This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer File: DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer (raw, json) Hash identifier: MCnX2o80X+RECJCtZkIJyiv08Tfqoz7GeqjZ9BX4ysM= Subject key identifier: 0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB293B23135B8989DA9148A050B21B5AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 12 Jan 2026 14:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203678 IP: 92.53.161.0/24 IP: 2a0f:9340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:93:b2:31:35:b8:98:9d:a9:14:8a:05:0b:21:b5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 12 14:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d4531777febf988e5305a2d299f9c548e8d501d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:0b:10:f8:2c:77:92:31:f4:5d:2b:bc:92: ad:98:f0:10:b5:eb:ce:13:29:ef:61:7d:62:c4:3d: ee:ae:26:41:bb:c7:b5:58:22:bc:76:16:51:f9:2d: d5:90:fe:7f:de:d0:51:dd:eb:9a:2f:6a:8b:f1:9f: c0:03:1f:62:9a:76:09:c9:91:cb:9b:df:fc:c6:43: 1a:12:a4:66:47:4f:4d:81:db:0e:64:3f:20:c4:84: b6:9c:6f:e6:58:6b:46:e0:90:31:cb:8d:f4:6c:03: 33:26:06:12:9c:91:12:62:5a:66:8f:24:f0:f0:27: 25:da:90:21:ac:74:a0:21:ba:4f:90:7c:29:93:55: ec:e8:f7:fc:05:72:62:7c:da:f0:32:b3:a4:81:ea: 1d:4b:13:02:50:a5:ce:ed:8b:e1:bd:88:7a:f1:88: b0:62:57:60:48:0c:bc:d5:75:1e:78:89:31:12:33: 61:0a:d8:a1:51:50:fb:e1:e2:ba:80:f1:2a:58:03: e3:96:85:f5:2e:f1:5e:67:9b:89:fd:e3:cf:36:e5: c5:f5:32:30:ae:93:63:35:50:19:07:72:47:ad:a5: 50:2d:ad:76:64:bc:35:e4:a4:c7:48:1b:2b:b5:49: 2c:31:94:70:cc:87:30:14:9a:50:b3:a5:46:32:5e: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.53.161.0/24 IPv6: 2a0f:9340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203678 Signature Algorithm: sha256WithRSAEncryption 92:51:62:41:e7:9b:f6:c3:3d:c4:2a:9b:57:f3:f5:86:b0:80: 9d:36:48:54:93:e4:99:46:0d:10:f7:66:9f:16:c2:4d:48:15: 59:45:c7:93:3e:77:f0:83:0e:20:3c:e2:dd:25:5e:72:6a:c5: 07:0e:6b:18:b4:a5:f9:3a:e4:1e:76:73:39:7f:af:37:8c:31: e2:2a:c7:15:63:fd:b8:f7:ee:6c:76:92:3d:e7:c8:79:38:36: 0c:3f:61:07:8f:00:78:b6:e2:bd:d0:a4:a4:e1:79:16:f1:12: e8:cf:ce:25:65:67:b6:30:fa:bb:8b:26:14:01:93:51:58:a1: 1f:62:9c:b0:b7:7b:97:ff:75:86:79:51:a7:50:3c:dd:bd:06: d3:f6:0f:50:5e:ab:9d:60:78:24:6a:27:17:61:fa:31:18:ad: 80:9a:2b:6b:77:db:69:96:4c:bd:74:c9:f1:8c:5e:39:ca:8c: a6:a3:16:ea:db:82:81:04:54:0e:9f:d9:1a:3c:b1:8e:27:e1: 09:81:83:c7:54:00:c9:47:83:f7:16:44:61:87:b4:5c:2b:aa: 89:81:fa:6b:3e:a4:97:47:33:81:ba:17:ed:3a:33:26:70:d0: f9:f6:6f:d8:2e:67:c8:8a:19:c6:5d:ef:db:5e:63:a3:20:b6: 4f:51:fb:54 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZuyk7IxNbiYnakUigULIbWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEyMTQxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDQ1MzE3NzdmZWJmOTg4ZTUzMDVhMmQyOTlmOWM1NDhlOGQ1MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB8LEPgsd5Ix9F0rvJKtmPAQtevO EynvYX1ixD3uriZBu8e1WCK8dhZR+S3VkP5/3tBR3euaL2qL8Z/AAx9imnYJyZHL m9/8xkMaEqRmR09NgdsOZD8gxIS2nG/mWGtG4JAxy430bAMzJgYSnJESYlpmjyTw 8Ccl2pAhrHSgIbpPkHwpk1Xs6Pf8BXJifNrwMrOkgeodSxMCUKXO7YvhvYh68Yiw YldgSAy81XUeeIkxEjNhCtihUVD74eK6gPEqWAPjloX1LvFeZ5uJ/ePPNuXF9TIw rpNjNVAZB3JHraVQLa12ZLw15KTHSBsrtUksMZRwzIcwFJpQs6VGMl6cRQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFA1FMXd/6/mI5TBaLSmfnFSOjVAdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiL2ExNDBk NS00MGVlLTQxMDgtOWIxMi1iM2VmMmEyZjYxYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvYTE0MGQ1 LTQwZWUtNDEwOC05YjEyLWIzZWYyYTJmNjFiNC8xL0RVVXhkM19yLVlqbE1Gb3RL Wi1jVkk2TlVCMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAXDWhMA0EAgACMAcDBQMqD5NAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbnjANBgkqhkiG9w0BAQsFAAOCAQEAklFiQeeb9sM9 xCqbV/P1hrCAnTZIVJPkmUYNEPdmnxbCTUgVWUXHkz538IMOIDzi3SVecmrFBw5r GLSl+TrkHnZzOX+vN4wx4irHFWP9uPfubHaSPefIeTg2DD9hB48AeLbivdCkpOF5 FvES6M/OJWVntjD6u4smFAGTUVihH2KcsLd7l/91hnlRp1A83b0G0/YPUF6rnWB4 JGonF2H6MRitgJora3fbaZZMvXTJ8YxeOcqMpqMW6tuCgQRUDp/ZGjyxjifhCYGD x1QAyUeD9xZEYYe0XCuqiYH6az6kl0czgboX7TozJnDQ+fZv2C5nyIoZxl3v215j oyC2T1H7VA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:29 2026 by rpki-client