This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer File: Uu_zhdS0ghXYBbWIonBYKdRiEXE.cer (raw, json) Hash identifier: Fi2VjZUu5QqmtWPvkH10fOMVAWYoNKGo94C4r/THY4g= Subject key identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A30A1BC36777F5EA3BAE680B75BEF0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203282 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0a:1b:c3:67:77:f5:ea:3b:ae:68:0b:75:be:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52eff385d4b48215d805b588a2705829d4621171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:c3:a9:aa:f7:09:70:fa:6d:2f:9d:28:8f: 00:86:eb:ac:0c:3f:bb:eb:16:01:4e:c4:5e:c6:4e: b4:01:19:63:48:f5:0a:d8:e1:bf:42:3b:b4:7e:1f: 6a:4d:ab:41:a9:7c:35:46:8a:5e:65:49:25:1e:da: 84:96:0a:e5:28:c8:b4:da:ec:d7:07:56:7c:82:55: f2:64:fe:80:d6:8c:35:e5:68:4c:cd:da:0d:16:ef: df:79:63:4b:eb:fb:44:6b:aa:c7:d9:27:9f:f9:cc: d2:78:11:4c:5e:7c:ac:28:0a:f2:31:a3:e3:81:e8: c9:2d:d1:3c:36:ff:e7:fc:7d:7b:25:81:d4:20:68: b2:07:6a:f5:26:4a:e7:0d:23:55:29:b5:3a:f7:38: 60:48:77:bc:8e:a0:b2:e2:ef:ce:0b:60:90:7c:c7: 1a:34:b4:99:4e:7a:9f:9d:a9:ea:39:f7:50:be:90: 80:e7:c8:1c:45:d2:05:bd:48:46:dc:fd:cc:e6:9d: 09:25:44:c2:30:a4:e5:aa:26:a8:f0:72:85:74:da: 87:15:77:11:fe:fe:5b:fe:d4:9b:59:60:94:1a:51: ec:0d:ff:90:5a:39:96:41:ae:40:dc:06:64:d9:ad: 3b:10:42:1a:af:89:e2:b2:c9:13:c6:65:35:0d:a4: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EF:F3:85:D4:B4:82:15:D8:05:B5:88:A2:70:58:29:D4:62:11:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b4cdf8-e79a-4f43-ae76-30d475bf4f62/1/Uu_zhdS0ghXYBbWIonBYKdRiEXE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203282 Signature Algorithm: sha256WithRSAEncryption 23:2b:bc:6e:f9:17:c0:d0:03:64:59:86:91:3f:61:ec:a2:fd: 80:ec:8d:80:ed:d0:03:2a:e1:bc:a7:31:fc:4e:e6:9e:82:b1: 6b:de:65:a5:d7:1f:84:24:e2:57:8b:79:23:51:85:dd:74:bf: af:80:10:2a:ce:b4:f9:fc:42:4d:66:1c:d2:8c:bc:17:70:71: 59:9e:40:7f:69:d1:78:e2:41:ac:39:75:e9:3f:7d:f5:5e:a2: a4:ee:a1:2f:bc:ec:66:a1:8c:c4:86:9a:2c:a6:90:9c:91:3a: e7:95:7f:08:7d:43:93:fc:d9:94:08:33:85:70:87:24:b2:76: 8c:ff:e4:c0:c5:bc:23:41:59:b9:3b:ec:39:3f:48:99:30:d0: 96:94:d7:79:28:b0:32:f3:b9:0b:b5:65:39:90:b4:1c:10:f0: 44:31:3f:fa:a4:80:66:25:e5:66:b2:df:32:18:9f:c1:7d:ad: 31:e4:ce:ce:85:d7:c1:b7:92:99:87:08:6d:28:e3:af:a7:b8: ce:7b:29:fa:2e:4c:d8:b4:a6:8a:29:1d:a3:35:8f:33:4b:f5: 61:8d:71:a5:b9:dc:df:30:08:c0:d0:e6:68:7f:2c:a4:e7:20: b3:69:b6:73:49:10:0d:c3:e8:2a:14:6c:61:2c:a5:61:8a:14: 80:19:b9:04 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4owobw2d39eo7rmgLdb7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmVmZjM4NWQ0YjQ4MjE1ZDgwNWI1ODhhMjcwNTgyOWQ0NjIxMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYPDqar3CXD6bS+dKI8AhuusDD+7 6xYBTsRexk60ARljSPUK2OG/Qju0fh9qTatBqXw1RopeZUklHtqElgrlKMi02uzX B1Z8glXyZP6A1ow15WhMzdoNFu/feWNL6/tEa6rH2Sef+czSeBFMXnysKAryMaPj gejJLdE8Nv/n/H17JYHUIGiyB2r1JkrnDSNVKbU69zhgSHe8jqCy4u/OC2CQfMca NLSZTnqfnanqOfdQvpCA58gcRdIFvUhG3P3M5p0JJUTCMKTlqiao8HKFdNqHFXcR /v5b/tSbWWCUGlHsDf+QWjmWQa5A3AZk2a07EEIar4nisskTxmU1DaRU/wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFLv84XUtIIV2AW1iKJwWCnUYhFxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2I0Y2Rm OC1lNzlhLTRmNDMtYWU3Ni0zMGQ0NzViZjRmNjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvYjRjZGY4 LWU3OWEtNGY0My1hZTc2LTMwZDQ3NWJmNGY2Mi8xL1V1X3poZFMwZ2hYWUJiV0lv bkJZS2RSaUVYRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMaEjANBgkqhkiG9w0BAQsFAAOCAQEAIyu8bvkXwNAD ZFmGkT9h7KL9gOyNgO3QAyrhvKcx/E7mnoKxa95lpdcfhCTiV4t5I1GF3XS/r4AQ Ks60+fxCTWYc0oy8F3BxWZ5Af2nReOJBrDl16T999V6ipO6hL7zsZqGMxIaaLKaQ nJE655V/CH1Dk/zZlAgzhXCHJLJ2jP/kwMW8I0FZuTvsOT9ImTDQlpTXeSiwMvO5 C7VlOZC0HBDwRDE/+qSAZiXlZrLfMhifwX2tMeTOzoXXwbeSmYcIbSjjr6e4znsp +i5M2LSmiikdozWPM0v1YY1xpbnc3zAIwNDmaH8spOcgs2m2c0kQDcPoKhRsYSyl YYoUgBm5BA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:01 2026 by rpki-client