This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer File: U_ZmAbfOrAjBggeEBk5XHbmIe-s.cer (raw, json) Hash identifier: GPOhzOp6bFfq8ZIqmm1uIAUQ3ojRmymMhstgwQ2BqMM= Subject key identifier: 53:F6:66:01:B7:CE:AC:08:C1:82:07:84:06:4E:57:1D:B9:88:7B:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BC373E6D4C1176475D80CCD5272DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204874 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:c3:73:e6:d4:c1:17:64:75:d8:0c:cd:52:72:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53f66601b7ceac08c1820784064e571db9887beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:bd:95:c3:b0:52:8e:36:cd:3a:57:5e:56: e7:27:6c:66:5f:fb:af:8e:f7:cb:68:fa:95:d8:16: 0f:01:8a:94:51:4b:ac:fb:5c:23:15:7c:b4:9f:b3: 53:87:54:1b:ce:de:46:aa:b6:38:65:28:e1:f3:dd: e5:45:b2:56:91:1a:fa:39:e0:d2:8e:95:05:5f:58: f8:67:3d:02:6d:b6:3f:e5:dc:ab:eb:58:4d:06:ed: f3:fa:54:b5:6d:98:a1:ca:a2:99:db:63:c9:b0:c5: 49:50:58:f6:b6:32:f0:b0:c7:b7:72:7f:c8:ba:27: 8a:06:15:9a:ff:f3:ac:a1:93:7c:8c:7a:af:b2:7b: 6a:64:3a:f3:a6:e0:8b:65:be:42:6b:f9:24:20:82: 96:e7:36:d5:3e:a8:cd:6b:3d:8d:ee:72:a9:77:71: 63:63:6e:f4:88:b1:03:f4:02:38:fa:73:49:a5:2d: 58:0e:cb:10:51:09:95:bf:d2:1b:dc:bb:16:69:b0: 82:ea:88:67:ce:31:10:f1:f6:5d:27:fa:39:e9:b9: 0e:12:f1:01:05:9a:1a:ba:82:8d:23:e7:dd:2d:b0: c5:05:1b:c8:f5:78:34:43:4e:32:0a:9b:1b:22:8c: b2:d2:23:fa:c8:ab:40:2a:1c:9f:33:fe:4c:ac:77: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F6:66:01:B7:CE:AC:08:C1:82:07:84:06:4E:57:1D:B9:88:7B:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d43c2f-ffa9-4f2b-a831-ad0b5dcf3303/1/U_ZmAbfOrAjBggeEBk5XHbmIe-s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204874 Signature Algorithm: sha256WithRSAEncryption 88:98:02:67:14:e0:15:7e:04:66:73:da:73:c8:68:7e:d8:bb: 3c:75:c0:f3:db:dd:a6:f9:49:d9:ef:1f:23:21:b5:5d:9f:69: 76:bd:20:2d:4a:ea:97:88:e7:3c:40:be:ef:f6:0c:ef:d8:b9: eb:da:9d:4e:58:4b:33:15:96:eb:f2:33:40:28:59:7d:3a:7e: 12:7f:ad:7f:36:0a:ec:8c:ea:12:18:c0:e2:74:f2:ad:07:40: 8b:a3:f9:5d:e1:30:2d:76:ec:83:3f:58:46:9b:75:95:6e:f9: b3:11:b2:36:a6:26:11:4c:bf:cc:2e:e6:d2:05:b4:ba:fc:bc: ea:e3:a7:eb:42:69:c4:7f:7e:ff:06:46:c9:84:48:df:54:d6: 61:cc:82:5e:a8:71:50:22:ef:1a:5f:16:01:a1:72:a8:65:b9: 38:5d:e8:02:1c:3f:42:97:9a:c1:83:20:98:99:15:28:70:94: 12:8c:1f:14:6a:61:b5:bb:b5:33:e4:ea:35:65:b9:4a:7b:ac: a1:95:8a:5d:a2:ec:b2:cd:e5:73:6d:53:c8:ab:ec:4a:98:99: eb:4b:35:49:20:c6:e3:a4:87:92:04:3f:ed:d5:ed:bf:16:65: 4b:9d:90:58:ac:31:2e:02:76:92:f7:84:05:14:c1:1f:ef:9d: a2:39:91:fb -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9W8Nz5tTBF2R12AzNUnLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2Y2NjYwMWI3Y2VhYzA4YzE4MjA3ODQwNjRlNTcxZGI5ODg3YmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10i9lcOwUo42zTpXXlbnJ2xmX/uv jvfLaPqV2BYPAYqUUUus+1wjFXy0n7NTh1Qbzt5GqrY4ZSjh893lRbJWkRr6OeDS jpUFX1j4Zz0CbbY/5dyr61hNBu3z+lS1bZihyqKZ22PJsMVJUFj2tjLwsMe3cn/I uieKBhWa//OsoZN8jHqvsntqZDrzpuCLZb5Ca/kkIIKW5zbVPqjNaz2N7nKpd3Fj Y270iLED9AI4+nNJpS1YDssQUQmVv9Ib3LsWabCC6ohnzjEQ8fZdJ/o56bkOEvEB BZoauoKNI+fdLbDFBRvI9Xg0Q04yCpsbIoyy0iP6yKtAKhyfM/5MrHdm2QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFP2ZgG3zqwIwYIHhAZOVx25iHvrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2Q0M2My Zi1mZmE5LTRmMmItYTgzMS1hZDBiNWRjZjMzMDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvZDQzYzJm LWZmYTktNGYyYi1hODMxLWFkMGI1ZGNmMzMwMy8xL1VfWm1BYmZPckFqQmdnZUVC azVYSGJtSWUtcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgSjANBgkqhkiG9w0BAQsFAAOCAQEAiJgCZxTgFX4E ZnPac8hofti7PHXA89vdpvlJ2e8fIyG1XZ9pdr0gLUrql4jnPEC+7/YM79i569qd TlhLMxWW6/IzQChZfTp+En+tfzYK7IzqEhjA4nTyrQdAi6P5XeEwLXbsgz9YRpt1 lW75sxGyNqYmEUy/zC7m0gW0uvy86uOn60JpxH9+/wZGyYRI31TWYcyCXqhxUCLv Gl8WAaFyqGW5OF3oAhw/QpeawYMgmJkVKHCUEowfFGphtbu1M+TqNWW5SnusoZWK XaLsss3lc21TyKvsSpiZ60s1SSDG46SHkgQ/7dXtvxZlS52QWKwxLgJ2kveEBRTB H++dojmR+w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:10 2026 by rpki-client