This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Unzgu6rDVu3srWci8qhvjgZJCY4.cer File: Unzgu6rDVu3srWci8qhvjgZJCY4.cer (raw, json) Hash identifier: oxRI8FYbHtK4B8cz2Ew03RPIQ2RRlbPNW3LWi7c95/E= Subject key identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1324526A595A06557CB986BDA895B9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.164.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:24:52:6a:59:5a:06:55:7c:b9:86:bd:a8:95:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=527ce0bbaac356edecad6722f2a86f8e0649098e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:50:54:67:b7:dc:e8:83:6f:8e:87:98:b2: 60:09:ad:27:7d:3f:09:c9:0b:76:4e:2d:77:37:7b: ce:8f:8d:a6:5f:c2:69:c0:ae:d9:13:15:f5:0f:b9: a8:72:13:3e:4c:18:77:f4:d9:93:a7:62:ab:4f:6f: cc:fc:c7:2e:74:95:c9:cf:57:11:3f:57:08:70:ec: 8c:d1:73:c6:4b:e7:8c:02:7f:c0:9a:d7:90:3e:4c: c5:87:fd:fa:12:d3:57:02:23:69:0f:63:d4:9f:9a: 1f:73:ed:ad:f1:ae:9e:3d:95:bf:ab:3d:34:45:f2: f8:07:91:67:8d:3e:74:76:17:d8:99:d6:a8:dc:69: 83:fc:9c:80:ac:1d:77:ad:08:e6:70:e9:2e:fd:85: 46:06:10:4f:c9:8a:2c:b9:3a:e6:4a:ad:65:71:18: 97:7a:96:c2:ae:f5:48:51:c1:2c:3f:3c:1c:94:5f: 0b:92:0c:92:e3:90:f7:eb:7b:b0:bc:87:50:92:50: 68:18:0f:5c:e2:0e:2a:e0:34:68:a9:93:9f:21:4d: 0f:39:ff:e3:a6:fd:19:3d:3c:33:70:2b:e2:3b:8a: f6:dd:eb:b4:1e:f3:f7:29:6a:80:92:f7:09:ad:e4: d7:e8:b4:ed:43:06:3d:03:05:2d:4d:41:1e:4f:51: 27:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7C:E0:BB:AA:C3:56:ED:EC:AD:67:22:F2:A8:6F:8E:06:49:09:8E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/91da8f-cb08-49c0-8309-8a2b7f956924/1/Unzgu6rDVu3srWci8qhvjgZJCY4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.164.0/24 Signature Algorithm: sha256WithRSAEncryption 92:36:96:e6:75:77:e7:bd:db:a8:68:56:07:36:4d:2e:92:85: b2:77:b1:5d:17:88:09:0c:68:29:02:c7:11:29:b2:ad:07:1d: 97:7c:c2:df:e9:48:cc:8e:8b:70:61:22:2a:9d:ab:26:b3:ee: 2c:4a:e5:16:53:06:60:7e:3f:1a:53:45:5e:f4:df:77:ab:44: bb:7c:6c:dc:1a:5f:c2:f1:ab:2a:02:b5:89:83:ac:29:c5:76: 79:a7:a9:cd:b5:32:01:4d:ad:c6:b7:45:42:cb:ef:16:e5:f5: ea:a4:6c:59:2e:2e:52:eb:40:9c:aa:c6:3a:a6:70:39:e1:01: 4e:c0:0e:90:38:4e:9c:17:57:df:a9:e4:d3:ef:84:0f:44:56: e8:12:11:b9:07:06:de:a8:dc:fd:55:ae:c9:11:dd:72:10:c0: 5f:24:0f:ae:58:37:85:ab:57:ed:00:07:f2:23:ba:13:b6:4f: 1e:dc:aa:f4:3c:7b:35:7a:7a:03:64:6c:f4:81:bf:32:31:b1: d1:eb:e3:15:71:39:40:f7:83:fe:43:c9:c5:09:f1:d4:54:9e: 50:67:92:f0:92:bd:b7:28:ad:4b:d0:0a:01:0a:0e:c8:4d:19: 7e:88:2e:5b:f0:61:a6:65:2e:eb:25:35:e5:99:16:b9:66:e0: 7a:66:0a:be -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt8EyRSallaBlV8uYa9qJW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjdjZTBiYmFhYzM1NmVkZWNhZDY3MjJmMmE4NmY4ZTA2NDkwOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhJQVGe33OiDb46HmLJgCa0nfT8J yQt2Ti13N3vOj42mX8JpwK7ZExX1D7mochM+TBh39NmTp2KrT2/M/McudJXJz1cR P1cIcOyM0XPGS+eMAn/AmteQPkzFh/36EtNXAiNpD2PUn5ofc+2t8a6ePZW/qz00 RfL4B5FnjT50dhfYmdao3GmD/JyArB13rQjmcOku/YVGBhBPyYosuTrmSq1lcRiX epbCrvVIUcEsPzwclF8LkgyS45D363uwvIdQklBoGA9c4g4q4DRoqZOfIU0POf/j pv0ZPTwzcCviO4r23eu0HvP3KWqAkvcJreTX6LTtQwY9AwUtTUEeT1EnWwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFFJ84Luqw1bt7K1nIvKob44GSQmOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzkxZGE4 Zi1jYjA4LTQ5YzAtODMwOS04YTJiN2Y5NTY5MjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvOTFkYThm LWNiMDgtNDljMC04MzA5LThhMmI3Zjk1NjkyNC8xL1Vuemd1NnJEVnUzc3JXY2k4 cWh2amdaSkNZNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9GkMA0GCSqGSIb3DQEBCwUAA4IBAQCSNpbm dXfnvduoaFYHNk0ukoWyd7FdF4gJDGgpAscRKbKtBx2XfMLf6UjMjotwYSIqnasm s+4sSuUWUwZgfj8aU0Ve9N93q0S7fGzcGl/C8asqArWJg6wpxXZ5p6nNtTIBTa3G t0VCy+8W5fXqpGxZLi5S60CcqsY6pnA54QFOwA6QOE6cF1ffqeTT74QPRFboEhG5 BwbeqNz9Va7JEd1yEMBfJA+uWDeFq1ftAAfyI7oTtk8e3Kr0PHs1enoDZGz0gb8y MbHR6+MVcTlA94P+Q8nFCfHUVJ5QZ5Lwkr23KK1L0AoBCg7ITRl+iC5b8GGmZS7r JTXlmRa5ZuB6Zgq+ -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:37 2026 by rpki-client