This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer File: U2XQP9hSJnTrF6x2cpTNEfcpOdE.cer (raw, json) Hash identifier: 21evLE26CZBkccI/rK3HuBzHfI6qfI5C06v5BDOXGxk= Subject key identifier: 53:65:D0:3F:D8:52:26:74:EB:17:AC:76:72:94:CD:11:F7:29:39:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9BD29F1933E6A46EDD2793126438F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51709 IP: 91.209.5.0/24 IP: 2001:67c:8b0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:bd:29:f1:93:3e:6a:46:ed:d2:79:31:26:43:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5365d03fd8522674eb17ac767294cd11f72939d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:05:54:a7:b1:39:c6:0b:f3:10:40:88:f3: f8:4c:31:04:7c:45:22:94:d2:29:fe:fb:90:68:af: bd:c7:66:bc:c7:09:2c:79:ec:34:d0:76:78:6c:66: 9b:5a:f4:cf:58:5c:82:5a:71:f6:ae:3b:ec:2b:65: e4:9c:7c:c3:12:79:d4:e1:ef:e2:ef:22:e3:60:e9: 76:8c:a4:fd:d8:ef:cd:84:22:a8:a9:06:f0:e6:ab: 81:ee:f4:8a:0c:93:86:83:69:b9:1a:33:fd:6f:72: d6:93:37:9f:6c:2b:e7:04:92:40:ac:2b:30:43:49: da:03:34:29:85:aa:03:97:c8:1e:a7:96:70:9c:30: 32:52:15:05:42:1c:d1:a2:8d:e0:ae:0b:85:13:81: 30:1a:c9:9b:19:1f:98:e0:6d:77:67:a9:69:48:b0: 4a:ea:3f:43:01:c0:3b:bc:44:75:0f:96:ee:31:3b: 1e:6f:3d:a0:ed:2e:50:25:ad:de:57:49:80:71:9d: 74:93:de:32:40:c0:0c:e1:33:5b:b8:ad:1b:15:7b: 1a:09:a4:73:63:6d:0b:43:59:bc:05:fa:8c:37:4a: f1:5b:a7:15:be:ec:f6:33:c3:83:e5:84:3c:d3:d5: 29:55:44:cc:c0:f0:a8:d5:2b:49:e8:10:2a:a5:89: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:65:D0:3F:D8:52:26:74:EB:17:AC:76:72:94:CD:11:F7:29:39:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d0b571-3276-4177-8163-0069030763db/1/U2XQP9hSJnTrF6x2cpTNEfcpOdE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.5.0/24 IPv6: 2001:67c:8b0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51709 Signature Algorithm: sha256WithRSAEncryption 96:4a:ec:4f:fa:a8:a0:e5:f6:1b:76:43:42:a5:63:d5:e6:cd: a2:a9:9c:47:80:f3:3a:13:d1:79:2e:d2:e9:fd:b0:ab:29:98: 5a:00:44:69:89:53:fc:d5:b4:0d:77:b2:7b:c1:53:71:b1:b3: a1:0f:51:ea:c6:31:5b:28:61:32:a1:89:6d:94:dc:9f:52:94: 29:4d:52:75:84:7e:4d:48:8e:3d:5e:80:6d:9b:56:22:22:40: 69:b8:2e:4e:50:af:68:93:e9:b7:59:68:7c:10:5e:b4:2e:0e: a1:ff:70:ee:a6:0f:f8:65:57:07:38:54:33:6f:3b:00:fd:7f: a2:ed:4f:82:2f:65:c6:0d:ae:21:38:d1:43:23:2b:d9:98:75: e2:f3:76:6b:1b:d0:c3:b0:e3:b9:47:6c:55:a5:f6:df:b1:aa: 09:51:ec:6a:c6:09:bf:bc:4a:e1:aa:45:33:58:75:cf:47:08: 23:43:a3:3c:a3:d5:56:67:c4:23:32:77:b3:58:e3:f8:7f:be: fc:33:f2:f1:18:b4:c4:2e:90:6b:9c:7b:74:14:34:4e:31:60: 78:cd:8b:b7:4b:5e:73:dc:4d:1f:bb:25:86:71:f2:5b:08:47: d6:9a:fa:6b:80:c8:cf:cf:df:fe:27:61:33:95:29:dc:9e:39: 5f:b5:43:62 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9yb0p8ZM+akbt0nkxJkOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzY1ZDAzZmQ4NTIyNjc0ZWIxN2FjNzY3Mjk0Y2QxMWY3MjkzOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZQFVKexOcYL8xBAiPP4TDEEfEUi lNIp/vuQaK+9x2a8xwkseew00HZ4bGabWvTPWFyCWnH2rjvsK2XknHzDEnnU4e/i 7yLjYOl2jKT92O/NhCKoqQbw5quB7vSKDJOGg2m5GjP9b3LWkzefbCvnBJJArCsw Q0naAzQphaoDl8gep5ZwnDAyUhUFQhzRoo3grguFE4EwGsmbGR+Y4G13Z6lpSLBK 6j9DAcA7vER1D5buMTsebz2g7S5QJa3eV0mAcZ10k94yQMAM4TNbuK0bFXsaCaRz Y20LQ1m8BfqMN0rxW6cVvuz2M8OD5YQ809UpVUTMwPCo1StJ6BAqpYnSTwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFFNl0D/YUiZ06xesdnKUzRH3KTnRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzL2QwYjU3 MS0zMjc2LTQxNzctODE2My0wMDY5MDMwNzYzZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvZDBiNTcx LTMyNzYtNDE3Ny04MTYzLTAwNjkwMzA3NjNkYi8xL1UyWFFQOWhTSm5UckY2eDJj cFRORWZjcE9kRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAW9EFMA8EAgACMAkDBwAgAQZ8CLAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAMn9MA0GCSqGSIb3DQEBCwUAA4IBAQCWSuxP+qig 5fYbdkNCpWPV5s2iqZxHgPM6E9F5LtLp/bCrKZhaAERpiVP81bQNd7J7wVNxsbOh D1HqxjFbKGEyoYltlNyfUpQpTVJ1hH5NSI49XoBtm1YiIkBpuC5OUK9ok+m3WWh8 EF60Lg6h/3Dupg/4ZVcHOFQzbzsA/X+i7U+CL2XGDa4hONFDIyvZmHXi83ZrG9DD sOO5R2xVpfbfsaoJUexqxgm/vErhqkUzWHXPRwgjQ6M8o9VWZ8QjMnezWOP4f778 M/LxGLTELpBrnHt0FDROMWB4zYu3S15z3E0fuyWGcfJbCEfWmvprgMjPz9/+J2Ez lSncnjlftUNi -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:42 2026 by rpki-client