This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer File: U2xMlP7U-ouQP29vtTQEhMDkpNM.cer (raw, json) Hash identifier: oyXlfprgTsLuj3NGkF69WlujoX7Z4ZcVKpWCEarv10Y= Subject key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB06AA15F46CD8B1408A9B6C057F7D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8859 AS: 64427 IP: 185.181.188.0/22 IP: 193.17.21.0/24 IP: 194.45.27.0/24 IP: 212.114.64.0/19 IP: 213.241.128.0/18 IP: 2001:a20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:06:aa:15:f4:6c:d8:b1:40:8a:9b:6c:05:7f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:62:02:6a:eb:2b:a3:e6:46:f3:c9:dc:c8: 04:39:9a:ef:6e:61:24:e7:8d:ad:ae:8b:a6:54:bd: 9b:94:ff:74:f2:ce:f6:e9:fa:fa:40:a0:ff:56:eb: 6e:af:8a:f8:10:fe:7b:b8:bd:90:d7:56:2e:5f:8b: 54:14:b4:9c:51:f9:72:a2:eb:a5:0f:17:ef:4c:da: 59:7e:74:e6:84:df:de:ab:58:b2:b1:85:85:9f:a7: d7:77:62:68:df:06:04:b4:ca:48:2d:65:fa:ba:91: 1d:59:d3:ed:eb:62:0d:e9:17:55:2e:3f:d8:8b:35: d3:9b:bb:a3:97:60:d8:29:06:46:a0:27:a7:c1:65: 8f:07:9a:6a:8e:a8:be:d4:6c:e9:6f:f5:64:91:18: fb:54:d7:ed:8a:8b:f1:2a:ba:81:ba:c0:ef:1b:e1: ae:89:8a:3f:f8:ee:3f:71:91:c1:4c:0f:21:3c:ea: 69:68:f5:92:32:32:d3:79:96:91:85:cc:92:d9:c2: d9:53:ca:70:86:a0:b9:53:35:94:54:ee:f0:53:24: 47:41:a8:95:f1:c7:6a:ec:4e:28:aa:1d:f8:31:41: b8:ac:7e:38:bf:00:0c:ba:de:14:9a:8f:59:fb:61: b0:2b:e8:75:50:d8:c9:60:a9:4f:eb:41:01:b6:4a: 08:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.188.0/22 193.17.21.0/24 194.45.27.0/24 212.114.64.0/19 213.241.128.0/18 IPv6: 2001:a20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8859 64427 Signature Algorithm: sha256WithRSAEncryption 50:2f:1c:76:f6:83:a4:5d:a9:94:29:7e:db:e8:33:67:00:3a: 72:91:06:03:b2:85:ea:66:32:01:87:4d:8f:3a:fd:80:dd:e7: 19:c9:d7:8a:28:86:66:92:64:2a:10:9f:84:7e:99:75:f8:c2: 3e:8d:74:b9:80:3b:8b:07:da:e3:a9:4e:e1:10:a0:9e:0f:fb: 4d:60:81:2b:35:dc:9f:1d:0e:ce:5e:8f:fe:45:2d:a1:06:52: 94:d5:a0:05:13:b4:21:75:7f:68:d3:40:09:93:02:78:ad:56: 21:14:c5:bb:ad:46:03:31:a0:48:1f:91:58:c4:f5:02:37:f8: 2d:7d:69:43:5d:4f:9c:12:31:d2:37:ab:a1:d1:37:9c:c8:02: 5e:80:84:28:d0:a2:13:73:62:59:cf:44:f7:26:a8:96:65:b1: e0:b9:b0:ba:4e:4b:ba:92:b9:da:15:72:b3:81:98:73:ff:27: 30:0c:6c:67:6d:7e:8d:1b:2f:40:f6:86:56:c8:50:cb:35:58: c3:4b:88:d6:16:7f:e5:bc:63:59:1f:ef:f4:c9:53:92:10:76: 22:d4:36:05:fc:61:ba:da:61:e4:36:19:5e:4a:d0:2e:7b:00: 9b:46:d2:4d:24:99:39:a7:83:df:fc:f7:29:bd:42:b9:91:00: e2:40:e8:43 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZt26waqFfRs2LFAiptsBX99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzZjNGM5NGZlZDRmYThiOTAzZjZmNmZiNTM0MDQ4NGMwZTRhNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5FiAmrrK6PmRvPJ3MgEOZrvbmEk 542troumVL2blP908s726fr6QKD/Vutur4r4EP57uL2Q11YuX4tUFLScUflyouul DxfvTNpZfnTmhN/eq1iysYWFn6fXd2Jo3wYEtMpILWX6upEdWdPt62IN6RdVLj/Y izXTm7ujl2DYKQZGoCenwWWPB5pqjqi+1Gzpb/VkkRj7VNftiovxKrqBusDvG+Gu iYo/+O4/cZHBTA8hPOppaPWSMjLTeZaRhcyS2cLZU8pwhqC5UzWUVO7wUyRHQaiV 8cdq7E4oqh34MUG4rH44vwAMut4Umo9Z+2GwK+h1UNjJYKlP60EBtkoIUwIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFFNsTJT+1PqLkD9vb7U0BITA5KTTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzU2ZDUw Mi1jNWQ4LTRiMTQtOTgzNi1hNjdmOTVmMmRlNWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNTZkNTAy LWM1ZDgtNGIxNC05ODM2LWE2N2Y5NWYyZGU1ZS8xL1UyeE1sUDdVLW91UVAyOXZ0 VFFFaE1Ea3BOTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQCubW8AwQAwREVAwQAwi0bAwQF1HJAAwQG1fGA MA0EAgACMAcDBQAgAQogMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAiKbAgMA+6sw DQYJKoZIhvcNAQELBQADggEBAFAvHHb2g6RdqZQpftvoM2cAOnKRBgOyhepmMgGH TY86/YDd5xnJ14oohmaSZCoQn4R+mXX4wj6NdLmAO4sH2uOpTuEQoJ4P+01ggSs1 3J8dDs5ej/5FLaEGUpTVoAUTtCF1f2jTQAmTAnitViEUxbutRgMxoEgfkVjE9QI3 +C19aUNdT5wSMdI3q6HRN5zIAl6AhCjQohNzYlnPRPcmqJZlseC5sLpOS7qSudoV crOBmHP/JzAMbGdtfo0bL0D2hlbIUMs1WMNLiNYWf+W8Y1kf7/TJU5IQdiLUNgX8 YbraYeQ2GV5K0C57AJtG0k0kmTmng9/89ym9QrmRAOJA6EM= -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:26 2026 by rpki-client