This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer File: Us3j-fOkO7GGEIo8M9n2NVeh14w.cer (raw, json) Hash identifier: LtMLmhrN0LCCxsw8wQ+QPBvwYTMPzgLbODiyBRTm/nQ= Subject key identifier: 52:CD:E3:F9:F3:A4:3B:B1:86:10:8A:3C:33:D9:F6:35:57:A1:D7:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DD7654B2AB048C6E232F7D009F772 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203389 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d7:65:4b:2a:b0:48:c6:e2:32:f7:d0:09:f7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52cde3f9f3a43bb186108a3c33d9f63557a1d78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:a4:25:e3:35:23:99:de:4b:bb:d1:a8:2e: 19:4b:08:47:4a:8d:82:3e:41:82:0a:21:18:8b:2c: 68:52:9e:f4:ec:a4:cb:8c:db:92:88:52:60:d4:7b: 8c:6c:92:2a:4a:e6:18:ca:52:90:3b:43:25:e0:fc: 12:b1:a5:63:97:d6:d9:20:d1:83:c1:cb:db:7b:3a: f6:eb:39:c2:04:1e:35:5f:f6:09:68:ca:4f:f0:a5: 85:04:ec:7e:78:51:50:7a:e2:c4:b6:46:31:cd:34: e9:b2:16:80:16:e0:77:e3:ea:fb:49:d6:20:d6:37: a1:08:a1:b1:bf:9a:f7:83:23:22:1a:98:41:e7:4f: e8:8e:4c:de:07:0f:b2:14:af:d3:19:f5:23:c2:2e: 40:4e:7c:2c:e6:ab:7b:f5:6b:72:93:18:eb:8e:21: 45:e6:a2:9f:82:73:22:ee:10:f4:1a:92:52:20:63: 7a:d6:bf:3c:35:68:6c:75:19:c9:1a:90:91:2d:ea: 76:48:0f:05:c0:58:ee:25:09:de:af:08:73:67:d8: e7:e6:57:7e:49:e9:c2:68:42:15:ed:60:2a:07:f5: 4e:ee:be:d1:41:f1:f2:3d:aa:ed:ff:8c:db:94:91: 58:48:d2:67:3f:0f:2b:e2:6b:39:ac:65:42:f3:27: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CD:E3:F9:F3:A4:3B:B1:86:10:8A:3C:33:D9:F6:35:57:A1:D7:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203389 Signature Algorithm: sha256WithRSAEncryption 78:0e:8d:7a:a6:7a:ac:66:6a:2c:48:00:b6:29:f7:79:dd:17: 70:b9:a3:4d:55:40:ea:2b:f1:3e:4d:0c:eb:36:aa:10:1c:8d: 07:a4:e2:e2:3b:6d:41:d3:5b:89:42:08:fe:b9:51:81:ca:c7: 69:1b:f0:d7:d9:f3:76:f8:ca:05:fc:c7:3e:18:fe:1b:e9:df: 3d:49:42:48:08:07:6c:cb:99:4b:e5:4c:08:1b:28:69:52:68: 03:73:b6:6f:a7:bf:6e:c9:77:be:7c:8c:57:30:02:59:b6:88: c7:76:96:db:c1:72:3b:3c:80:df:71:4a:eb:86:ac:3e:3d:89: 31:ed:e2:27:2d:92:cd:43:f5:ba:94:26:35:4b:16:08:71:94: e7:9f:c5:01:24:39:2f:31:7c:ab:5f:62:97:9e:39:5e:8b:a8: 71:3f:62:aa:c3:c0:0d:90:e7:7b:86:01:f0:b6:35:b7:2e:c6: 08:e3:08:27:b3:5e:d0:05:f6:45:87:66:be:da:b0:47:ae:23: 27:3f:95:3d:22:62:e3:27:8a:98:d1:25:2c:50:29:3a:69:ab: f6:8c:b1:a3:ba:92:fe:23:69:be:1c:75:d0:45:5b:1c:1f:34: 85:3a:e0:da:bd:e2:1d:82:39:22:01:62:46:44:b5:cc:af:4a: a6:4d:8d:0b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fddlSyqwSMbiMvfQCfdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmNkZTNmOWYzYTQzYmIxODYxMDhhM2MzM2Q5ZjYzNTU3YTFkNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthykJeM1I5neS7vRqC4ZSwhHSo2C PkGCCiEYiyxoUp707KTLjNuSiFJg1HuMbJIqSuYYylKQO0Ml4PwSsaVjl9bZINGD wcvbezr26znCBB41X/YJaMpP8KWFBOx+eFFQeuLEtkYxzTTpshaAFuB34+r7SdYg 1jehCKGxv5r3gyMiGphB50/ojkzeBw+yFK/TGfUjwi5ATnws5qt79WtykxjrjiFF 5qKfgnMi7hD0GpJSIGN61r88NWhsdRnJGpCRLep2SA8FwFjuJQnerwhzZ9jn5ld+ SenCaEIV7WAqB/VO7r7RQfHyPart/4zblJFYSNJnPw8r4ms5rGVC8yeTQQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFLN4/nzpDuxhhCKPDPZ9jVXodeMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzZkZmZk OC1lNDMzLTQ0MWItYmIzNy02MDQ2YzAwNDk2YmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmRmZmQ4 LWU0MzMtNDQxYi1iYjM3LTYwNDZjMDA0OTZiYy8xL1VzM2otZk9rTzdHR0VJbzhN OW4yTlZlaDE0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMafTANBgkqhkiG9w0BAQsFAAOCAQEAeA6NeqZ6rGZq LEgAtin3ed0XcLmjTVVA6ivxPk0M6zaqEByNB6Ti4jttQdNbiUII/rlRgcrHaRvw 19nzdvjKBfzHPhj+G+nfPUlCSAgHbMuZS+VMCBsoaVJoA3O2b6e/bsl3vnyMVzAC WbaIx3aW28FyOzyA33FK64asPj2JMe3iJy2SzUP1upQmNUsWCHGU55/FASQ5LzF8 q19il545XouocT9iqsPADZDne4YB8LY1ty7GCOMIJ7Ne0AX2RYdmvtqwR64jJz+V PSJi4yeKmNElLFApOmmr9oyxo7qS/iNpvhx10EVbHB80hTrg2r3iHYI5IgFiRkS1 zK9Kpk2NCw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:44 2026 by rpki-client