This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer (raw, json) Hash identifier: YSWsfWKaorj/GNh5vOyVqyo267l2H6beFm9lFL/+bjo= Subject key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E1F0C71986F2F34E7D0215EB623E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31490 AS: 52055 AS: 57463 IP: 185.0.28.0/24 IP: 185.1.226.0/23 IP: 194.40.250.0/23 IP: 194.41.10.0/23 IP: 2001:67c:29f0::/48 IP: 2001:7f8:148::/48 IP: 2a14:44c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e1:f0:c7:19:86:f2:f3:4e:7d:02:15:eb:62:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:46:94:1a:1d:6f:c5:f2:29:e0:aa:4d:50: 40:a9:18:23:08:c4:95:2f:06:c2:94:a9:7f:d7:b5: 81:fa:5c:37:32:c1:15:07:91:ee:cf:88:ef:ef:ee: 45:29:ef:76:e6:0d:5b:46:ee:e3:bf:6a:9c:ce:fc: f1:c7:48:68:2a:f8:46:fe:ad:df:6a:4c:00:7e:49: ac:08:4a:78:4a:ed:0c:57:85:67:3c:71:75:13:ab: 3d:79:8e:91:e4:09:bc:e2:29:8b:d7:d8:fe:a5:85: 4f:6c:47:7e:74:9c:1f:47:b1:4f:a6:a8:92:61:0a: 37:54:bb:05:60:ab:f7:07:5a:fd:96:48:e0:d7:74: 8b:c9:77:bc:ce:eb:c9:9e:fd:cc:eb:44:e2:3a:b9: b7:aa:65:ef:b8:98:0d:88:3a:a0:3d:dd:68:0c:1c: e8:77:51:c9:e2:37:eb:80:e8:53:aa:38:3c:e5:3b: 3f:27:77:4e:d5:4d:31:70:f5:b1:ed:2e:52:56:7b: 14:ff:5c:0f:a9:85:cb:70:e8:e0:ae:3d:a8:db:10: 83:69:73:14:cf:a5:67:98:20:f5:27:7b:b5:6b:8a: 1e:f9:d3:6a:e0:75:a8:01:e2:d7:d3:98:47:5c:d7: b4:bc:22:3f:ec:f2:2c:58:aa:5b:b3:2d:d8:da:90: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.0.28.0/24 185.1.226.0/23 194.40.250.0/23 194.41.10.0/23 IPv6: 2001:67c:29f0::/48 2001:7f8:148::/48 2a14:44c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31490 52055 57463 Signature Algorithm: sha256WithRSAEncryption 2f:95:9e:58:ee:70:b8:4d:9b:8b:75:d5:6b:f9:10:d5:7d:f0: d2:e3:24:cb:c9:7f:08:23:79:da:af:a9:a0:f7:23:0f:3b:bb: 85:9b:01:20:6c:c2:8f:22:21:82:0c:55:46:fb:32:0a:78:b1: cd:41:8b:21:7a:a3:9f:dd:e2:2f:b0:37:26:37:03:dc:07:de: 88:57:66:33:e9:60:14:33:43:57:b1:5e:b9:89:08:fa:0a:49: 93:93:b4:c5:c3:57:00:66:68:ba:51:48:c2:28:24:3c:19:e8: 78:fc:89:b9:74:fe:40:aa:4f:ed:8d:03:0b:41:16:26:a1:3a: e4:a9:17:3b:44:ad:a2:15:36:da:ad:a1:ca:55:4b:67:95:54: 50:65:9f:1c:f9:f3:55:56:aa:2b:32:e0:c7:ad:21:2e:9d:7a: 83:bb:c0:d3:e9:db:89:37:8f:9c:ad:f6:c5:07:41:e0:a0:6a: 3b:b0:b5:69:a1:e1:bf:8a:ea:15:26:8e:b7:f8:23:5e:0f:58: ef:66:87:b1:f6:ad:67:f5:0e:ad:cb:36:1c:2f:66:59:bd:6e: a3:f0:b7:d4:1f:37:ef:5c:af:8f:4c:73:6d:ab:a8:a2:e8:44: 8f:d9:fe:e6:fb:c5:d1:81:b6:97:01:1b:3a:a8:d5:82:ab:7d: 0e:ae:11:75 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZt3xuHwxxmG8vNOfQIV62I+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzdmOWJmODRiNjlhMDkwNDI0MzJkYWU4Mzc3ZWUwYWM4ZmYxYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlZGlBodb8XyKeCqTVBAqRgjCMSV LwbClKl/17WB+lw3MsEVB5Huz4jv7+5FKe925g1bRu7jv2qczvzxx0hoKvhG/q3f akwAfkmsCEp4Su0MV4VnPHF1E6s9eY6R5Am84imL19j+pYVPbEd+dJwfR7FPpqiS YQo3VLsFYKv3B1r9lkjg13SLyXe8zuvJnv3M60TiOrm3qmXvuJgNiDqgPd1oDBzo d1HJ4jfrgOhTqjg85Ts/J3dO1U0xcPWx7S5SVnsU/1wPqYXLcOjgrj2o2xCDaXMU z6VnmCD1J3u1a4oe+dNq4HWoAeLX05hHXNe0vCI/7PIsWKpbsy3Y2pDWbQIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFFN/m/hLaaCQQkMtroN37grI/xxhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ0L2NiYzc0 Ni00MTZiLTRkYTktOTIyNS04OTJlYzZmZjQ3NzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvY2JjNzQ2 LTQxNmItNGRhOS05MjI1LTg5MmVjNmZmNDc3MS8xL1UzLWItRXRwb0pCQ1F5MnVn M2Z1Q3NqX0hHRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAeBAIAATAYAwQAuQAcAwQBuQHiAwQBwij6AwQBwikKMB8EAgAC MBkDBwAgAQZ8KfADBwAgAQf4AUgDBQMqFETAMCMGCCsGAQUFBwEIAQH/BBQwEqAQ MA4CAnsCAgMAy1cCAwDgdzANBgkqhkiG9w0BAQsFAAOCAQEAL5WeWO5wuE2bi3XV a/kQ1X3w0uMky8l/CCN52q+poPcjDzu7hZsBIGzCjyIhggxVRvsyCnixzUGLIXqj n93iL7A3JjcD3AfeiFdmM+lgFDNDV7FeuYkI+gpJk5O0xcNXAGZoulFIwigkPBno ePyJuXT+QKpP7Y0DC0EWJqE65KkXO0StohU22q2hylVLZ5VUUGWfHPnzVVaqKzLg x60hLp16g7vA0+nbiTePnK32xQdB4KBqO7C1aaHhv4rqFSaOt/gjXg9Y72aHsfat Z/UOrcs2HC9mWb1uo/C31B8371yvj0xzbauoouhEj9n+5vvF0YG2lwEbOqjVgqt9 Dq4RdQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:28 2026 by rpki-client