This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer (raw, json) Hash identifier: DiD+VMiFxyOR3zvka+SPZXgGvmCU3ssoTO8l/ALhz5g= Subject key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA18AD2E59358FD622F3611F6B21ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213334 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:18:ad:2e:59:35:8f:d6:22:f3:61:1f:6b:21:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0d:d6:18:78:94:7d:05:a7:be:2f:65:50:f2: 01:4f:62:a1:32:43:d2:3f:23:1c:4f:b9:47:d7:9d: 5d:45:58:6b:b9:f8:40:2a:a0:d8:8e:f7:3b:8e:d9: cf:37:db:80:31:90:09:e9:c8:39:aa:cd:ea:47:5d: 45:9b:90:a9:92:8e:46:99:17:a5:2f:0e:dd:bf:a9: 58:43:6e:fb:93:a9:a8:0b:f1:ad:b0:d6:f6:ea:5a: d3:3b:ca:21:74:f7:39:17:d3:77:4f:b2:35:24:50: fc:7a:b0:91:e8:0f:32:f4:39:2b:52:3b:55:17:b8: 66:8c:2c:2b:e0:b6:90:cf:33:e4:31:c7:89:34:58: 50:f5:b8:dd:33:ba:84:fb:26:13:c2:15:43:e1:03: ff:f6:aa:53:b3:64:00:dc:7c:94:f5:39:7b:e4:56: 2f:f0:cc:14:34:12:5e:19:79:1d:b9:4c:87:e2:11: c2:02:53:f3:d2:f2:05:04:bb:1c:a9:22:19:dd:d4: fc:8b:ad:4b:7b:31:20:a6:f9:98:18:15:60:36:43: 24:ac:8c:7f:0c:af:1c:c6:a5:c9:6f:36:dc:56:32: 9d:00:5d:6d:b7:e5:a4:e4:9d:29:03:81:c0:7b:64: 5d:d3:ad:50:90:f4:e1:98:a4:d2:68:81:a1:f4:ff: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213334 Signature Algorithm: sha256WithRSAEncryption 43:f8:56:1d:e5:2d:37:77:0d:fd:cf:d8:52:f5:e5:77:2a:d1: 1b:f7:bc:14:c8:4e:93:0c:a9:7f:3c:31:98:c7:b8:01:3f:57: 34:4d:84:01:f5:62:c5:3b:d7:2e:e0:ab:69:92:af:e4:d8:ae: 7d:1e:a4:75:47:87:41:56:47:62:0e:5d:bf:60:71:3d:94:ba: 6f:5a:3e:5e:a0:ca:55:28:27:3e:02:09:a8:86:da:b3:55:eb: e2:72:50:b3:a7:c1:89:20:51:b9:1f:18:c6:2b:e8:b9:7e:de: e8:31:5b:d4:db:08:f3:6a:2c:1c:39:fc:3b:4f:62:d9:21:fb: 75:83:54:08:3d:a0:5a:44:e6:dd:a2:0e:9d:47:33:5c:ce:f4: 37:a8:80:c8:60:fb:87:04:1f:b3:83:02:0b:86:24:da:8d:c3: fa:24:42:8f:b2:10:4b:7e:1a:57:fa:f2:7f:95:48:e5:0a:d0: 4e:ee:b2:06:8a:f2:76:34:a4:c0:2c:e0:cb:66:c1:4f:b8:a1: 54:21:e7:4e:3c:ce:f8:47:b6:be:4f:80:fe:da:86:0f:2d:f6: 12:7d:3f:aa:e8:6f:33:3d:f3:f3:cf:25:ca:4e:24:c4:a9:0e: 75:ea:82:eb:a3:d2:fe:32:49:7f:23:8e:18:14:0e:fb:3c:ea: 6d:41:f0:a4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9yhitLlk1j9Yi82EfayHtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzFlZGIyNTU0ZDI1ZDFjMTBkODcxNGU4MWQzNmNjMjk1ZDk2YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w3WGHiUfQWnvi9lUPIBT2KhMkPS PyMcT7lH151dRVhrufhAKqDYjvc7jtnPN9uAMZAJ6cg5qs3qR11Fm5Cpko5GmRel Lw7dv6lYQ277k6moC/GtsNb26lrTO8ohdPc5F9N3T7I1JFD8erCR6A8y9DkrUjtV F7hmjCwr4LaQzzPkMceJNFhQ9bjdM7qE+yYTwhVD4QP/9qpTs2QA3HyU9Tl75FYv 8MwUNBJeGXkduUyH4hHCAlPz0vIFBLscqSIZ3dT8i61LezEgpvmYGBVgNkMkrIx/ DK8cxqXJbzbcVjKdAF1tt+Wk5J0pA4HAe2Rd061QkPThmKTSaIGh9P8edwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFMe2yVU0l0cENhxToHTbMKV2Wv5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzZjNzM2 OC00YWNjLTRhMjMtODBhOS1jYTNjYTNkOTllNmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvNmM3MzY4 LTRhY2MtNGEyMy04MGE5LWNhM2NhM2Q5OWU2Yi8xL1V4N2JKVlRTWFJ3UTJIRk9n ZE5zd3BYWmFfay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBVjANBgkqhkiG9w0BAQsFAAOCAQEAQ/hWHeUtN3cN /c/YUvXldyrRG/e8FMhOkwypfzwxmMe4AT9XNE2EAfVixTvXLuCraZKv5NiufR6k dUeHQVZHYg5dv2BxPZS6b1o+XqDKVSgnPgIJqIbas1Xr4nJQs6fBiSBRuR8Yxivo uX7e6DFb1NsI82osHDn8O09i2SH7dYNUCD2gWkTm3aIOnUczXM70N6iAyGD7hwQf s4MCC4Yk2o3D+iRCj7IQS34aV/ryf5VI5QrQTu6yBorydjSkwCzgy2bBT7ihVCHn TjzO+Ee2vk+A/tqGDy32En0/quhvMz3z888lyk4kxKkOdeqC66PS/jJJfyOOGBQO +zzqbUHwpA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:26 2026 by rpki-client