This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer (raw, json) Hash identifier: HF/aqtIrc/SGxsSeYzOlcVjL2WLePmswUZJjc9fmF9E= Subject key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30E0A4E5C451BCBA5C389563439D3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58291 IP: 5.39.184.0/21 IP: 185.79.152.0/22 IP: 185.140.184.0/22 IP: 195.12.60.0/22 IP: 2a02:f640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0e:0a:4e:5c:45:1b:cb:a5:c3:89:56:34:39:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b2:db:14:3c:5f:8e:90:85:62:91:3e:38:8d: d4:8a:0f:b5:f4:3a:92:df:54:b7:de:5b:a9:0e:ff: b9:30:68:49:12:e1:c9:8a:71:b2:96:07:d4:26:d3: 67:b0:5a:e7:ac:de:f0:ae:d7:17:6a:91:49:26:61: 97:91:b9:08:f5:66:cd:e7:51:4f:f8:75:06:86:ac: d4:01:1f:9a:da:94:bc:bc:8f:2c:c2:e4:1c:c8:56: fc:50:21:49:f3:a9:8f:88:1e:a1:46:eb:ac:02:d0: 93:6e:5b:83:40:7a:5b:89:23:68:b7:c1:ec:18:af: 97:65:3e:43:72:20:71:cc:39:2c:e1:b5:65:2d:cf: 26:f1:fd:49:3d:7b:48:a5:40:1d:1f:92:d8:3a:1b: b4:f3:0a:03:c8:d7:15:ac:11:8e:43:74:78:ef:f3: fc:a4:94:c8:18:e6:3a:1d:24:c1:ca:e5:59:d1:26: fd:e6:5f:c3:71:10:c6:a6:89:a3:8e:ec:15:68:19: f0:aa:af:64:a0:da:8f:71:8f:12:8d:da:44:b9:7c: b1:8e:40:7c:8b:5f:76:83:a1:62:85:c9:05:c2:7d: 43:bf:71:85:4f:30:50:d7:62:71:62:bf:d0:40:39: dc:9f:a0:a8:4f:81:a8:58:ae:22:48:11:96:67:08: 64:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.184.0/21 185.79.152.0/22 185.140.184.0/22 195.12.60.0/22 IPv6: 2a02:f640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58291 Signature Algorithm: sha256WithRSAEncryption 00:50:ec:e3:9c:6a:88:bb:ec:3e:12:33:94:6d:a6:4b:ac:74: 48:69:b7:0a:90:df:e1:6a:cb:35:4d:a5:cc:52:6e:02:09:e2: e9:21:21:10:c6:a6:81:8c:f5:2a:16:29:f5:81:04:ab:0a:2c: 1d:65:ce:f0:55:bb:09:fa:ad:8e:e3:90:a3:26:df:ba:cb:43: 79:17:33:d1:44:4c:2d:d4:75:9a:59:bc:ad:dd:87:6a:7a:e5: 3d:8d:8c:cb:45:c5:84:d3:28:96:01:04:95:5a:c1:7a:2b:55: 08:75:80:b7:ed:88:d2:c5:d3:18:0c:45:05:3a:5c:89:b0:f1: 83:50:bb:e0:07:52:92:9f:d8:74:c9:e0:e6:bf:f1:a9:02:e5: ac:67:39:ba:26:e4:84:59:69:cd:68:9a:11:d7:a8:70:5d:69: ed:70:c1:e7:30:4a:13:76:54:72:29:a5:7b:d7:bc:d3:f2:20: ec:21:1b:82:bc:b2:c3:2a:38:61:5e:d5:60:3f:94:85:6b:0d: 54:94:64:ea:9d:7c:4c:63:b6:ba:52:f0:dc:ae:fb:29:d4:90: 6a:89:39:d0:5a:81:46:05:4f:cb:8e:52:cc:03:71:59:84:33: 4e:9d:fb:2c:15:2f:8f:1e:9a:31:ae:ed:cc:1a:60:6b:dd:b2: 08:13:f9:2a -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt4ow4KTlxFG8ulw4lWNDnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2YzOWQyZjIwZTJkOWI0Zjk2Y2JkMTMzN2VhMzJkYTUxOGQ4ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7LbFDxfjpCFYpE+OI3Uig+19DqS 31S33lupDv+5MGhJEuHJinGylgfUJtNnsFrnrN7wrtcXapFJJmGXkbkI9WbN51FP +HUGhqzUAR+a2pS8vI8swuQcyFb8UCFJ86mPiB6hRuusAtCTbluDQHpbiSNot8Hs GK+XZT5DciBxzDks4bVlLc8m8f1JPXtIpUAdH5LYOhu08woDyNcVrBGOQ3R47/P8 pJTIGOY6HSTByuVZ0Sb95l/DcRDGpomjjuwVaBnwqq9koNqPcY8SjdpEuXyxjkB8 i192g6FihckFwn1Dv3GFTzBQ12JxYr/QQDncn6CoT4GoWK4iSBGWZwhkEQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFFPznS8g4tm0+Wy9EzfqMtpRjY7IMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzFkOGZj YS1iNDYyLTQzMTMtYTUyMy1lNDExYjQzZGM2OGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMWQ4ZmNh LWI0NjItNDMxMy1hNTIzLWU0MTFiNDNkYzY4YS8xL1VfT2RMeURpMmJUNWJMMFRO LW95MmxHTmpzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDBSe4AwQCuU+YAwQCuYy4AwQCwww8MA0EAgAC MAcDBQMqAvZAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDjszANBgkqhkiG9w0B AQsFAAOCAQEAAFDs45xqiLvsPhIzlG2mS6x0SGm3CpDf4WrLNU2lzFJuAgni6SEh EMamgYz1KhYp9YEEqwosHWXO8FW7CfqtjuOQoybfustDeRcz0URMLdR1mlm8rd2H anrlPY2My0XFhNMolgEElVrBeitVCHWAt+2I0sXTGAxFBTpcibDxg1C74AdSkp/Y dMng5r/xqQLlrGc5uibkhFlpzWiaEdeocF1p7XDB5zBKE3ZUcimle9e80/Ig7CEb gryywyo4YV7VYD+UhWsNVJRk6p18TGO2ulLw3K77KdSQaok50FqBRgVPy45SzANx WYQzTp37LBUvjx6aMa7tzBpga92yCBP5Kg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:14 2026 by rpki-client