This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U5UGCcqN1_bG-jzsrHeUIexsAQA.cer File: U5UGCcqN1_bG-jzsrHeUIexsAQA.cer (raw, json) Hash identifier: qfssEk5C1g6DJ3at/MdvqsvcyV0Q8FEvKkOLsTkdM2A= Subject key identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED3793A7DF8766FA9FE5DBBF302B57 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215034 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:37:93:a7:df:87:66:fa:9f:e5:db:bf:30:2b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53950609ca8dd7f6c6fa3cecac779421ec6c0100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:15:a7:91:34:df:d1:f5:03:4e:ff:c3:c2: aa:50:c9:e8:c3:05:3d:56:68:ed:84:42:1b:45:75: 70:22:d3:20:de:fa:32:41:3c:cf:14:e8:4f:3d:e8: df:a0:f0:c2:6b:fd:de:b5:6b:b7:c7:bf:fb:7e:19: a5:34:0d:cc:be:d5:56:ab:0b:01:3f:34:43:aa:2d: e7:df:dc:db:83:db:ec:0c:fd:50:fc:5a:4a:47:8b: cb:e6:c1:76:0e:78:fd:b3:2d:e2:9f:78:af:b4:d5: 18:18:b2:1b:86:34:14:ca:46:e2:57:b9:16:a5:62: 1f:95:b2:18:08:53:8f:fc:21:0b:b5:da:ff:ba:81: 85:ab:22:8a:56:6b:86:b7:6e:17:c2:e5:a4:b8:6c: 52:00:18:81:8b:18:4c:ae:08:03:a4:69:ae:eb:f8: 57:6d:4a:d6:54:89:f0:de:7d:88:f3:2f:d7:8c:89: 9d:33:89:1d:55:d7:5a:63:03:25:76:3f:79:15:df: c5:59:9f:26:d2:f4:c1:93:2e:5d:40:45:70:fc:19: c0:a1:a7:71:38:16:80:17:d4:a2:a9:a5:b8:51:b7: ee:35:76:fa:c5:02:58:4b:70:bb:21:2e:0b:08:49: a7:56:54:36:e2:ff:51:cc:66:df:cf:3a:7a:1d:76: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:95:06:09:CA:8D:D7:F6:C6:FA:3C:EC:AC:77:94:21:EC:6C:01:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/876a65-bf54-4652-8970-801cf4fec74e/1/U5UGCcqN1_bG-jzsrHeUIexsAQA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215034 Signature Algorithm: sha256WithRSAEncryption 16:ef:73:ae:cb:cc:23:bf:c0:ec:93:6f:ac:b0:35:8b:d0:63: 37:e2:9e:1b:d5:f8:3e:65:27:0e:a6:2f:d6:5b:3d:c9:bd:32: a4:99:b3:13:3c:5e:9e:c5:d7:03:cb:2d:3c:dd:40:c1:6e:73: ce:ea:42:18:68:44:7c:96:f9:65:c9:46:d2:3e:d7:ed:be:e4: a0:67:f0:1d:3d:f0:37:35:56:ea:7d:98:d6:2f:50:90:63:5e: 19:91:e2:75:46:c1:3c:5a:d2:dd:d0:75:e4:d3:c6:a9:f0:3b: 4c:f5:bc:0c:f4:88:9e:a1:a5:d4:6a:0b:a4:00:b3:ca:cb:da: 3a:76:5d:f6:c7:6b:62:93:06:de:24:a0:6e:1c:1e:bd:25:d9: 94:4c:9b:98:ff:d4:79:ec:45:79:1f:30:8f:28:00:ba:66:63: 10:75:90:b8:37:a2:5a:6d:44:0f:45:e9:7b:af:a5:7a:00:ee: 5e:5f:f3:a1:58:70:fa:79:be:13:79:8f:8b:3b:6f:ec:59:59: 9e:14:ff:f5:bc:56:9c:95:cf:80:c8:a4:ec:ca:2b:21:37:60: b7:19:5b:93:53:c5:c0:0c:66:cd:fb:1f:cc:77:8e:e5:a9:21: 71:3a:e5:ee:9d:ec:0e:87:10:e6:12:8e:67:48:24:3b:60:05: b9:e8:95:3b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57TeTp9+HZvqf5du/MCtXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mzk1MDYwOWNhOGRkN2Y2YzZmYTNjZWNhYzc3OTQyMWVjNmMwMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRAVp5E039H1A07/w8KqUMnowwU9 VmjthEIbRXVwItMg3voyQTzPFOhPPejfoPDCa/3etWu3x7/7fhmlNA3MvtVWqwsB PzRDqi3n39zbg9vsDP1Q/FpKR4vL5sF2Dnj9sy3in3ivtNUYGLIbhjQUykbiV7kW pWIflbIYCFOP/CELtdr/uoGFqyKKVmuGt24XwuWkuGxSABiBixhMrggDpGmu6/hX bUrWVInw3n2I8y/XjImdM4kdVddaYwMldj95Fd/FWZ8m0vTBky5dQEVw/BnAoadx OBaAF9SiqaW4UbfuNXb6xQJYS3C7IS4LCEmnVlQ24v9RzGbfzzp6HXbbLQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFOVBgnKjdf2xvo87Kx3lCHsbAEAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2Lzg3NmE2 NS1iZjU0LTQ2NTItODk3MC04MDFjZjRmZWM3NGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvODc2YTY1 LWJmNTQtNDY1Mi04OTcwLTgwMWNmNGZlYzc0ZS8xL1U1VUdDY3FOMV9iRy1qenNy SGVVSWV4c0FRQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNH+jANBgkqhkiG9w0BAQsFAAOCAQEAFu9zrsvMI7/A 7JNvrLA1i9BjN+KeG9X4PmUnDqYv1ls9yb0ypJmzEzxensXXA8stPN1AwW5zzupC GGhEfJb5ZclG0j7X7b7koGfwHT3wNzVW6n2Y1i9QkGNeGZHidUbBPFrS3dB15NPG qfA7TPW8DPSInqGl1GoLpACzysvaOnZd9sdrYpMG3iSgbhwevSXZlEybmP/UeexF eR8wjygAumZjEHWQuDeiWm1ED0Xpe6+legDuXl/zoVhw+nm+E3mPiztv7FlZnhT/ 9bxWnJXPgMik7MorITdgtxlbk1PFwAxmzfsfzHeO5akhcTrl7p3sDocQ5hKOZ0gk O2AFueiVOw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:06 2026 by rpki-client