This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer File: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer (raw, json) Hash identifier: evdqEn0mfMKNehnP3ovldYZ4Z+fERnFRGNyANnyaeFE= Subject key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1361C03081FD7EE662D81EA1B1B106 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210932 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:61:c0:30:81:fd:7e:e6:62:d8:1e:a1:b1:b1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52b8d3d330bd6620bb17d487e4055d95b274af16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:45:52:2a:35:b3:02:2c:1e:5f:f7:3a:2a: 21:65:df:93:b3:46:92:64:c7:10:32:99:17:6c:5d: d0:27:8f:1d:f5:80:79:f2:1b:b5:7b:f7:cd:27:cf: fb:8d:c1:dc:03:82:8e:25:27:d4:2c:22:d1:aa:d6: e2:51:26:88:bb:d3:9d:a2:43:5b:3a:aa:80:fc:7b: 81:53:3d:67:b5:50:7f:01:71:fe:95:92:e7:4e:6e: 9f:f3:1e:2c:be:29:8a:c7:f4:ed:7e:13:8a:29:9a: 5b:aa:0a:10:5a:64:78:6c:d7:a6:bb:6e:80:90:14: 19:99:ab:76:95:b4:68:f3:d0:28:ca:f3:fc:53:8f: 75:90:77:83:65:cc:b0:e5:4b:e5:68:83:58:ec:66: e4:ba:23:83:08:34:a6:ea:ec:ba:d5:ec:70:e2:8a: bb:7a:92:d0:ea:ac:c6:29:2c:9d:89:19:51:6b:32: a5:94:f9:11:8f:b3:c6:f7:40:86:b2:ea:6f:ea:5d: 62:c7:4d:be:fc:8c:a6:57:a5:2b:33:68:17:3b:81: 30:57:8a:f4:05:6b:00:0e:e0:5f:33:41:15:fc:89: 75:78:a0:34:e6:4c:83:9c:42:ef:1e:cd:22:99:1c: 1a:9c:15:8e:bc:46:fb:eb:67:d0:b2:d5:45:c0:a7: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210932 Signature Algorithm: sha256WithRSAEncryption 1a:74:24:17:8c:2b:1b:c5:06:06:fa:73:8f:fc:96:3f:21:bd: 17:6c:28:5d:12:98:dc:19:6e:af:ae:94:41:b8:8e:56:d2:eb: 09:93:a3:b7:58:89:7b:a4:bf:4a:21:71:97:5d:50:c2:af:40: e4:bc:54:9e:84:77:f3:33:5c:5c:96:51:15:46:e3:11:9d:4e: 82:b4:a2:35:7d:11:5b:f0:ef:15:57:ee:8f:34:6f:a4:70:0d: b5:3f:8b:43:00:25:bc:52:39:f8:6b:3c:c0:58:58:23:fc:fd: 64:45:66:08:43:d9:dd:38:23:83:ca:27:f5:bd:b3:d2:99:ea: 57:2f:48:64:44:5f:01:66:f7:31:46:bc:5d:44:2b:07:24:98: 2e:c0:b1:16:43:58:60:e6:9c:cd:40:06:25:95:06:45:6b:b3: e7:89:eb:ef:87:f1:95:96:41:21:db:97:26:78:53:33:ab:d5: 2c:2e:70:e4:3f:20:fd:e4:9f:23:c3:cd:99:bc:bb:46:60:40: d7:96:46:31:63:db:de:e8:db:51:49:57:50:1b:35:2f:57:2e: 23:1f:2a:be:44:45:1e:31:9c:d3:ef:4a:9b:03:a1:11:7a:bb: 0d:21:1f:a8:a8:9e:05:c4:8c:29:8c:1a:83:d9:9b:47:31:b4: de:70:ee:6f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt8E2HAMIH9fuZi2B6hsbEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmI4ZDNkMzMwYmQ2NjIwYmIxN2Q0ODdlNDA1NWQ5NWIyNzRhZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutxFUio1swIsHl/3OiohZd+Ts0aS ZMcQMpkXbF3QJ48d9YB58hu1e/fNJ8/7jcHcA4KOJSfULCLRqtbiUSaIu9OdokNb OqqA/HuBUz1ntVB/AXH+lZLnTm6f8x4svimKx/TtfhOKKZpbqgoQWmR4bNemu26A kBQZmat2lbRo89AoyvP8U491kHeDZcyw5UvlaINY7GbkuiODCDSm6uy61exw4oq7 epLQ6qzGKSydiRlRazKllPkRj7PG90CGsupv6l1ix02+/IymV6UrM2gXO4EwV4r0 BWsADuBfM0EV/Il1eKA05kyDnELvHs0imRwanBWOvEb762fQstVFwKe9bQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFK409MwvWYguxfUh+QFXZWydK8WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZmLzRjYThm YS02YzE1LTRiNDctYWI5My1iYmJlYjYwOTA1MjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYvNGNhOGZh LTZjMTUtNGI0Ny1hYjkzLWJiYmViNjA5MDUyMS8xL1VyalQwekM5WmlDN0Y5U0g1 QVZkbGJKMHJ4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM39DANBgkqhkiG9w0BAQsFAAOCAQEAGnQkF4wrG8UG Bvpzj/yWPyG9F2woXRKY3Blur66UQbiOVtLrCZOjt1iJe6S/SiFxl11Qwq9A5LxU noR38zNcXJZRFUbjEZ1OgrSiNX0RW/DvFVfujzRvpHANtT+LQwAlvFI5+Gs8wFhY I/z9ZEVmCEPZ3Tgjg8on9b2z0pnqVy9IZERfAWb3MUa8XUQrBySYLsCxFkNYYOac zUAGJZUGRWuz54nr74fxlZZBIduXJnhTM6vVLC5w5D8g/eSfI8PNmby7RmBA15ZG MWPb3ujbUUlXUBs1L1cuIx8qvkRFHjGc0+9KmwOhEXq7DSEfqKieBcSMKYwag9mb RzG03nDubw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:29 2026 by rpki-client