdjlU Smhzc01LNUU1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAWQMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM+bzANBgkqhkiG9w0BAQsFAAOCAQEARAYe980lcLtJxds0ECzlykWjIQCk HxURQKYwvpcjd29dpsXk/ty4pB4NsrLHax3MSea+94yJ6nSzxOOOaUPBrEOhS4Jz YCF+Y4SZpq0/6R8wkt81RIJCogiPeJ+2Sr29Gi0O16qEwW/CpdzAy1lPO19Ch/0V GNXv1xt7SW8R2jTR3514MTf8bYwn+f1GTPma/ZOeTzzD8d+eS/038Yy9SFm639wH GyuKCeBG/oSwTCwI1KzOUbJrQYEErUAIO0wFwYVyS/mBeyOVUnp03NuSWhXHden+ di3kSIAFFoDR/yJYCroHggLLQH1qscNZQQ0U940pmb0K3a5ZJeQfTdfsiw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:38 2026 by rpki-client