This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer File: uMaM2mX2aWLMuWg_FVDRTlYQego.cer (raw, json) Hash identifier: wR03lTCNbWdKIRhED7aNOG2HvJ22EVsZ5E8qEEzm92M= Subject key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA703CD9B03F8FFA630E9FE3B93C4E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216284 IP: 2001:67c:d1c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:03:cd:9b:03:f8:ff:a6:30:e9:fe:3b:93:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:09:b1:6e:76:e4:74:09:3a:85:8d:7b:36: 0d:24:b7:a7:71:ce:ab:bb:d9:ed:aa:dc:85:e7:ff: d5:2c:6a:b8:a8:42:45:dd:d1:df:b9:5e:d2:95:88: 86:7a:18:bb:5e:c1:5c:1e:72:d8:88:f9:92:d2:35: a8:eb:8c:f8:e8:87:c8:bd:d3:b8:8c:81:38:02:41: 58:f9:5f:ad:58:22:25:a6:80:30:6c:b7:c9:aa:7a: ae:3e:bd:60:ad:8e:7c:f1:4c:9c:da:59:81:75:52: 3b:68:29:89:23:2e:f0:a9:e4:ba:30:8b:73:40:ce: f6:72:98:b7:76:87:db:f5:a0:7c:69:2a:c4:28:cc: 12:a6:56:d7:a7:f4:cd:17:35:13:2f:96:b0:8b:1d: 69:81:d8:96:e4:4d:fd:f1:59:36:5a:2e:94:bb:37: 54:3f:3e:cf:f9:c4:b3:8d:fa:88:4a:9b:8f:88:98: 88:f7:2f:3a:78:e5:0c:78:2d:e4:8e:84:9e:52:b2: db:72:ba:8f:af:4a:81:29:6f:56:66:70:ad:89:f8: 78:71:ff:65:de:ae:96:bf:57:27:c0:1a:37:52:6d: 47:4d:c1:6f:e6:c2:27:cd:17:3c:a2:9d:3b:fc:7d: af:c7:7d:df:2b:ba:e3:25:a3:1a:72:46:d1:ba:d0: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d1c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216284 Signature Algorithm: sha256WithRSAEncryption af:ff:09:73:16:ad:94:23:f0:ef:fa:42:c3:6a:ea:f4:ca:ad: 6e:bb:53:c1:2a:29:9c:ba:ec:10:27:28:4d:1a:b2:d0:e7:67: 4e:c8:5c:be:9e:e3:71:81:83:09:ce:da:59:96:09:33:5c:be: e9:a6:a8:a4:79:31:1c:7c:a4:3d:be:88:2e:a7:41:92:3c:3d: 88:7e:67:2d:4d:d8:f3:03:92:e1:28:31:dc:49:94:d7:2f:b2: ce:ae:9d:19:da:bb:af:fc:ed:7a:76:cc:58:b0:e2:97:1c:d3: 50:ab:a3:3a:63:c6:c9:12:1b:c5:a5:f3:72:49:84:d5:1c:48: be:ff:7e:46:28:64:48:9e:7d:68:59:cb:81:f2:3e:06:13:9c: 86:a2:3b:0b:22:a5:50:0b:b0:9a:d8:21:ae:7d:16:fe:52:49: 58:51:5d:53:e9:0b:a4:67:08:c2:61:00:63:40:1d:e5:e0:d7: d9:60:1e:b9:9f:09:9c:5b:62:ba:ef:8f:6e:42:f1:83:55:73: dd:29:7e:e1:75:b5:8e:40:a4:e9:d5:c2:4d:1f:62:88:e6:8b: d1:e6:af:d4:0e:40:8f:ef:d3:15:43:72:37:f9:84:df:65:52: 87:af:73:60:2d:f2:ad:dc:23:1c:04:74:9a:43:81:8f:f8:33: 0d:7f:d0:8c -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt+pwPNmwP4/6Yw6f47k8TgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGM2OGNkYTY1ZjY2OTYyY2NiOTY4M2YxNTUwZDE0ZTU2MTA3YTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+8JsW525HQJOoWNezYNJLencc6r u9ntqtyF5//VLGq4qEJF3dHfuV7SlYiGehi7XsFcHnLYiPmS0jWo64z46IfIvdO4 jIE4AkFY+V+tWCIlpoAwbLfJqnquPr1grY588Uyc2lmBdVI7aCmJIy7wqeS6MItz QM72cpi3dofb9aB8aSrEKMwSplbXp/TNFzUTL5awix1pgdiW5E398Vk2Wi6UuzdU Pz7P+cSzjfqISpuPiJiI9y86eOUMeC3kjoSeUrLbcrqPr0qBKW9WZnCtifh4cf9l 3q6Wv1cnwBo3Um1HTcFv5sInzRc8op07/H2vx33fK7rjJaMackbRutCPnwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFLjGjNpl9mlizLloPxVQ0U5WEHoKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkLzEwNzc4 OC04NTAyLTQ1NDEtOTQ4MC04ZjQ4YTM3MDJmOTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvMTA3Nzg4 LTg1MDItNDU0MS05NDgwLThmNDhhMzcwMmY5MC8xL3VNYU0ybVgyYVdMTXVXZ19G VkRSVGxZUWVnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA0cMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNM3DANBgkqhkiG9w0BAQsFAAOCAQEAr/8JcxatlCPw7/pCw2rq9MqtbrtT wSopnLrsECcoTRqy0OdnTshcvp7jcYGDCc7aWZYJM1y+6aaopHkxHHykPb6ILqdB kjw9iH5nLU3Y8wOS4Sgx3EmU1y+yzq6dGdq7r/ztenbMWLDilxzTUKujOmPGyRIb xaXzckmE1RxIvv9+RihkSJ59aFnLgfI+BhOchqI7CyKlUAuwmtghrn0W/lJJWFFd U+kLpGcIwmEAY0Ad5eDX2WAeuZ8JnFtiuu+PbkLxg1Vz3Sl+4XW1jkCk6dXCTR9i iOaL0eav1A5Aj+/TFUNyN/mE32VSh69zYC3yrdwjHAR0mkOBj/gzDX/QjA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:43:29 2026 by rpki-client