This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer File: 11ugWU0GWrciRlz6MF7_jUFhf6g.cer (raw, json) Hash identifier: njNJFWXEk2QsnS2S2w+gtBS6yKlvX7d9L/Pw4KbciTA= Subject key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83D651746B16B512ED9C331C78E781 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48343 IP: 193.33.192.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d6:51:74:6b:16:b5:12:ed:9c:33:1c:78:e7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d75ba0594d065ab722465cfa305eff8d41617fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:ce:32:84:fe:48:59:38:bf:ba:41:2d:b0: 02:f4:3d:b0:b9:0a:4f:10:7b:fd:c0:41:94:59:b9: 6e:b7:72:f7:c4:6d:74:58:01:8a:63:bf:c8:6a:2a: 6b:75:b9:09:7e:10:47:a4:4b:3a:18:08:99:9a:67: f2:f6:39:da:32:ec:67:44:e1:62:52:88:f4:8e:57: ee:b7:6f:77:ed:f4:22:f7:a3:63:08:0e:5d:0c:d6: 3e:db:70:6c:07:0d:4d:87:69:42:94:3e:db:e4:9b: 5d:f1:13:a2:13:a9:b1:7f:c6:e0:b8:62:63:6d:58: 6a:6b:0c:df:11:4e:85:b0:85:9d:5d:be:5d:3d:03: b0:73:33:36:8b:14:29:f1:4f:5d:02:a8:17:06:a9: 1c:f1:aa:d2:35:be:93:4e:e5:23:44:15:87:78:fa: b0:55:60:19:95:3d:02:39:73:8e:25:36:04:c9:80: f3:30:50:17:5f:6e:75:71:92:7e:64:a0:46:1c:d7: 5a:77:19:e7:42:53:8c:83:69:d6:c9:f4:be:64:e2: 89:18:98:25:c0:93:c0:cc:b0:b5:73:18:62:1a:57: e3:a4:3d:c1:33:a5:0a:39:54:0f:00:78:0c:d6:48: 58:8b:fd:e9:41:2a:42:f5:77:1b:59:02:87:21:3a: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.192.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48343 Signature Algorithm: sha256WithRSAEncryption 63:a4:80:b6:3b:3c:ed:9d:51:a2:1d:ef:bb:66:77:ee:64:4b: b7:35:cb:4f:11:93:0f:0e:ee:f0:5f:93:00:17:eb:b7:4e:e9: 66:05:ea:71:22:a1:bb:e1:da:b6:4e:32:72:6c:0a:4e:c6:3a: a6:a5:63:ce:aa:89:00:e0:1d:db:20:27:bb:1e:a4:b6:74:69: 16:66:3c:b7:01:a4:6b:2a:76:50:65:c4:50:08:62:ab:fa:b3: 29:3a:c5:60:61:c6:bf:60:9f:21:4b:0b:76:6d:f5:5e:b3:9c: 79:1a:60:9f:77:59:b6:40:db:6a:fd:85:a6:0e:ad:59:c9:5f: 9a:a0:04:92:99:8f:15:0c:54:11:bd:89:f7:84:93:6d:9b:e0: 82:4a:4e:40:00:8d:83:78:02:24:b2:a6:b3:bc:f2:18:44:f8: b3:6e:f5:87:be:c3:07:b0:4e:92:8e:b9:59:84:77:09:c0:09: d3:7f:8e:11:69:f9:6b:94:da:cd:45:e6:c7:dd:cc:3a:78:81: 70:aa:86:f0:52:04:c1:2d:b9:c3:25:48:fe:c3:2b:75:da:fa: e0:a1:13:1e:ae:80:2c:d7:ed:6f:71:d7:72:e6:8a:77:f7:2f: 3f:d4:c9:e4:be:51:4e:6f:6e:d5:b9:cf:c4:05:38:44:b3:c1: 82:8b:0c:39 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/g9ZRdGsWtRLtnDMceOeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzViYTA1OTRkMDY1YWI3MjI0NjVjZmEzMDVlZmY4ZDQxNjE3ZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3fOMoT+SFk4v7pBLbAC9D2wuQpP EHv9wEGUWblut3L3xG10WAGKY7/IaiprdbkJfhBHpEs6GAiZmmfy9jnaMuxnROFi Uoj0jlfut2937fQi96NjCA5dDNY+23BsBw1Nh2lClD7b5Jtd8ROiE6mxf8bguGJj bVhqawzfEU6FsIWdXb5dPQOwczM2ixQp8U9dAqgXBqkc8arSNb6TTuUjRBWHePqw VWAZlT0COXOOJTYEyYDzMFAXX251cZJ+ZKBGHNdadxnnQlOMg2nWyfS+ZOKJGJgl wJPAzLC1cxhiGlfjpD3BM6UKOVQPAHgM1khYi/3pQSpC9XcbWQKHITpH8wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNdboFlNBlq3IkZc+jBe/41BYX+oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlL2E2Y2Ew Zi01NDg5LTQzYTEtYTFhNS0yZGVmMzhlNDViYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvYTZjYTBm LTU0ODktNDNhMS1hMWE1LTJkZWYzOGU0NWJhMC8xLzExdWdXVTBHV3JjaVJsejZN RjdfalVGaGY2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwSHAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC81zANBgkqhkiG9w0BAQsFAAOCAQEAY6SAtjs87Z1Roh3vu2Z37mRLtzXLTxGT Dw7u8F+TABfrt07pZgXqcSKhu+Hatk4ycmwKTsY6pqVjzqqJAOAd2yAnux6ktnRp FmY8twGkayp2UGXEUAhiq/qzKTrFYGHGv2CfIUsLdm31XrOceRpgn3dZtkDbav2F pg6tWclfmqAEkpmPFQxUEb2J94STbZvggkpOQACNg3gCJLKms7zyGET4s271h77D B7BOko65WYR3CcAJ03+OEWn5a5TazUXmx93MOniBcKqG8FIEwS25wyVI/sMrddr6 4KETHq6ALNftb3HXcuaKd/cvP9TJ5L5RTm9u1bnPxAU4RLPBgosMOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:54 2026 by rpki-client