This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/USzy1zi8akeL64yogkEB_w_IGmE.cer File: USzy1zi8akeL64yogkEB_w_IGmE.cer (raw, json) Hash identifier: vTWm5j4eV1FyZnHqvZHjNGSoTdJ31SYFDf1QYmN7t6U= Subject key identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AD564E6F0BF8E053F9A933F17C9A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51068 IP: 194.28.200.0/22 IP: 194.165.8.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d5:64:e6:f0:bf:8e:05:3f:9a:93:3f:17:c9:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=512cf2d738bc6a478beb8ca8824101ff0fc81a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:a8:f1:f0:75:41:21:e6:44:b8:81:ef:5e: 76:93:92:cd:84:a4:5e:df:8c:84:ec:8f:48:2d:8c: 25:49:b7:de:f7:62:06:50:4f:24:4c:e4:25:6f:31: 8a:3c:9a:12:f1:37:c8:86:20:26:01:c2:bb:34:e2: bd:7a:a5:aa:ee:95:12:d8:cc:ca:1b:a1:b1:35:09: e0:22:f5:d0:95:58:d5:7a:91:df:e7:b5:a5:9b:dc: fe:90:eb:35:a8:f7:f2:8c:7e:8b:2f:44:3a:29:ae: 70:c4:65:34:f2:7a:77:c2:ac:fe:51:17:03:6c:da: 7c:5d:c7:f4:d3:8c:fd:9c:77:11:87:05:8e:e1:bf: ec:d9:41:f1:93:49:e4:c0:f4:9b:0a:d8:9d:39:fc: e0:10:47:d4:71:8c:69:d4:1a:a2:47:28:d0:17:56: 04:db:b8:bd:16:25:48:57:23:ad:99:70:c1:e1:6f: 2a:9b:c4:97:4e:19:0e:c6:f5:ca:eb:f7:c1:04:b7: 90:f1:19:38:d2:a5:08:05:3c:ac:51:c0:1b:9a:0a: dd:7a:ae:a8:74:a1:aa:7b:e2:5c:7e:a7:8d:d7:61: 9d:b7:40:13:ad:e9:21:b8:fb:6e:00:cd:07:a0:1c: 9f:d7:e7:97:47:51:c9:a3:09:a9:97:1d:4f:2b:42: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2C:F2:D7:38:BC:6A:47:8B:EB:8C:A8:82:41:01:FF:0F:C8:1A:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4a54cf-2414-4d6f-8ba5-7001baf775f2/1/USzy1zi8akeL64yogkEB_w_IGmE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.200.0/22 194.165.8.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51068 Signature Algorithm: sha256WithRSAEncryption 56:9a:91:b8:95:65:4e:9f:f3:1a:ad:bf:c9:a5:e9:85:a7:fa: 80:ae:f0:2c:52:fe:65:cb:24:b5:d5:1f:a3:57:b3:f0:8e:90: c8:e9:50:a5:ee:ff:b4:07:e6:4d:60:47:14:6a:66:a0:03:35: b1:3b:8d:2d:47:47:99:5b:6f:3a:6c:76:c1:92:02:74:b8:e7: 06:00:c9:0a:01:6a:fd:4a:0e:64:f2:cd:ec:bc:cc:f0:d8:6d: 8a:42:ba:da:7b:ad:05:4a:91:51:14:30:f9:3a:4b:ab:25:c5: fb:d9:c7:39:be:19:b5:c7:00:fb:9c:7d:02:84:5a:f1:1d:63: f8:04:c9:64:52:9b:42:ec:d7:76:b3:10:34:85:69:0d:24:d6: b0:55:5b:76:26:e5:42:63:99:65:d2:20:d7:7d:51:ce:97:06: 73:c5:3a:7c:68:fa:c4:8d:10:0b:98:82:cf:9b:8d:7d:53:49: 4c:01:fe:c8:d5:d6:ee:45:56:eb:85:94:db:86:21:81:d6:58: 53:f2:e8:c7:5c:99:d3:81:5a:6d:be:5a:46:4c:5c:63:46:76: ee:f2:18:ba:c6:3a:6d:8c:7d:99:42:87:de:f8:c9:7a:47:0a: 79:de:fc:53:38:57:ab:9f:bc:ec:d8:0a:fa:11:4d:61:24:82: 97:f2:d3:62 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt6WtVk5vC/jgU/mpM/F8mmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTJjZjJkNzM4YmM2YTQ3OGJlYjhjYTg4MjQxMDFmZjBmYzgxYTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvCo8fB1QSHmRLiB7152k5LNhKRe 34yE7I9ILYwlSbfe92IGUE8kTOQlbzGKPJoS8TfIhiAmAcK7NOK9eqWq7pUS2MzK G6GxNQngIvXQlVjVepHf57Wlm9z+kOs1qPfyjH6LL0Q6Ka5wxGU08np3wqz+URcD bNp8Xcf004z9nHcRhwWO4b/s2UHxk0nkwPSbCtidOfzgEEfUcYxp1BqiRyjQF1YE 27i9FiVIVyOtmXDB4W8qm8SXThkOxvXK6/fBBLeQ8Rk40qUIBTysUcAbmgrdeq6o dKGqe+JcfqeN12Gdt0ATrekhuPtuAM0HoByf1+eXR1HJowmplx1PK0Jv6QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFFEs8tc4vGpHi+uMqIJBAf8PyBphMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzRhNTRj Zi0yNDE0LTRkNmYtOGJhNS03MDAxYmFmNzc1ZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvNGE1NGNm LTI0MTQtNGQ2Zi04YmE1LTcwMDFiYWY3NzVmMi8xL1VTenkxemk4YWtlTDY0eW9n a0VCX3dfSUdtRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCwhzIAwQBwqUIMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDHfDANBgkqhkiG9w0BAQsFAAOCAQEAVpqRuJVlTp/zGq2/yaXphaf6 gK7wLFL+ZcsktdUfo1ez8I6QyOlQpe7/tAfmTWBHFGpmoAM1sTuNLUdHmVtvOmx2 wZICdLjnBgDJCgFq/UoOZPLN7LzM8NhtikK62nutBUqRURQw+TpLqyXF+9nHOb4Z tccA+5x9AoRa8R1j+ATJZFKbQuzXdrMQNIVpDSTWsFVbdiblQmOZZdIg131RzpcG c8U6fGj6xI0QC5iCz5uNfVNJTAH+yNXW7kVW64WU24YhgdZYU/Lox1yZ04Fabb5a RkxcY0Z27vIYusY6bYx9mUKH3vjJekcKed78UzhXq5+87NgK+hFNYSSCl/LTYg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:03 2026 by rpki-client