This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer File: Ubw8S_1XEisJpRFyJ0w2MUxU640.cer (raw, json) Hash identifier: IxVAX8HohBQ3odcAvFlRwGAtenLvxyq7B2fBlMsoQ9Y= Subject key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB244E3C1B6CCD67BCE44A402372F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft caRepository: rsync://rpki.sunoaki.net/repo/SUNOAKI/1/ Notify URL: https://rpki.sunoaki.net/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47778 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:24:4e:3c:1b:6c:cd:67:bc:e4:4a:40:23:72:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:8a:80:70:75:a4:dd:7e:72:73:db:fd:0b: cc:c4:9f:2a:21:99:0e:bb:f4:57:11:14:8e:f4:5c: 84:0c:d2:17:c8:1c:95:22:dc:91:c3:10:d2:09:c8: 23:71:6a:3c:68:4c:c7:48:dc:88:5e:60:ac:a3:19: f6:e9:c6:f5:f6:e2:82:80:5d:49:bc:36:a9:10:a4: b9:f2:80:de:5f:e9:9a:5f:4a:f3:fc:63:3e:65:c5: 4a:df:1b:e5:65:21:85:2d:a7:be:90:ac:92:83:1c: 17:1b:b0:9c:29:88:ea:75:b4:98:c2:75:7e:8b:14: cc:b9:d2:65:cc:30:3e:05:5a:e7:e7:bd:02:51:1e: 0e:f6:20:c1:ec:07:25:5d:46:09:97:bd:10:ee:01: 02:72:71:5b:3d:13:e6:3a:80:6e:a0:14:65:0a:94: 14:fa:4c:45:4b:e7:7d:0f:41:31:9c:26:11:c7:43: d1:8c:e9:21:9f:49:cd:b7:50:05:fd:76:29:e7:ad: 93:32:30:04:4e:1b:05:c5:dd:b7:08:1c:bb:1e:f4: 0d:b4:38:25:05:8a:c8:4e:f7:54:44:39:ff:0e:ac: c3:1d:b8:ce:3b:92:49:64:2e:58:88:ed:69:75:81: b4:ae:30:9c:13:3c:a4:cd:37:de:c0:20:db:00:00: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/ RPKI Manifest - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft RPKI Notify - URI:https://rpki.sunoaki.net/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 47778 Signature Algorithm: sha256WithRSAEncryption 54:29:31:05:8c:19:88:d8:23:85:3f:ce:97:4b:b7:fc:4d:15: 2d:d2:dd:f1:84:84:73:26:48:fb:b4:6b:58:24:17:db:33:ee: 40:c3:7a:67:c9:b5:d4:7e:3a:b0:ff:f2:47:ff:64:be:89:03: a7:c0:00:e6:5e:f1:cb:ad:26:3e:6d:87:01:6d:03:6a:2e:9f: b9:27:c8:e8:36:65:9f:89:2b:c0:07:d1:f1:82:dc:f1:44:f7: 7c:59:0f:78:5e:aa:6a:b9:96:1e:ef:0b:5b:8a:85:b5:fd:62: 18:2c:96:94:e5:c7:fe:c1:45:d7:63:01:8e:bc:5f:45:86:a0: b1:06:ad:c7:76:84:68:1a:e6:ea:fa:1d:f9:c6:8b:5f:9f:c9: 13:2d:b6:bc:0c:9f:4b:9f:66:1e:e7:0e:c9:d4:76:b8:bb:42: 59:40:59:b1:ae:04:89:52:d4:1c:1c:c0:e8:0a:90:88:ca:fd: 58:aa:5d:74:d5:e3:0e:49:a8:37:55:33:02:a1:53:c4:b2:1e: c4:8e:ce:11:87:df:5b:cf:bd:4c:b3:be:02:3c:99:35:4a:30: 0b:1a:c7:7b:e2:76:74:e5:d4:71:4b:e2:54:99:79:42:3e:fe: f9:c7:46:d1:ef:f6:4e:c6:74:bf:d0:61:4b:97:32:c5:6c:30: c5:dd:80:e8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt26yROPBtszWe85EpAI3LyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWJjM2M0YmZkNTcxMjJiMDlhNTExNzIyNzRjMzYzMTRjNTRlYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMuKgHB1pN1+cnPb/QvMxJ8qIZkO u/RXERSO9FyEDNIXyByVItyRwxDSCcgjcWo8aEzHSNyIXmCsoxn26cb19uKCgF1J vDapEKS58oDeX+maX0rz/GM+ZcVK3xvlZSGFLae+kKySgxwXG7CcKYjqdbSYwnV+ ixTMudJlzDA+BVrn570CUR4O9iDB7AclXUYJl70Q7gECcnFbPRPmOoBuoBRlCpQU +kxFS+d9D0ExnCYRx0PRjOkhn0nNt1AF/XYp562TMjAEThsFxd23CBy7HvQNtDgl BYrITvdURDn/DqzDHbjOO5JJZC5YiO1pdYG0rjCcEzykzTfewCDbAAD/dQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFFG8PEv9VxIrCaURcidMNjFMVOuNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgeQGCCsGAQUFBwELBIHXMIHUMDQGCCsGAQUFBzAFhihyc3lu YzovL3Jwa2kuc3Vub2FraS5uZXQvcmVwby9TVU5PQUtJLzEvMGAGCCsGAQUFBzAK hlRyc3luYzovL3Jwa2kuc3Vub2FraS5uZXQvcmVwby9TVU5PQUtJLzEvNTFCQzND NEJGRDU3MTIyQjA5QTUxMTcyMjc0QzM2MzE0QzU0RUI4RC5tZnQwOgYIKwYBBQUH MA2GLmh0dHBzOi8vcnBraS5zdW5vYWtpLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54 bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALqiMA0GCSqGSIb3DQEBCwUAA4IBAQBUKTEFjBmI2COFP86XS7f8TRUt0t3xhIRz Jkj7tGtYJBfbM+5Aw3pnybXUfjqw//JH/2S+iQOnwADmXvHLrSY+bYcBbQNqLp+5 J8joNmWfiSvAB9HxgtzxRPd8WQ94XqpquZYe7wtbioW1/WIYLJaU5cf+wUXXYwGO vF9FhqCxBq3HdoRoGubq+h35xotfn8kTLba8DJ9Ln2Ye5w7J1Ha4u0JZQFmxrgSJ UtQcHMDoCpCIyv1Yql101eMOSag3VTMCoVPEsh7Ejs4Rh99bz71Ms74CPJk1SjAL Gsd74nZ05dRxS+JUmXlCPv75x0bR7/ZOxnS/0GFLlzLFbDDF3YDo -----END CERTIFICATE-----Generated at Mon Jan 26 02:06:25 2026 by rpki-client