This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer File: Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer (raw, json) Hash identifier: fcTkOPxGq/6iw3Ovop4dL7uYfmk0DILYrpax595lfGU= Subject key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15AD23A57F8D21A1612C06663ED38A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42563 AS: 57232 AS: 57954 IP: 91.197.56.0/24 IP: 192.162.19.0/24 IP: 193.105.210.0/24 IP: 194.1.159.0/24 IP: 2001:678:41c::/48 IP: 2001:67c:13a0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ad:23:a5:7f:8d:21:a1:61:2c:06:66:3e:d3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:1e:80:aa:61:42:ef:a9:d1:85:3e:e3:be: 68:17:8e:70:9b:12:ea:ed:39:52:8c:f2:41:41:ce: 42:c9:ba:2b:bc:cb:07:a7:01:8f:08:23:8b:51:4f: 54:63:9a:da:34:08:9c:37:1f:cc:b2:80:23:fd:ee: 45:8e:d7:6d:f5:c9:43:71:4c:89:5b:7e:b3:4d:c9: 09:18:e2:22:c7:41:9a:13:11:4a:92:45:ce:f4:0f: a3:da:d5:40:35:60:9c:f5:76:a3:fb:fa:46:38:75: bb:19:41:8a:83:aa:ed:3d:2c:fc:0a:be:32:a7:0b: 9c:2e:e0:0c:6a:b6:99:c1:44:31:e3:4d:d7:56:9e: 30:13:a0:33:a1:90:82:4b:70:29:e2:8a:e6:6d:73: 1e:46:66:15:c3:a7:12:bf:06:9c:0f:f5:47:5f:38: c0:3d:4b:7b:89:0f:dd:7e:35:d1:0a:24:df:42:d5: 21:64:85:86:4d:77:b5:8f:0b:bc:4e:ba:dd:90:69: 50:aa:bb:ce:6a:91:34:84:30:b8:8e:90:27:2d:2d: ff:13:1b:49:b9:16:de:4e:5f:c7:4f:1e:d0:58:18: 1a:b4:66:37:8a:77:af:1d:13:20:3c:81:0e:89:e2: 15:4e:01:23:55:4d:12:51:f1:44:a3:d9:d4:f6:c7: d5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.56.0/24 192.162.19.0/24 193.105.210.0/24 194.1.159.0/24 IPv6: 2001:678:41c::/48 2001:67c:13a0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42563 57232 57954 Signature Algorithm: sha256WithRSAEncryption 8c:2a:25:3b:e6:d3:91:c3:28:60:4a:71:fd:d8:6f:91:c6:56: ba:34:d8:ad:7c:76:96:04:78:d2:5a:a4:a0:de:d9:60:ad:2a: 60:75:ff:3f:6e:41:7e:b9:0b:0b:2f:73:72:21:dc:84:fc:4f: 6b:d3:2e:44:4a:cc:9b:65:7f:c4:39:f8:ba:1d:ea:62:f7:85: 9a:8f:b7:f4:17:fb:39:3e:38:61:95:45:cd:2a:26:b9:cd:22: 01:f1:d6:a6:a7:40:11:43:7b:b8:4b:b8:28:b3:64:e4:c9:28: 5c:0c:48:ae:ae:58:a3:d1:78:c8:15:fb:d2:e7:dd:0c:55:fd: 43:8b:b9:8a:8d:d4:9e:1f:71:41:1b:d1:ba:f2:47:5d:06:41: f2:af:c6:35:f9:69:52:15:bc:a4:ae:72:25:22:fc:79:48:6a: 16:53:5b:2a:e6:e2:e1:2b:d9:fa:95:60:f3:63:47:88:53:d7: 47:17:d2:39:f4:29:b1:74:08:17:bd:28:40:8b:57:f1:5d:0b: 28:1d:ab:0a:37:48:90:16:0d:39:0c:52:2b:e5:cb:b1:81:ec: 95:d7:9f:f6:59:2a:ce:ba:1d:68:99:e9:39:d0:bc:c5:0a:e9: 95:76:8f:b8:0b:39:20:ff:76:e2:ae:0b:cb:09:2e:de:28:23: c9:3d:b0:f8 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt/Fa0jpX+NIaFhLAZmPtOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmJmMjFlZWIzNjQxNGIzMjgwZTZjMzNiMGI1NzI5NmI4ZjZiNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbUegKphQu+p0YU+475oF45wmxLq 7TlSjPJBQc5CyborvMsHpwGPCCOLUU9UY5raNAicNx/MsoAj/e5Fjtdt9clDcUyJ W36zTckJGOIix0GaExFKkkXO9A+j2tVANWCc9Xaj+/pGOHW7GUGKg6rtPSz8Cr4y pwucLuAMaraZwUQx403XVp4wE6AzoZCCS3Ap4ormbXMeRmYVw6cSvwacD/VHXzjA PUt7iQ/dfjXRCiTfQtUhZIWGTXe1jwu8TrrdkGlQqrvOapE0hDC4jpAnLS3/ExtJ uRbeTl/HTx7QWBgatGY3inevHRMgPIEOieIVTgEjVU0SUfFEo9nU9sfVKwIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFFK/Ie6zZBSzKA5sM7C1cpa49rZ1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzA1OTU0 My02OWU0LTQ4ZjYtYTE3NS1hYzk2ZjZhYWI0OTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvMDU5NTQz LTY5ZTQtNDhmNi1hMTc1LWFjOTZmNmFhYjQ5NC8xL1VyOGg3ck5rRkxNb0Rtd3pz TFZ5bHJqMnRuVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEsGCCsGAQUF BwEHAQH/BDwwOjAeBAIAATAYAwQAW8U4AwQAwKITAwQAwWnSAwQAwgGfMBgEAgAC MBIDBwAgAQZ4BBwDBwAgAQZ8E6AwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAKZD AgMA35ACAwDiYjANBgkqhkiG9w0BAQsFAAOCAQEAjColO+bTkcMoYEpx/dhvkcZW ujTYrXx2lgR40lqkoN7ZYK0qYHX/P25BfrkLCy9zciHchPxPa9MuRErMm2V/xDn4 uh3qYveFmo+39Bf7OT44YZVFzSomuc0iAfHWpqdAEUN7uEu4KLNk5MkoXAxIrq5Y o9F4yBX70ufdDFX9Q4u5io3Unh9xQRvRuvJHXQZB8q/GNflpUhW8pK5yJSL8eUhq FlNbKubi4SvZ+pVg82NHiFPXRxfSOfQpsXQIF70oQItX8V0LKB2rCjdIkBYNOQxS K+XLsYHsldef9lkqzrodaJnpOdC8xQrplXaPuAs5IP924q4Lywku3igjyT2w+A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:59 2026 by rpki-client