This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer File: umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer (raw, json) Hash identifier: YJMuqYjLaCuNZhtqf1VLZompLl0YwVchTqpvZE49gAA= Subject key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B355C61ABEEAF8156DE7EA6112485A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.5.189.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:5c:61:ab:ee:af:81:56:de:7e:a6:11:24:85:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba68595997900ded300e9925709da627e93f363a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:47:79:b2:a6:6a:69:fa:14:69:87:86:3e: 1c:2c:d5:33:9b:77:8b:fc:be:9e:03:9c:11:84:ba: 0b:83:b2:e9:ca:47:c8:f6:32:aa:3f:e1:5b:e7:54: 68:7d:d1:2c:db:2a:55:bb:6d:6e:dd:16:f3:9a:9e: b6:ac:fa:e7:ea:18:04:5c:ca:7c:5a:31:34:40:fd: 30:87:82:81:5d:88:34:93:e1:26:f4:0c:e1:36:17: e3:ae:2c:6b:e4:ce:ab:5f:3f:5d:ff:2e:db:a1:c2: 2a:3c:3e:7f:ca:6f:4e:6b:e4:5a:36:2e:5a:5e:8a: aa:84:30:ab:eb:bf:13:55:8d:58:84:ca:73:6d:67: ac:e9:22:96:90:ca:c7:6e:3c:11:7c:23:ab:c1:ac: fe:18:5f:b4:17:d8:63:57:71:37:f1:50:01:e8:53: 6f:b5:40:43:05:4c:14:29:59:b9:29:bd:d3:87:c0: 57:83:4e:f1:87:12:94:d3:3f:a4:9c:f7:36:df:5b: cb:85:37:38:74:63:f7:e7:38:42:41:73:91:f3:bc: 6b:ce:c5:2b:1c:ea:a3:db:4c:1a:43:c2:1f:26:4c: c2:d6:54:f8:9c:4b:96:d9:31:0e:a6:87:d1:d7:bd: d9:41:4d:79:fe:a3:e6:ef:f7:d1:b5:3c:5f:ff:d1: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.5.189.0/24 Signature Algorithm: sha256WithRSAEncryption 14:bc:53:51:2e:f0:00:b7:0c:df:e0:fd:a4:65:29:ac:3b:c1: 15:fa:24:da:d3:b5:43:4b:cd:fc:87:14:9c:d0:f6:c0:1e:1d: 40:e1:30:ac:96:43:33:e1:c3:1d:dd:a2:67:d7:7f:bf:7b:f6: ea:ce:ef:ac:bf:5f:30:f8:26:60:a4:89:1d:39:15:67:59:d0: ff:de:40:0e:c8:e7:b0:21:a0:3c:d6:9d:27:11:ea:6b:f4:5e: cb:d8:2e:56:96:e3:ce:b3:6d:b5:6f:24:d2:e2:c4:bc:d2:55: 8e:7c:2e:97:01:2b:ed:db:15:de:97:93:6b:5d:28:07:39:9c: fb:e9:36:9a:88:70:93:0f:7e:14:b0:7d:1c:4b:87:23:09:d0: 21:ab:86:1e:ef:22:1b:df:93:13:69:0e:d6:3b:cd:62:ee:0d: 66:68:88:b2:f7:38:cc:50:41:c5:79:4e:4a:9b:ef:34:0f:f7: bb:2d:6b:8e:ec:d1:97:d4:c0:19:e9:51:98:bb:60:6e:d0:92: e9:5b:ff:6e:d4:32:72:ea:e5:62:23:0c:7c:29:19:52:80:8b: 4c:0e:da:94:78:a9:46:48:09:2a:fb:d1:4c:b9:ce:37:12:80: 68:cd:d4:4c:7e:9f:a0:ab:18:e5:95:ad:9c:44:17:27:2f:df: 6e:95:21:5a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NVxhq+6vgVbefqYRJIWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTY4NTk1OTk3OTAwZGVkMzAwZTk5MjU3MDlkYTYyN2U5M2YzNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug1HebKmamn6FGmHhj4cLNUzm3eL /L6eA5wRhLoLg7LpykfI9jKqP+Fb51RofdEs2ypVu21u3Rbzmp62rPrn6hgEXMp8 WjE0QP0wh4KBXYg0k+Em9AzhNhfjrixr5M6rXz9d/y7bocIqPD5/ym9Oa+RaNi5a XoqqhDCr678TVY1YhMpzbWes6SKWkMrHbjwRfCOrwaz+GF+0F9hjV3E38VAB6FNv tUBDBUwUKVm5Kb3Th8BXg07xhxKU0z+knPc231vLhTc4dGP35zhCQXOR87xrzsUr HOqj20waQ8IfJkzC1lT4nEuW2TEOpofR173ZQU15/qPm7/fRtTxf/9FACwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFLpoWVmXkA3tMA6ZJXCdpifpPzY6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzQ3MmE0 ZC1mY2FlLTQ0NTQtOTk2Ny0wMmRlZDliMmUwYzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvNDcyYTRk LWZjYWUtNDQ1NC05OTY3LTAyZGVkOWIyZTBjOS8xL3VtaFpXWmVRRGUwd0Rwa2xj SjJtSi1rX05qby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwgW9MA0GCSqGSIb3DQEBCwUAA4IBAQAUvFNR LvAAtwzf4P2kZSmsO8EV+iTa07VDS838hxSc0PbAHh1A4TCslkMz4cMd3aJn13+/ e/bqzu+sv18w+CZgpIkdORVnWdD/3kAOyOewIaA81p0nEepr9F7L2C5WluPOs221 byTS4sS80lWOfC6XASvt2xXel5NrXSgHOZz76TaaiHCTD34UsH0cS4cjCdAhq4Ye 7yIb35MTaQ7WO81i7g1maIiy9zjMUEHFeU5Km+80D/e7LWuO7NGX1MAZ6VGYu2Bu 0JLpW/9u1DJy6uViIwx8KRlSgItMDtqUeKlGSAkq+9FMuc43EoBozdRMfp+gqxjl la2cRBcnL99ulSFa -----END CERTIFICATE-----Generated at Mon Jan 26 01:46:41 2026 by rpki-client