This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer File: U8vRR3BEoDQEx_xDlhwsg7unW7w.cer (raw, json) Hash identifier: O8Lz9M/sAzs+VHF3zwBHTSi3WNS46p99Bepj1CARXwc= Subject key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4F6C49D7C56CF7598C35B50E99D66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208552 IP: 91.211.24.0/23 IP: 193.254.222.0/23 IP: 195.88.162.0/23 IP: 2001:678:774::/48 IP: 2001:67c:1960::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:f6:c4:9d:7c:56:cf:75:98:c3:5b:50:e9:9d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:71:27:95:aa:98:64:c1:9b:fa:6c:98:36:f2: 91:18:f4:9a:7d:d9:ab:59:0b:d6:ad:91:a2:ef:6b: 71:a7:a5:64:d6:22:fc:48:fe:82:04:51:3b:e0:37: 00:60:82:f2:7c:84:e8:e5:d1:9f:18:57:45:ad:11: 52:7d:a3:8c:7e:04:e3:74:12:2b:25:f3:ae:6a:7d: 74:d6:74:c9:d6:ef:54:8c:98:28:43:77:1d:61:be: 1e:cb:1a:9b:41:47:da:a8:ae:6e:59:46:79:42:31: 1e:98:74:fd:a7:0d:be:f6:1a:7c:f8:7d:5f:a8:a7: e6:80:8f:55:4c:a7:ff:af:a5:fa:23:d1:df:bf:b0: d0:e6:30:aa:11:e9:a2:80:f6:55:bb:1f:46:cf:14: c4:7e:d1:44:d4:29:ce:cc:f0:b2:9d:e8:dc:d5:cf: f5:fe:45:6d:b4:09:40:c2:24:11:4e:f0:a0:02:31: 6e:ef:62:8b:6f:66:e2:00:10:4a:ea:13:40:d4:77: c2:0d:68:e0:8d:67:75:c3:18:be:55:fb:e0:da:20: 11:a7:a3:57:bd:11:2a:9a:06:60:3f:2e:44:15:04: 4b:4b:40:30:8e:14:c1:ad:ce:b0:3c:e8:62:f4:8d: 77:b2:ae:1c:dc:b8:b0:c0:b1:56:0c:7e:b8:6c:b2: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.24.0/23 193.254.222.0/23 195.88.162.0/23 IPv6: 2001:678:774::/48 2001:67c:1960::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208552 Signature Algorithm: sha256WithRSAEncryption 9d:0a:36:10:90:7f:d0:a2:85:c8:ce:40:bf:30:13:4c:a9:78: 34:2e:99:93:57:0a:e1:5d:9b:10:71:53:38:88:8f:cb:f8:ab: 82:7c:d9:fc:1a:7a:85:8c:1c:8e:cd:5b:b2:20:0c:db:ef:18: bb:eb:06:99:7b:78:75:89:4c:17:15:19:27:05:f9:bd:93:35: 35:f8:64:3a:8d:81:12:9e:93:c3:35:fe:a9:7a:4e:d1:ae:f2: 96:87:f6:fc:6b:a0:98:03:3f:09:d7:7b:51:a5:81:d3:e7:13: d8:65:86:9f:ce:9d:5f:43:b9:27:9f:56:07:63:b4:ca:43:8f: 93:d6:da:fa:30:c1:6e:5f:6c:af:ce:a7:08:af:09:d0:52:2c: a5:80:14:57:b6:95:f9:9f:4a:00:73:97:d2:01:86:3a:8f:8e: 81:50:5c:46:1b:e2:8c:d1:c3:cc:a3:8b:b5:6d:fa:f5:75:4d: 02:19:92:17:ba:1e:a7:16:56:12:a0:f8:d9:6d:08:ea:4e:13: 9a:fc:d0:1e:14:76:fe:19:da:03:cd:44:df:9a:90:3a:a6:fb: ff:bd:6d:b5:b9:97:5c:46:33:49:c5:40:0f:7e:e1:49:e1:14: 31:bc:8b:3a:68:6b:d8:5e:85:be:22:80:c3:88:b9:87:31:b4: 49:e1:d5:f8 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt+pPbEnXxWz3WYw1tQ6Z1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2NiZDE0NzcwNDRhMDM0MDRjN2ZjNDM5NjFjMmM4M2JiYTc1YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33EnlaqYZMGb+myYNvKRGPSafdmr WQvWrZGi72txp6Vk1iL8SP6CBFE74DcAYILyfITo5dGfGFdFrRFSfaOMfgTjdBIr JfOuan101nTJ1u9UjJgoQ3cdYb4eyxqbQUfaqK5uWUZ5QjEemHT9pw2+9hp8+H1f qKfmgI9VTKf/r6X6I9Hfv7DQ5jCqEemigPZVux9GzxTEftFE1CnOzPCynejc1c/1 /kVttAlAwiQRTvCgAjFu72KLb2biABBK6hNA1HfCDWjgjWd1wxi+Vfvg2iARp6NX vREqmgZgPy5EFQRLS0AwjhTBrc6wPOhi9I13sq4c3LiwwLFWDH64bLKP9wIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFFPL0UdwRKA0BMf8Q5YcLIO7p1u8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2RjZTQ0 YS00YTkwLTQzZWEtYjFmYi1hMmQxMTY1NjBhY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvZGNlNDRh LTRhOTAtNDNlYS1iMWZiLWEyZDExNjU2MGFjYS8xL1U4dlJSM0JFb0RRRXhfeERs aHdzZzd1blc3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUF BwEHAQH/BDYwNDAYBAIAATASAwQBW9MYAwQBwf7eAwQBw1iiMBgEAgACMBIDBwAg AQZ4B3QDBwAgAQZ8GWAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAy6oMA0GCSqG SIb3DQEBCwUAA4IBAQCdCjYQkH/QooXIzkC/MBNMqXg0LpmTVwrhXZsQcVM4iI/L +KuCfNn8GnqFjByOzVuyIAzb7xi76waZe3h1iUwXFRknBfm9kzU1+GQ6jYESnpPD Nf6pek7RrvKWh/b8a6CYAz8J13tRpYHT5xPYZYafzp1fQ7knn1YHY7TKQ4+T1tr6 MMFuX2yvzqcIrwnQUiylgBRXtpX5n0oAc5fSAYY6j46BUFxGG+KM0cPMo4u1bfr1 dU0CGZIXuh6nFlYSoPjZbQjqThOa/NAeFHb+GdoDzUTfmpA6pvv/vW21uZdcRjNJ xUAPfuFJ4RQxvIs6aGvYXoW+IoDDiLmHMbRJ4dX4 -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:04 2026 by rpki-client