This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer File: U2WD3oNvzCjnC_ZurbjTjz9k9OE.cer (raw, json) Hash identifier: IU4dgYjmkg2ZknXnKOtDrAMdrd9wqdNDysgr01Vw1q8= Subject key identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C671B4F71DE0C9466E4CDD9D6C802D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34171 IP: 84.23.224.0/19 IP: 213.73.64.0/18 IP: 2001:1560::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:71:b4:f7:1d:e0:c9:46:6e:4c:dd:9d:6c:80:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=536583de836fcc28e70bf66eadb8d38f3f64f4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:39:c9:4b:58:cc:30:2b:3d:2c:0d:44:9b: 15:e8:ff:42:ca:23:2a:33:d8:7b:f5:38:36:5a:91: 12:19:d1:3b:ff:5a:fc:2a:e1:d9:34:fe:91:2d:62: 7f:a9:25:db:2d:11:8d:11:51:45:0f:77:9e:fd:76: be:9b:2e:53:80:6c:cb:76:2d:47:49:90:fd:ac:d7: 7c:b3:39:9b:08:30:15:b5:8b:56:6e:0d:87:44:ac: e5:d9:ff:2b:bb:68:46:4b:b5:34:e4:1d:aa:42:fe: a6:b5:6e:c9:04:09:04:6f:76:0d:f3:b9:e5:11:24: 3a:55:9a:d7:7c:19:1d:e7:ac:66:af:ea:81:ea:c3: 5e:17:e8:bf:4a:81:76:d8:3f:5b:f5:37:ee:f4:9e: 57:d2:d6:f2:d6:e1:d6:d5:ae:43:5f:ca:cb:ae:fb: 5d:cb:3e:a7:f6:91:5b:1a:8c:88:70:9a:05:7e:e8: b7:c3:bf:41:a8:44:be:48:96:4a:50:56:52:29:ef: 01:cd:74:3a:b1:f7:e8:4c:12:ec:d9:fc:f1:0e:db: 51:1e:b4:5d:26:2d:ac:3e:08:2b:86:bd:88:c5:ba: 9b:31:9a:a7:79:7b:34:d0:bf:5b:5b:c0:ab:af:7b: fc:3c:e7:fc:e0:f8:9e:e7:f5:ed:a5:7b:3d:95:34: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:65:83:DE:83:6F:CC:28:E7:0B:F6:6E:AD:B8:D3:8F:3F:64:F4:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6f263a-4193-4309-9c7a-82a6990df38d/1/U2WD3oNvzCjnC_ZurbjTjz9k9OE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.23.224.0/19 213.73.64.0/18 IPv6: 2001:1560::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34171 Signature Algorithm: sha256WithRSAEncryption 7c:02:d0:a5:e1:0f:40:ea:71:05:fe:4e:f2:cf:f5:65:cf:a2: 08:9e:08:ce:11:ab:ef:82:e7:d8:62:4c:68:a1:93:72:f6:ba: 74:6d:a9:34:0b:dd:b3:00:5f:9a:26:ab:9b:d1:ed:96:37:92: 82:be:62:bb:3a:c2:62:18:b9:82:d9:af:2f:ce:ac:b7:a0:3c: 0a:c9:27:e0:1c:fc:56:8d:cb:b3:45:dc:0c:0c:12:f5:e1:1e: 35:ea:a3:75:42:8a:6e:0a:24:45:3b:85:8f:97:65:98:0b:90: 7a:3b:58:f1:5d:7e:c9:5c:0d:cb:36:81:f7:ed:f0:5f:a2:cb: bd:46:53:5a:7a:41:43:6e:7b:a2:c3:da:e0:07:26:59:7f:7d: 82:59:b1:dd:af:59:de:95:1c:1e:24:cf:20:57:37:e1:0d:26: 15:16:82:2c:37:23:43:a9:54:05:60:04:59:22:0e:e4:50:55: a1:49:bb:6d:7f:be:cd:cc:2f:7a:32:e6:79:65:6c:77:12:04: c0:87:78:9c:a5:99:87:0c:e6:40:7c:4b:23:6b:b0:cb:34:17: ed:57:bc:11:9a:91:aa:b4:ac:2f:35:79:92:7f:11:28:56:99: b2:63:46:82:d6:0a:69:7b:a5:57:55:cf:e0:bb:63:4c:26:b3: 2a:c9:ec:26 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3xnG09x3gyUZuTN2dbIAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzY1ODNkZTgzNmZjYzI4ZTcwYmY2NmVhZGI4ZDM4ZjNmNjRmNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1E5yUtYzDArPSwNRJsV6P9CyiMq M9h79Tg2WpESGdE7/1r8KuHZNP6RLWJ/qSXbLRGNEVFFD3ee/Xa+my5TgGzLdi1H SZD9rNd8szmbCDAVtYtWbg2HRKzl2f8ru2hGS7U05B2qQv6mtW7JBAkEb3YN87nl ESQ6VZrXfBkd56xmr+qB6sNeF+i/SoF22D9b9Tfu9J5X0tby1uHW1a5DX8rLrvtd yz6n9pFbGoyIcJoFfui3w79BqES+SJZKUFZSKe8BzXQ6sffoTBLs2fzxDttRHrRd Ji2sPggrhr2IxbqbMZqneXs00L9bW8Crr3v8POf84Pie5/XtpXs9lTT7HQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFFNlg96Db8wo5wv2bq24048/ZPThMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzZmMjYz YS00MTkzLTQzMDktOWM3YS04MmE2OTkwZGYzOGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvNmYyNjNh LTQxOTMtNDMwOS05YzdhLTgyYTY5OTBkZjM4ZC8xL1UyV0Qzb052ekNqbkNfWnVy YmpUano5azlPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQFVBfgAwQG1UlAMA0EAgACMAcDBQMgARVgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCFezANBgkqhkiG9w0BAQsFAAOCAQEAfALQ peEPQOpxBf5O8s/1Zc+iCJ4IzhGr74Ln2GJMaKGTcva6dG2pNAvdswBfmiarm9Ht ljeSgr5iuzrCYhi5gtmvL86st6A8Cskn4Bz8Vo3Ls0XcDAwS9eEeNeqjdUKKbgok RTuFj5dlmAuQejtY8V1+yVwNyzaB9+3wX6LLvUZTWnpBQ257osPa4AcmWX99glmx 3a9Z3pUcHiTPIFc34Q0mFRaCLDcjQ6lUBWAEWSIO5FBVoUm7bX++zcwvejLmeWVs dxIEwId4nKWZhwzmQHxLI2uwyzQX7Ve8EZqRqrSsLzV5kn8RKFaZsmNGgtYKaXul V1XP4LtjTCazKsnsJg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:19 2026 by rpki-client