This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer File: U0OOy3Xh1es-gP26waaw-vg_c-E.cer (raw, json) Hash identifier: zgmkXO6ciuZnxmhYsEhdqb597FmEfIjj4FQDhqW5oL4= Subject key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1F2F9DAA893C2358254F62799A0527A9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 02 Feb 2026 16:29:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.231.144.0/24 IP: 2a14:b600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:2f:9d:aa:89:3c:23:58:25:4f:62:79:9a:05:27:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 2 16:29:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:ee:fc:52:38:12:a4:19:1c:fe:2c:fe:ac: 87:95:9a:87:75:42:64:69:ac:91:b9:45:1c:38:43: f3:2b:5b:18:c4:51:cc:1d:9b:f3:64:94:c1:c9:ce: 22:1b:69:85:a4:3e:b1:5f:bf:be:0a:d6:9c:05:fd: 08:ea:7c:6d:07:a1:af:3e:cd:c6:72:0f:72:e3:02: 0c:7c:a9:f1:ec:24:0f:ac:af:44:26:ff:59:31:39: ce:46:70:80:6a:99:9f:a8:26:03:16:a6:7a:70:b4: cc:6b:84:12:c9:54:9d:95:b7:e7:bd:68:03:1a:9d: 04:33:8e:d7:8d:f2:57:0a:e4:2b:e5:d7:11:ac:0a: 45:34:e8:22:ef:33:a5:5b:5d:7a:75:ff:d8:c3:a2: 90:d9:dc:d9:aa:68:28:bb:60:51:2f:af:50:24:76: fc:1a:48:07:5b:39:2c:92:5d:59:b4:17:ec:42:cd: f1:d8:7d:34:e6:03:59:fc:a8:70:11:21:8a:79:fb: 16:41:f0:d5:22:b4:6f:8a:04:31:36:79:a4:0a:84: ff:2c:aa:03:de:7a:5a:1b:d7:fa:20:ad:4a:28:2b: e0:7e:c2:a3:9c:12:5e:07:cc:76:93:b2:41:57:96: 4e:43:19:1a:42:06:fc:09:b8:93:70:b4:9f:43:2f: b0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.144.0/24 IPv6: 2a14:b600::/29 Signature Algorithm: sha256WithRSAEncryption 2f:43:c7:54:52:09:e0:09:d6:7b:17:71:9e:f8:ab:b9:53:5f: 7b:84:aa:68:66:d7:8a:4d:d9:10:91:23:54:e6:76:54:72:44: aa:72:88:c6:2b:ac:3a:e7:4d:c0:dc:b2:32:f3:51:15:2b:7b: b3:f3:e4:43:44:19:47:f0:83:19:24:7b:91:55:4f:1e:90:98: 7c:92:99:ec:35:fc:ef:bb:38:79:27:67:2d:34:af:b9:0c:9f: b2:1f:98:a3:ad:20:fd:54:6c:98:6b:4c:7f:71:05:1a:cb:58: 7b:f0:b5:f2:8a:7f:db:2f:bf:2f:09:cd:83:f9:59:69:5d:bc: 24:5c:68:4d:4e:67:ab:75:a1:bb:fa:d4:13:e4:2d:4a:17:3f: b9:da:1f:31:a1:39:7d:14:db:cc:89:05:7a:f9:bc:71:cf:b2: 66:df:dd:0e:f5:3a:b8:e0:e4:c3:32:fc:8e:8c:7b:40:8b:45: 0a:26:b5:2b:5f:9e:bc:aa:ae:ae:0d:af:83:98:74:e1:3b:42: 92:49:f5:88:e3:28:26:f5:90:72:09:ec:d5:66:3f:b7:32:00: c0:91:75:6c:b9:87:e0:6d:bd:3e:c7:6f:8c:43:ed:81:bd:ee: 98:3c:b9:8e:10:23:36:55:c0:1a:93:bc:3c:bf:a5:ce:2d:ea: c9:2c:9e:8f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZwfL52qiTwjWCVPYnmaBSepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAyMTYyOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzQzOGVjYjc1ZTFkNWViM2U4MGZkYmFjMWE2YjBmYWY4M2Y3M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkTu/FI4EqQZHP4s/qyHlZqHdUJk aayRuUUcOEPzK1sYxFHMHZvzZJTByc4iG2mFpD6xX7++CtacBf0I6nxtB6GvPs3G cg9y4wIMfKnx7CQPrK9EJv9ZMTnORnCAapmfqCYDFqZ6cLTMa4QSyVSdlbfnvWgD Gp0EM47XjfJXCuQr5dcRrApFNOgi7zOlW116df/Yw6KQ2dzZqmgou2BRL69QJHb8 GkgHWzkskl1ZtBfsQs3x2H005gNZ/KhwESGKefsWQfDVIrRvigQxNnmkCoT/LKoD 3npaG9f6IK1KKCvgfsKjnBJeB8x2k7JBV5ZOQxkaQgb8CbiTcLSfQy+wsQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFFNDjst14dXrPoD9usGmsPr4P3PhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2E3NWRh My1kODFlLTRiYmYtOGNjNi00OTg2OGQ3Y2U5YTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYTc1ZGEz LWQ4MWUtNGJiZi04Y2M2LTQ5ODY4ZDdjZTlhMS8xL1UwT095M1hoMWVzLWdQMjZ3 YWF3LXZnX2MtRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW+eQMA0EAgACMAcDBQMqFLYAMA0GCSqGSIb3 DQEBCwUAA4IBAQAvQ8dUUgngCdZ7F3Ge+Ku5U197hKpoZteKTdkQkSNU5nZUckSq cojGK6w6503A3LIy81EVK3uz8+RDRBlH8IMZJHuRVU8ekJh8kpnsNfzvuzh5J2ct NK+5DJ+yH5ijrSD9VGyYa0x/cQUay1h78LXyin/bL78vCc2D+VlpXbwkXGhNTmer daG7+tQT5C1KFz+52h8xoTl9FNvMiQV6+bxxz7Jm390O9Tq44OTDMvyOjHtAi0UK JrUrX568qq6uDa+DmHThO0KSSfWI4ygm9ZByCezVZj+3MgDAkXVsuYfgbb0+x2+M Q+2Bve6YPLmOECM2VcAak7w8v6XOLerJLJ6P -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:34 2026 by rpki-client